Privacy Policy

We may modify this Privacy Policy from time to time. When changes are made, we will update the "Last revised" date at the top of this page, post the updated version on the Services, and provide any additional notice required by applicable law (such as by email or an in-platform notification for material changes).

If you do not agree to any updates to this Privacy Policy, please discontinue your access and use of the Services. Continued use of the Services following notice of changes constitutes your acceptance of the revised Privacy Policy.

When you access or use the Services, we collect certain information about you from different sources.

Information You Provide to Us

Certain features of the Services require you to provide information directly. You may elect not to provide this information, but doing so may prevent you from using or accessing those features. Information that you directly submit through our Services includes:

• Contact information: such as your name, email address, phone number, and the name and physical location of your gym, studio, or sports facility.
• Account and profile information: such as username, password (hashed), staff roles, permissions, and profile preferences. If you register an account, you are responsible for maintaining credential security. Please notify us immediately if you suspect unauthorized access.
• Payment and billing information: when subscribing to paid tiers or processing member transactions, payment card details and billing addresses are collected and processed on our behalf by our third-party payment providers (such as Stripe). We do not store full payment card numbers on our servers.
• Facility and Member Management Data: data entered or managed by facility operators, including member roster details, membership plan tiers, check-in logs, attendance records, renewal schedules, and biometric device configuration identifiers.
• Communications: information you choose to provide in communications with us, including demo booking inquiries, customer support requests, feedback, and email or WhatsApp correspondences.

Information Collected Automatically

We, and third-party partners on our behalf, automatically collect certain information about your interactions with the Services and emails, including through cookies, web beacons, and tracking technologies ("Tracking Technologies"). We collect and use this information to personalize your experience, run analytics, diagnose technical issues, and improve platform performance.

Such automatically collected information includes:

• Device information: device type, operating system, screen resolution, unique device identifiers, IP address, preferred language, and browser type.
• Location information: approximate geographic location derived from your IP address and time zone settings.
• Usage and clickstream data: pages visited, links clicked, features utilized, date and time stamps, error logs, and session duration.

Information Collected from Other Sources

We may obtain information about you from outside sources, including:

• Authentication and login partners: when you log in using third-party single sign-on providers (such as Google), we receive your name, verified email address, and profile identifiers to maintain your account.
• Hardware device integrations: when integrating compatible biometric attendance machines (e.g., ESSL, Timmy, ZKTeco), we receive verification logs, device timestamps, and attendance status records.
• Social media platforms: when you interact with AspireFit or AspireDev on channels such as LinkedIn, Instagram, or X.

Any information received from outside sources will be handled in accordance with this Privacy Policy. We are not responsible for the accuracy of information provided by third parties or their respective privacy policies.

We use the information collected under this Privacy Policy to:

• Provide and operate the Services: deliver AspireFit features, manage member records, automate attendance verification, and support day-to-day fitness facility workflows.
• Process transactions: manage subscription billing, invoices, receipts, and renewal notifications.
• Personalize your experience: remember your device sessions, dashboard customizations, and user interface preferences.
• Safety and security: detect and prevent fraud, unauthorized access, abuse, and illegal activity, and enforce our Terms of Service.
• Diagnostics and maintenance: conduct troubleshooting, system maintenance, performance monitoring, and debugging.
• Research and development: analyze usage trends to develop new features, refine platform performance, and optimize facility management tools.
• Communications and support:provide customer support, send transactional alerts (booking confirmations, security notices), and send product updates. You may opt out of non-transactional marketing emails at any time via the "unsubscribe" link.
• Legal compliance: comply with applicable legal obligations, regulatory requirements, and industry standards.

We may also aggregate or de-identify information such that it cannot reasonably be used to identify you, and use such anonymized data for any lawful purpose, including industry benchmarks and research.

We do not sell your personal data. We may disclose your information with third parties in the following circumstances:

• Vendors and service providers: third parties that provide infrastructure, hosting, payment processing, transactional email and SMS delivery, customer relationship management, and analytics services on our behalf.
• With your consent or direction: when you choose to connect third-party integrations, biometric devices, or export member reports.
• Affiliates and corporate entities: to entities within the AspireDev corporate group for operational and service delivery purposes.
• Business transactions: in connection with or during negotiations of any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Professional advisors: including legal counsel, accountants, auditors, and insurers in connection with professional advisory services.
• Legal and security compliance: to law enforcement, regulatory bodies, judicial authorities, or other public agencies to comply with legal obligations, court orders, or to protect the rights, property, and safety of AspireDev, AspireFit users, or the public.

We use Tracking Technologies to operate our website, remember your preferences, and collect analytics data. Most browsers accept cookies automatically, but you can adjust your browser settings to refuse or delete them. Note that blocking essential cookies may affect the functionality of the Services.

For comprehensive details regarding the specific cookies we set and how you can manage your preferences, please review our Cookie Policy.

Like many web services, our website does not currently alter its behavior in response to "Do Not Track" (DNT) browser signals. You can, however, exercise direct control over optional cookie categories through our on-site cookie preferences banner.

Certain features of the Services allow you to interact with third-party platforms, such as LinkedIn, X, Instagram, and WhatsApp ("Social Features"). Use of Social Features may allow third parties to collect or receive information regarding your interaction. If you use these features, your activity may be governed by the privacy policies of those respective third-party platforms.

The Services may contain links to external websites, third-party payment gateways, or integrations with third-party hardware manufacturers (such as biometric attendance hardware). We do not control and are not responsible for the privacy practices, security, or content of third-party platforms. We encourage you to review their independent terms and privacy notices before sharing personal data.

The Services are designed for business operators, gyms, fitness studios, and facilities, and are not intended for children under 13 years of age. We do not knowingly collect personal information directly from children under 13.

Where fitness facilities provide classes or memberships for minors, the facility operator is solely responsible for obtaining verified parental or guardian consent in accordance with applicable laws before inputting minor data into the platform. If we become aware that we have collected personal information from a child without required consent, we will take prompt steps to delete that information.

We implement industry-standard technical, administrative, and physical safeguards to protect personal data against unauthorized access, loss, destruction, alteration, or disclosure. These measures include TLS encryption in transit, AES-256 encryption for sensitive data at rest, role-based access controls, and continuous system monitoring.

Please note that no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, and we advise using strong, unique passwords and secure connection protocols.

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, maintain active accounts, resolve disputes, and comply with legal, tax, and regulatory retention requirements.

Depending on your jurisdiction (such as under India's Digital Personal Data Protection Act or the GDPR where applicable), you may have rights to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request erasure or deletion of your personal information
• Restrict or object to specific processing activities
• Request data portability in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent

If you are a member of a gym or facility that uses AspireFit, please direct data access or deletion requests directly to your facility operator, as they are the primary data controller. For direct user or account inquiries, please contact us using the details below.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact: