Privacy Policy

Who we are

Garnia FitBook is class booking and training software operated by the facility operator for the gyms and fitness facilities that use it. Your facility decides who may see your information inside the app.

What we collect

• Account details — your name, email address and password (stored only as a one-way hash).
• Contact and profile details — phone number, date of birth, gender and emergency contact, where you or your facility provide them.
• Membership records — which facility you belong to, your start date, session allowance and guest passes.
• Booking and attendance — the classes you book, cancel, join a waitlist for, and check in to.
• Training results — workout scores, benchmark results and personal records you record.
• Health and fitness information — body measurements and progress photos, only if you choose to add them.
• Security information — the time of your last sign-in and, if you turn on two-factor authentication, an encrypted authenticator secret or a short-lived emailed code.
• Notification details — if you allow push notifications, the anonymous push endpoint your browser or device issues.

We do not collect your location, contacts, calendar, microphone or camera roll. Photos are only ever those you upload yourself.

How we use it

To run your membership: to take and manage bookings, record attendance, show your training history, send the notifications and emails you have asked for, keep your account secure, and give your facility the administrative view it needs to operate. We do not sell your information, and we do not use it for advertising or profiling.

Who can see it

• Staff and coaches at your own facility, to run classes and manage your membership.
• Other members, but only where you allow it — leaderboard and benchmark visibility and progress-photo sharing are each your own setting, and each can be turned off in your profile.
• Service providers that host the application, its database and its outbound email.

We do not share your information with anyone else unless the law requires it.

How long we keep it

While your account is active, and afterwards only for as long as your facility needs it for its own records and legal obligations. You can delete your account from your profile page at any time, which removes your personal details along with the bookings, results, measurements and photos attached to them.

Your choices

• See and correct your details from your profile page.
• Turn sharing on or off for leaderboards, benchmarks and progress photos.
• Turn push notifications off in the app or in your device settings.
• Turn two-factor authentication on, or off again where your facility does not require it.
• Delete your account, and with it the data attached to it.

Under New Zealand privacy law you may also ask us for a copy of the information we hold about you, and ask us to correct it.

Keeping it safe

The app is served only over an encrypted connection. Passwords are hashed and never stored in a readable form, and authenticator secrets are encrypted at rest. Access inside the app is limited by role, and each facility's data is kept separate from every other facility's.

Children

Accounts are created by a facility for its members. Where a member is under the age at which they can consent for themselves, the facility is responsible for obtaining a parent or guardian's consent first.

Changes

If this policy changes we will update the date at the top of this page, and tell you in the app if the change is a significant one.

Contact

Questions, or a request about your own information: contact your facility directly.