How the DravoFit Staff app handles information.

Who is responsible

The gym you work for decides who is on its team and what each person can do. The members' information you see and record in the app is the gym's record of its members, and the gym is responsible for it.

DravoFit provides the software the gym runs on and publishes the app. We hold and process this information for the gym, to run the service it uses, and not for any purpose of our own.

What is collected about you

• Your account: the email address your gym invited you with, your role, the branches you work at, whether your account is active or suspended, when you were invited and when you first signed in.
• Your sign-in: you sign in with that email address and a one-time code sent to it. The sign-in service keeps your sign-in sessions.
• The work you do in the app, such as the check-ins you record, the memberships you sell and the payments you take, with a record of the actions you take. It is kept under your account so the gym knows who did what.

Members' information you handle

To do your job, the app shows you members' information and lets you record it, on the gym's behalf:

• their names, email addresses, phone numbers, dates of birth and member numbers;
• their memberships, freezes, charges, payments and receipts, and the payment proofs they send with the gym's decision on each;
• their check-ins and class bookings;
• the forms they accept, including when a member reads and accepts a form on your device at reception;
• their requests, such as a change of contact details or deleting their account;
• follow-up tasks about members, with their notes, and the announcements the gym sends to members.

The member app's privacy policy describes this information from the member's side.

The app uses your camera only while the reception scanner is open, to read members' check-in codes; only the code it reads is sent. It does not read your photos or files. On your phone the app keeps which gym it belongs to, and, in the phone's secure storage, your sign-in and a few working details, such as the branch you last worked at. It keeps no copy of members' information for offline use. A member's PDF proof of payment opens outside the app, in another app on your phone, from a link that lasts a few minutes.

Why it is collected

• To sign you in and keep your account secure.
• To let your gym decide who is on its team and what each person can see and do.
• To run the gym's work: reception, members, memberships, classes and payments.
• To keep an accurate record of who did what, which the gym needs for its financial records and its own accountability.

No advertising, no analytics

The app collects nothing for advertising. It contains no advertising and no third-party analytics or tracking. Information is not sold, and it is not shared with anyone for their own marketing.

Who processes it

We use two service providers, each only for the job described here:

• Contabo hosts the servers and stores uploaded files, in the European Union.
• ZeptoMail, a Zoho service, sends email: your invitation and your sign-in codes. Its account is in the United States.

So information is stored outside Egypt, in the European Union, and an email to you passes through the United States. The Staff app uses no push notification service.

Information is encrypted in transit: the app talks to our servers over HTTPS, and our servers reach the email provider over an encrypted connection too.

How long it is kept

Your account is kept while you are on your gym's team. When you leave, the gym's owner or a manager suspends you in the app: you are signed out at once and cannot sign in again unless the gym reinstates you. An invitation that was never used can be cancelled instead, which takes you off the team.

Once you have done work at the gym, the records of that work stay with the gym, under your account: they are part of its financial and business records. Members' information stays with the gym, under the gym's own rules and the member app's policy.

Your rights

You can ask to see the information held about you, to have it corrected, and to have it deleted. Your gym's owner can answer most requests. You can also write to us at support@dravofit.com, and we will pass your request to your gym and help it answer.

A member who asks about their own information should ask the gym, or see the member app's privacy policy.

If this changes

If the app starts collecting something new, or uses a new provider, this page will change first, and the date at the top will say when.

Contact

Questions about this policy: support@dravofit.com.