Privacy Policy

Last updated: 2026. A starting template tailored for Fitmax — please have a lawyer review before relying on it.

1. Who we are

Fitmax (operated by Wizzora, "we", "us") provides software that gyms, sports clubs and martial-arts academies ("clubs") use to manage their members. For the data a club enters about its members, the club is the data controller and Fitmax acts as a data processor on the club's behalf. For account and usage data of club staff, Fitmax is the controller.

2. Information we collect

Account data: name, email, phone and role of club owners, staff and coaches.
Member data (entered by the club): profiles, photos, packages, attendance, payments, plans, measurements, waivers and notes (including optional medical notes the club records).
Biometric (optional): if a club enables face check-in/login, a numeric face descriptor is stored — never the raw photo as a biometric template — and only with the relevant person's involvement.
Payment data: processed by payment providers (e.g. Paymob, Stripe). We store transaction records and statuses, never full card numbers.
Usage & device data: logs needed to operate, secure and troubleshoot the service.

3. How we use it

To provide and improve the service: managing memberships, attendance, payments, communications, analytics and support for the club. We do not sell personal data or use member data for advertising.

4. Legal basis

We process data to perform our contract with the club, to comply with legal obligations, and on the basis of the club's and members' consent where required (e.g. marketing messages, biometric features).

5. Sharing

We share data only with the service providers needed to run Fitmax — hosting, payment processing (Paymob/Stripe), and email/WhatsApp delivery — and where required by law. These providers process data under their own terms.

6. Data retention

We keep data for as long as the club's account is active and as needed to provide the service or meet legal/accounting requirements. Clubs can edit or delete member records at any time; on account closure, data is deleted or anonymised after a reasonable grace period.

7. Security

Payment credentials and other sensitive secrets are encrypted at rest. Access is restricted by role, and each club's data is isolated from others. No method of transmission or storage is 100% secure, but we work to protect your data.

8. Your rights

Members may request access to, correction, export, or deletion of their data by contacting their club (the controller). Clubs and staff can exercise the same rights for their own account data by contacting us. We respond within a reasonable period as required by applicable law.

9. Children

Where a club enrolls minors, the club is responsible for obtaining the necessary parental/guardian consent before entering their data.

10. Changes

We may update this policy; material changes will be reflected by the "last updated" date and, where appropriate, an in-app notice.

11. Contact

Members: contact your club directly. Otherwise reach us at info@wizzora.app · 0128 701 9991. Governed by the laws of the Arab Republic of Egypt.