Privacy notice

easygym is a product of Primus Narrative L.L.C-FZ, Meydan Free Zone, Dubai, United Arab Emirates (“we”, “us”).

For any question about this notice or about your data, write to slava@easygym.me.

We email small fitness studios in the UAE to tell them about easygym. These emails come from Slava (Slava Baranskyi) at slava@easygym.me.

What we collect

• the business name;
• contact details the business published itself: its email address, Instagram account and phone number;
• the address of the page where those details were published;
• public Google reviews of the studio, which we read in aggregate to understand the studio. We do not collect who wrote them.

Where it comes from

Only from places where the business published its details itself: its website, its Google Maps listing or its Instagram bio. We do not buy contact lists and do not use services that look up personal email addresses.

Why

To tell the business about easygym, and to make sure that a business that asked us to stop is never contacted again.

Legal basis

The business made these contact details public itself. We handle them in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

No tracking

Our emails contain no tracking pixels: we do not track whether you open them.

How to opt out

Reply “stop” to any of our emails, or use the form at easygym.me/unsubscribe. We act on it the same day and permanently, across all our channels: email, Instagram, LinkedIn, Facebook and visits in person.

How long we keep it

Unless you become a customer or ask us to stop, we delete what we hold about your business 12 months after our last contact with you. After you opt out, we keep only what is needed to honour your request: your email address or domain on our do-not-contact list, so that you are not contacted again.

Your rights

You can ask us what data we hold about you, ask us to correct or delete it, or object to being contacted. Write to slava@easygym.me.

Visit statistics

On easygym.me, including club websites hosted on easygym, we count visits with Google Analytics 4, which sets its own cookies. Member area, checkout and payment pages do not load it.

Language

When you choose a language, we remember it in a cookie for one year.

Demo calls

The form for booking a demo call is provided by Calendly. It loads only when you open it.

Maps

Club websites show the club’s location on an OpenStreetMap map, which loads from OpenStreetMap when you scroll to it.

Unsubscribe form

What you enter in the unsubscribe form — your email address and, if you give one, a reason — is emailed to slava@easygym.me so that we can act on it. Your email address is also written to our server log.

Who decides

A club or network that uses easygym decides which personal data of its members and staff it keeps in easygym and why: the club is the controller of that data. We process it on the club’s behalf, only to provide the service and on the club’s instructions. For the club owner’s own account and our invoices to the club, we are the controller.

What is processed

• Members: name, email, phone, date of birth, gender, address, photo, notes and extra fields the club adds; memberships, bookings, visits, payments, messages with the club, signed documents and consents.
• Owners and staff: name, email, phone, role, password (stored only as a scrypt hash) and a log of the changes they make.
• IP address and browser details, recorded when someone accepts terms, consents to automatic card payments, signs a document or requests a sign-up link.
• Card details are entered on Stripe’s payment page, and easygym never receives the full card number or security code. For a card saved with the member’s consent, we keep only Stripe’s card token, the card brand, the masked number and the expiry date.
• Questions staff ask the administrative AI assistant, and its answers. In the WhatsApp pilot, member requests, replies, channel identifiers and the linked club member account are also processed. The member assistant receives a limited public or member-owned service context.

Where it is stored

easygym’s servers run on Vercel in its Frankfurt region (fra1). The database and uploaded images are stored with Supabase in the AWS eu-central-1 region (Frankfurt, Germany). Images a club uploads for its website — logo, covers, gallery — are publicly accessible, because visitors’ browsers show them.

Service providers

We use these providers to run easygym:

• Vercel — hosting of the easygym admin, club websites and member areas;
• Supabase — the database and image storage;
• Resend — sending email from easygym and receiving replies to it;
• Stripe — card payments. Members pay a club through the club’s own Stripe account, under the club’s own agreement with Stripe; clubs pay for easygym through ours;
• an external language-model service — passes AI assistant requests to language models. Each request requires zero data retention and excludes providers that collect data;
• Mux — storing and streaming recordings of online classes that clubs upload;
• Meta WhatsApp Business Platform — club-owned WhatsApp messages and account identifiers in the WhatsApp pilot. The configured messaging partner provides the agreed delivery and billing service;
• Google Analytics — visit statistics for public pages;
• Calendly — booking demo calls.

Which data the AI assistant sends to the language model and which stays in easygym is explained on the page “AI analytics assistant”.

How long we keep it

• Club data is kept while the club uses easygym. After the club cancels, we delete its data on its written request, except data we must keep by law.
• Administrative AI assistant conversations are deleted after 90 days. WhatsApp conversations form part of the club’s message history and follow the club-data retention described above.

Security

• Each club’s data is separated in the database by row-level security.
• Passwords are stored only as scrypt hashes. Login cookies carry a random token, and only its hash is stored.
• The keys that connect a club’s Stripe account are stored encrypted (AES-256-GCM).
• Our staff open a club’s admin only in support mode: with a stated reason, for a limited time and recorded in a log the club can see.

Your rights

Owners and staff can ask us for access to their data, its correction or deletion, or object to its use, by writing to slava@easygym.me. Members should contact their club, which decides about their data; you can also write to us at slava@easygym.me.

When we change this notice, we publish the new version on this page with a new effective date.

Primus Narrative L.L.C-FZ, Meydan Free Zone, Dubai, United Arab Emirates. Email: slava@easygym.me.