Privacy Policy

Effective November 10, 2026

This policy explains what information the Beat Gym app (the "app") collects, how it is used and shared, and the choices you have. The app is operated by STLR for Information Technology ("we", "us") for BEAT gym members and staff.

In short: we collect what we need to run your membership and the gym. We don't show ads, we don't track you across other companies' apps or websites, and we don't sell your information.

Information we collect

Account information

• Email address, used to sign you in with a one-time code we email to you. We don't ask for your phone number.
• Your name and your home branch.
• A referral code we create for you.
• For gym staff only: a work email address and a password, set up for them by a BEAT administrator or their manager. Staff sign in with their password, not with emailed codes. Passwords are stored only in hashed form.

Membership and activity

• Your membership plan and status, bundles and how many sessions are left.
• Class bookings, waitlist entries and cancellations.
• Gym check-ins: the date, time and branch of each visit.
• Loyalty points, your tier, and rewards you redeem.

Purchases

• What you buy, the price, the payment method (cash, card or Apple Pay) and the payment status.
• Card and Apple Pay payments are handled by our payment provider, Kashier. You enter your card details on Kashier's payment page, and we never receive or store your full card number.
• When you pay by card or Apple Pay, we send Kashier the order amount and the name of what you're buying, your email address and an internal account reference. We don't send your name, phone number or address.

People you share with

• When you share sessions, send a guest pass or invite a friend, we store the email address you enter and, for guest passes and invites, the name you give.
• Contacts access is optional. If you allow it, the app reads your contacts on your device only so you can pick a friend's email address to share sessions, send a guest pass or send an invite. Only the one email address you choose to send to (and the contact's name, for guest passes and invites) is sent to us. We do not upload your address book. Without contacts access you can type the email address instead.

Device and technical information

• A push notification token, if you allow notifications.
• Server records of requests, including IP address and time, used to keep the service secure (for example, to block repeated failed sign-in attempts).
• Error reports from our servers, sent to our error-monitoring provider with personal details such as passwords and codes removed.

Camera and photos

• The camera is used only by gym staff to scan member codes at reception. Camera images are not stored or sent to us.
• Managers can choose a photo from their library for the banner shown in the app. The app doesn't access members' photos.

How we use your information

• To provide the app: signing in, bookings, check-in, purchases, sessions, guest passes and rewards.
• To run the gym: front desk staff verify entry and record check-ins and cash payments; managers see attendance, members and sales.
• To email you sign-in codes, and to send notifications you've allowed, such as a waitlist spot opening for you.
• To email the people you choose when you share sessions, send a guest pass or invite a friend. We only email someone else when you ask us to.
• To keep the service secure and prevent fraud and abuse.
• To meet legal, tax and accounting obligations.

How we share information

• Gym staff. When front desk staff scan your code they see your name, plan and visit status. Managers can see member and activity information they need to run the gym.
• People you share with. When you send sessions, a guest pass or an invite, we email the address you entered (or notify them in the app if they already have an account). The message includes your first name and, for invites, your referral code.
• Service providers that process information for us and only on our instructions: hosting and file storage, email delivery, push notifications (Expo and Apple Push Notification service), payments (Kashier) and error monitoring (Sentry).
• Legal reasons. If the law requires it, or to protect the rights, safety and property of our members, staff or others.

We do not sell your personal information and we do not share it for advertising.

How long we keep it

We keep your information while your account is active. Sign-in codes expire within minutes. When you delete your account, we erase your name, email address and notification tokens right away and end every session. Any other personal information is deleted or anonymized within 30 days. Records we must keep by law, such as payment and accounting records, are kept without your name or email address.

Your choices and rights

• Access and correction. You can see your details and activity in the app and change your home branch there. To correct your name or anything else, contact us.
• Notifications, contacts and camera. You can allow or turn off these permissions at any time in your iPhone's Settings.
• Deleting your account. You can delete your account in the app: open Profile, tap Delete account and confirm. Any sessions, guest passes and points you have left are lost. You can also email us from the email address you use in the app (or tell us that address) and we'll delete your account after confirming the request with you. Staff accounts are removed by an administrator.
• Depending on where you live, you may have other rights over your information. Contact us and we'll help.

Security

The app talks to our servers over encrypted connections. Sign-in codes and passwords are stored only in hashed form, sign-in sessions are kept in your device's secure storage, and check-in codes expire within seconds. No system is perfectly secure, but we work to protect your information.

Children

The app is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

Where information is processed

Your information may be processed in Egypt and in other countries where our service providers operate. We take steps to keep it protected wherever it is processed.

Changes to this policy

We may update this policy from time to time. We'll post the new version on this page with a new effective date, and tell you in the app about significant changes.