PTLog provides management software to gyms. For member data the gym itself is the DATA CONTROLLER; PTLog processes that data only on the gym's behalf and on its instructions.
1. Data we process
Name, email, phone and date of birth.
Measurements, photos and training records entered by the gym.
Check-in records and session history.
Payment records; card details never reach us and stay with the payment provider.
Technical records: session, device and error logs.
2. How data is used
Running the service: membership, sessions, packages and progress.
Notifications and reminders the gym has switched on.
AI summaries and reports, where the gym has enabled them.
Security, abuse prevention and legal obligations.
3. Security
Each gym's data is separated at the database level; no gym can see another gym's records.
Connections are encrypted and backups are kept encrypted.
Every change is written to an audit trail and deletions can be undone.
4. Third parties
Hosting and database: Supabase and Vercel.
Email, payment and AI providers the gym has enabled.
Data is never sold, rented or shared for marketing.
5. Cookies
Only essential cookies for session, language and theme.
No advertising or tracking cookies.
6. Your rights
Access, correction and erasure.
Objection to processing and portability.
Requests go to your gym first; PTLog acts on the gym's instruction.