Who we are
M4GYM is operated by Lead Softwares, Pakistan (“we”, “us”). For questions about this policy or your data, email support@m4gym.com.
M4GYM is used in two ways. When you train at a gym that uses M4GYM, the gym decides how your gym data is used (it is the controller) and we process it on the gym’s behalf. Your own account, your body measurements, your personal training and anything you do without a gym are controlled by us.
What we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account | Name, email address, password (held by Google Firebase, never by us), the sign-in provider you used | You, or Apple or Google when you sign in with them |
| Profile | Photo, phone number, date of birth, gender | You |
| Body and goals | Height, weight over time, goal weight, training goal, days you can train, injuries or limits you tell us about | You, during setup and when you log your weight |
| Training | Workout plans, finished workouts and sets, achievements, progress | You, your coach, and Ask M4 |
| Gym activity | Memberships and roles, check-ins, class bookings, appointments, issues you report, notes your coach keeps | You and your gym’s staff |
| Fees | Membership fees your gym records as paid, the amount, method and date | Your gym’s staff. We never see card numbers. |
| Subscriptions | Plan, status and renewal dates for a gym plan or personal coaching | Whop, our payment provider |
| Messages | Support tickets and replies, Ask M4 conversations, announcements | You, your gym and us |
| Location | Your position at the moment you check in, only if your gym requires check-in at the gym | Your phone, with your permission |
| Device and usage | App version, device model, operating system, push token, crash reports, which screens are used | Your device |
Body measurements, injuries and training goals can reveal information about your health. We collect them only to build and adjust your training, and only when you give them to us. You can leave any of them out.
How we use it
- To provide M4GYM: run your account, your gym’s console, check-ins, classes, plans and progress. (Contract.)
- To build your training: generate and adjust weekly plans from your goal, schedule and history. (Contract, and your consent for health-related details.)
- To keep you informed: notifications and reminders about workouts, classes, appointments, fees and support replies. You can turn reminders off in the app. (Contract and legitimate interest.)
- To take payment for subscriptions, through Whop. (Contract.)
- To keep M4GYM working and safe: fix crashes, prevent abuse and fraud, and enforce our Terms of Use. (Legitimate interest.)
- To improve M4GYM: understand which features are used, in aggregate. (Legitimate interest.)
- To answer you when you contact support. (Contract and legitimate interest.)
We do not sell your personal data, and we do not use it for advertising.
Ask M4 and AI
Ask M4 and the plan builder use OpenAI’s models. To answer you, we send the question and the context needed to answer it, such as your goal, training days, recent workouts or, for gym staff, the gym records the question is about. Your name and email are not needed for this and are not sent where we can avoid it. Under its API terms OpenAI does not use this data to train its models.
AI suggestions can be wrong. Your coach can review and change any plan, and nothing Ask M4 says is medical advice.
Who can see your data
- Your gym: the owner and managers of each gym you join see your profile, membership, check-ins, fees, bookings and the progress you share with the gym.
- Your coach: the coach assigned to you sees your goal, plans, workouts and progress so they can coach you.
- Other members: only what a gym chooses to show, such as a class list or a coach’s public profile. Your weight and training are never shown to other members.
- Our team: a small number of staff, when needed to run the service or answer a support request.
- Authorities: only when the law requires it, and we will push back on requests that are too broad.
If you leave a gym, it no longer sees your new activity. Your own progress stays with your account.
Service providers
We use these providers to run M4GYM. Each only gets what it needs for its job.
| Provider | What for |
|---|---|
| Google Firebase | Sign-in, push notifications and app usage analytics |
| Whop | Subscription checkout and billing |
| OpenAI | Ask M4 and plan suggestions |
| Cloudflare | Hosting the web console and storing logos and profile photos |
| Sentry | Crash and error reports |
| Titan Email | Sending invitations and account emails |
| Our cloud hosting provider | Running our servers and database |
How long we keep it
- Your account and training data: while you have an account.
- When you delete your account: removed at once from our live systems, and from backups within 30 days.
- Fees a gym recorded for you: kept by the gym as part of its business records, without your name or contact details, after you delete your account.
- Crash reports: 90 days. Support tickets: until you delete your account.
- Anything we must keep by law, for as long as the law requires.
Your rights and choices
Depending on where you live, you can ask us to:
- give you a copy of your data
- correct something that’s wrong (you can edit most of it yourself in the app)
- delete your data and your account
- restrict or object to some uses, or withdraw consent you gave
- send your data to you or someone else in a usable format
To delete your account, follow the steps on Delete your account. For anything else, email support@m4gym.com from the address on your account. We answer within 30 days. If your request is about data a gym controls, we will pass it to the gym and help them answer.
You can turn off notifications and location access in your phone’s settings at any time. If you’re in the EU or UK you can also complain to your local data protection authority.
Security
Data is encrypted in transit. Passwords are handled by Google Firebase, never stored by us. Access to production data is limited to the people who need it. No system is perfectly secure, so if we learn of a breach that affects you, we will tell you and the relevant authorities as the law requires.
Children
M4GYM is not meant for children under 13, and we don’t knowingly collect their data. A gym that adds members under 18 is responsible for getting a parent’s or guardian’s consent where the law requires it. If you believe a child has given us data, email us and we will delete it.
International transfers
Our providers may process data in countries other than yours, including the United States. Where the law requires it, we rely on safeguards such as standard contractual clauses.
Changes to this policy
If we change this policy in a way that matters, we will tell you in the app or by email before the change takes effect. The date at the top always shows the latest version.
Contact us
Lead Softwares, Pakistan
support@m4gym.com