Skip to content
Jimwala
Start free

Privacy Policy

Last updated

Jimwala runs Jimwala, gym management software at jimwala.com. This policy explains what personal data we handle, why, who we share it with, and the choices you have. We follow the Information Technology Act, 2000, the SPDI Rules, 2011 and the Digital Personal Data Protection Act, 2023.

Two groups of people are affected. Gym owners and their staff use Jimwala directly, and we are responsible for their account details. Gym members and website visitors give their details to a gym. For them, the gym decides what is collected and why, and we handle the data on the gym's behalf.

1. What we collect

From gym owners and staff:

  • Name, mobile number, email address, gym name and city, and your role in the gym.
  • Login codes (we keep only a scrambled copy, and it expires after five minutes).
  • The plan you choose and the payments you make to us.

2. What gyms put into Jimwala

A gym owner or staff member can add details about members and visitors. Depending on how the gym uses the software, this can include:

  • A member's name, mobile number, email, gender, date of birth, address and photo.
  • Blood group, emergency contact and notes. These can be health-related, so a gym should collect them only with the member's clear consent.
  • Membership plans, fee dues, invoices, payments, discounts and attendance (QR check-ins).
  • Enquiries from people who ask about joining, including anything typed into the gym website's enquiry form.
  • Product sales, expenses and pictures and videos for the gym website.

3. Payments

Payments are handled by Razorpay. Your card, UPI, net banking or wallet details go to Razorpay on its own secure page and are never seen or stored by us. We receive the result of the payment (paid or not, the amount, the payment reference and the payer's name and phone number).

4. What we use it for

  • To create your account, sign you in and run the features you use.
  • To send WhatsApp messages the gym asks us to send, such as fee reminders, receipts, expiry notices and login codes.
  • To take payments, keep accounting records and meet legal and tax duties.
  • To keep the service secure, stop misuse and fix problems.
  • To answer support requests and to tell you about important changes to the service.

We do not sell personal data. We do not show advertising, and we do not use gym members' details to market our own products.

5. WhatsApp messages

Messages go through the WhatsApp Business Platform run by Meta, using message templates approved by WhatsApp. A message is sent only when a gym owner or staff member uses a feature that sends one (for example a fee reminder, a broadcast, or a login code). Each message uses a WhatsApp credit.

Gyms must have the member's permission to message them. If you do not want these messages, tell your gym, or write to us at info@jimwala.com with the number and we will stop messages to it. WhatsApp handles messages under its own privacy policy.

6. Who we share data with

We share data only with the companies that help us run the service, and only what they need:

  • Razorpay: to take payments.
  • Meta (WhatsApp Business Platform): to deliver messages.
  • ImageKit: to store and serve the pictures and videos gyms upload for their websites.
  • Fly.io, Neon and Upstash: hosting, our database and our message queue.
  • The authorities, if a court or the law requires it, or to protect people from harm or fraud.
  • A company that takes over Jimwala, if the business is ever sold. We would tell you first.

7. Where your data is stored

Our servers and database are in Singapore, so your data is stored and processed outside India. We choose providers that protect data with security controls, and we transfer data only as the Digital Personal Data Protection Act allows.

8. Cookies

We use two small cookies, both to keep you signed in:

  • gs_session keeps you signed in on the dashboard. It is essential and is used only on the dashboard address.
  • gs_in is a plain flag that tells the home page you are signed in, so we can take you to your dashboard. It holds no personal data.

9. How long we keep data

We keep data while your account is active. If you close your account, we delete or anonymise your data, usually within 90 days. We keep invoices, payment records and other accounting records for as long as Indian tax and accounting laws require.

10. How we protect it

  • Everything travels over HTTPS.
  • Each gym's data is kept apart at the database level, so one gym cannot see another's.
  • Sign-in needs a code sent to your WhatsApp number, and staff see only what their role allows.
  • We limit who at Jimwala can reach data and we log important actions.

No system is completely secure. If a breach affects your data, we will tell you and the authorities as the law requires.

11. Your rights

You can ask us to show you the data we hold about you, correct it, delete it, or stop using it for a purpose you agreed to. You can also withdraw your consent at any time, and nominate someone to exercise these rights for you.

If you are a gym member, please contact your gym first, because the gym holds your membership record. If you cannot reach the gym, write to us and we will help. We aim to reply within 30 days.

12. Delete your data

To delete your account and data, email info@jimwala.com from the email address or write from the mobile number you registered with, with the subject "Delete my data". We will confirm before we delete, because deleting cannot be undone. Deleting your account does not give you a refund (see our Refund and Cancellation Policy).

13. Children

Jimwala is for gym owners and staff aged 18 and over. Gyms that add members under 18 must get a parent's or guardian's consent first, as the law requires.

14. Grievance Officer

For a complaint about how your data is handled:

  • Grievance Officer: our support team
  • Email: info@jimwala.com

15. Changes to this policy

If we change this policy in a way that matters, we will update the date at the top and tell account owners. Using Jimwala after that means you accept the change.