Privacy Policy
This Privacy Policy explains how Inovexa ("we", "us", "our") collects, uses and protects information when you use the Wellness Management gym management software (the "Service"). By using the Service, you agree to this Policy.
1. Information We Collect
- Account information — name, email, phone number and gym details you provide when signing up.
- Business data you enter — member records (names, contact details, photos), payments, expenses and related information that you, as a gym owner, add to manage your gym.
- Payment information — processed by our payment partner Razorpay. We receive confirmation of payment but do not store your card or bank details.
- Technical data — basic device and usage information needed to operate and secure the Service.
2. How We Use Information
- To provide, operate and maintain the Service.
- To process subscriptions and send receipts and important notices.
- To provide customer support and improve the Service.
- To keep the Service secure and prevent misuse.
3. How Data Is Stored
Your data is stored securely using our backend infrastructure provider (Supabase). We apply access controls so that each gym account can only access its own data.
4. Sharing With Third Parties
We do not sell your personal information. We share data only with trusted service providers needed to run the Service, such as our payment processor (Razorpay) and hosting/infrastructure providers, and only to the extent necessary. We may disclose information if required by law.
4a. Facebook, Instagram and WhatsApp (Meta) Data
If a gym owner chooses to connect their own Facebook Page, Wellness Management receives the leads that people submit through that gym's own Facebook or Instagram lead ads: the name, phone number, email address and answers entered in the lead form, plus the name of the ad or campaign. We use this data only to add the lead to that gym's inquiry list inside Wellness Management, so the gym can follow up. We do not create, change or pay for ads, we do not read posts or messages, and we never use this data for our own marketing or share it with anyone else.
The Page access token is kept only on our server, in a table the app cannot read, and is never shown in the app or browser. The gym owner can disconnect a Page at any time from Inquiries → Lead Sources, which stops new leads immediately. Removing Wellness Management from the Page's Business Integrations on Facebook does the same. Leads already added stay in the gym's account until the gym deletes them or deletes its account (see Delete Your Account).
WhatsApp messages that a gym sends to its members through Wellness Management (receipts, reminders, greetings) are delivered using the WhatsApp Business Platform, and only the member's phone number and the message are shared with Meta for delivery.
5. Member Data Responsibility
As a gym owner using Wellness Management, you are the controller of the member data you enter. You are responsible for obtaining any necessary consent from your members for storing their information in the Service.
6. When Our Staff Can See Your Data
In normal operation nobody at Wellness Management opens your account. Our people work with aggregate figures (how many gyms, how many members, revenue totals) and with the details you send us yourself.
The one exception is Support Access. When you ask for help, you can generate a 6-digit code inside the app (Profile → Support Access) and read it to us. That lets a support person open your account exactly as you see it, for up to one hour. The session is shown to you on a bar at the top of your app while it runs, you can end it at any moment, it ends by itself when the time is up, and it is recorded permanently on that screen together with every change that was made. We do not ask for, and cannot see, your password.
If your app will not open at all, a Wellness Management super-admin may start such a session without your code. They must record a written reason, and that reason is shown to you on the same screen. Support Access can never be used to delete your account, change your login, alter your billing, or send messages to your members.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your account data by contacting us.
8. Security
We use reasonable technical and organisational measures to protect your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your Rights
You may request access to, correction of, or deletion of your personal data by emailing us. We will respond in line with applicable Indian data protection law.
10. Children
The Service is intended for gym owners and staff and is not directed at children under 18.
11. Changes to this Policy
We may update this Policy from time to time. The latest version will always be available on this page.
12. Contact
For privacy questions, email gymnexapp@gmail.com or WhatsApp +91 95292 80485.