Privacy Policy

1. Who We Are

RepDesk ("we", "us", "our") is a SaaS gym management platform that helps gym owners track memberships, send expiry reminders, and manage member records. Our service is accessible at repdesk.fit. For any privacy-related questions, contact us at hello@repdesk.fit.

2. Information We Collect

We collect information you provide directly when using RepDesk:

• Account information: Your name, email address, and password when you create an account.
• Gym profile data: Gym name, contact email, and country.
• Member data: Names, phone numbers, email addresses, and membership details of your gym members that you enter into RepDesk.
• Usage data: Pages visited, features used, and actions taken within the app (collected automatically).
• Payment information: Processed securely by our payment provider. We do not store full card details.

3. How We Use Your Information

• To provide, operate, and improve the RepDesk service.
• To send transactional emails - account confirmation, password resets, membership expiry reminders.
• To send product update emails and onboarding guidance (you may unsubscribe at any time).
• To process your subscription payments.
• To respond to support requests.
• To detect and prevent fraud or abuse.

4. Data Storage and Security

Your data is stored on Supabase (PostgreSQL), hosted on secure infrastructure in the United States. We use industry-standard encryption in transit (TLS) and at rest. Access to your data is restricted to authorized personnel only.

While we take reasonable precautions, no system is 100% secure. We encourage you to use a strong, unique password for your account.

5. Your Members' Data

You are the data controller for your gym members' personal information that you upload to RepDesk. We act as a data processor on your behalf. You are responsible for having appropriate consent or legal basis to store and process your members' data, and for informing them that their data is managed using a third-party platform.

6. Third-Party Services

RepDesk uses the following third-party services:

• Supabase - database and authentication
• Resend - transactional email delivery
• Vercel - hosting and deployment
• Google OAuth - optional sign-in (if you use "Continue with Google")

Each of these services has its own privacy policy. We only share the minimum data necessary for these services to function.

7. Cookies

RepDesk uses session cookies to keep you logged in. We do not use advertising or tracking cookies. No third-party analytics cookies are set without your knowledge.

8. Data Retention

We retain your account data for as long as your account is active. If you cancel and request deletion, we will delete your account data within 30 days, except where we are legally required to retain it (e.g. billing records).

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your data in a portable format.
• Opt out of marketing emails at any time.

To exercise any of these rights, email us at hello@repdesk.fit.

10. Children's Privacy

RepDesk is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. We will notify you by email or by posting a notice in the app at least 14 days before any material changes take effect. Continued use of RepDesk after changes constitutes acceptance.

12. Contact

Questions about this policy? Email us at hello@repdesk.fit.