Home/Legal/Security

Your data, only yours.

Isolation at the database level. No trackers. No sharing.

How we protect it

Six commitments, no fine print.

What we do so your gym's and your members' data stays where it belongs.

ISOLATION

Row-level security

Every database row carries the ID of the gym that owns it. Postgres rejects reads from anyone else. We don't rely on the application to do it.

EXPORT

Always in CSV

Members, plans, payments, attendance: everything exports to CSV at any time, from the dashboard, without asking.

RETENTION

30 days after

If you cancel, your data stays for 30 days so you have time to change your mind. After that, it's permanently removed.

PAYMENTS

Transfer with proof

We never touch your money. You upload the proof (PDF or image) and it gets validated. The flow leaves an auditable record.

AUTHENTICATION

Encrypted sessions

Passwords are hashed with bcrypt. Sessions use HTTP-only cookies, secure in production, with strict SameSite.

TRACKING

Zero external analytics

No Google Analytics. No Facebook Pixel. No third-party cookies. Only minimal technical logs for debugging.

AYour gym requests memberstenant A

GAnother gym requests memberstenant G

RLS

membersyour gym's view

Ana Machavatenant Avisible

Edson Cossatenant Avisible

••••••••tenant Gblocked

Have a concern? Let's talk before you sign.

For compliance or contract questions, write to us. We don't hide technical details.

COLOUR