Privacy policy

Last updated: 01 Nov 2026

This policy explains how Raibs Technologies ("we", "us") collects and uses personal data when you use Raibs Gym Management Solution at https://gym.raibstechnologies.in (the "Service"). We follow the Information Technology Act, 2000, its rules, and the Digital Personal Data Protection Act, 2023 (DPDP Act).

Who is responsible for which data

Gym owners' account data (owner and staff names, emails, phone numbers, billing details): we decide how this is used, so we are the *data fiduciary*.
Members' data that a gym stores in the Service (member names, phone numbers, attendance, payments, fingerprint/face templates kept on door devices): the gym decides why it is collected, so the gym is the data fiduciary and we process it only on the gym's instructions as a *data processor*. Members should contact their gym first.

What we collect

Account details: name, email, mobile number, business name, address, GSTIN.
Billing: plan, invoices and payment status. Card/UPI details are handled by our payment partner (Razorpay) — we never see or store full card numbers.
Usage and device data: IP address, browser type, pages used, error logs, door-device connection logs.
Messages you send us for support.

Why we use it

To create and run your account and provide the Service.
To bill you, issue GST invoices and meet tax and legal duties.
To send service messages (security, renewals, outages). Marketing messages only with your consent; you can opt out at any time.
To keep the Service secure, prevent fraud and fix problems.

Sharing

We do not sell personal data. We share it only with service providers who help us run the Service (hosting, email/SMS/WhatsApp delivery, payment processing), under contracts that require them to protect it, or when the law requires.

Where data is kept and for how long

Data is stored on servers chosen by us, normally in India. We keep account data while your account is active and for up to 8 years afterwards where tax law requires; other data is deleted or anonymised within 90 days after the account is closed, unless the law needs us to keep it.

Security

Encrypted connections (HTTPS), hashed passwords, role-based access, signed links for payments and audit logs of staff actions. No system is perfectly secure; we will tell you and the authorities about a personal data breach as the law requires.

Your rights

You may ask to see, correct or erase your personal data, withdraw consent, and nominate someone to act for you. Write to the Grievance Officer below. We reply within 30 days.

Children

The Service is meant for businesses. Gyms must get verifiable consent of a parent or guardian before adding a member under 18.

Grievance Officer

Raibs Technologies, Raibs Technologies, 123 — sriram100044@gmail.com — +91 9080144071

Changes

We may update this policy. The date at the top shows the latest version; important changes are shown in the app.