Privacy policy

For member and staff data that a gym enters into XO GYM, the gym is the data controller and XO Software acts as a processor on its behalf, following its instructions and only to provide the service.

For data you send us directly through this site (such as the contact form), XO Software is the data controller.

Contact form: your name, gym name, mobile number, and anything you choose to add — email, city, number of branches and members, and your message — plus the page and visit source (such as campaign links).

Limited technical data to protect the form from spam: a hash of your IP address (we never store the address itself) and your browser type.

Aggregated visit statistics through Cloudflare Web Analytics, which uses no cookies and doesn't track you across sites.

The interactive demo runs entirely in your browser; what you do there is stored in your browser and never sent to us.

To contact you about your request, prepare a quote or demo, and improve the site and service.

We don't sell personal data, and we never use gym members' data for anything other than providing the service to the gym.

The platform is hosted on servers inside Egypt.

Each gym has its own separate database; personal documents are stored encrypted; access is governed by roles and permissions, with an audit log of important actions and daily backups.

Two-factor authentication is mandatory for platform team accounts with admin access, and any support access to a gym's account is time-limited and recorded in that gym's own audit log.

We share data only with service providers that help us run the platform (such as hosting and email) under contractual confidentiality and protection obligations, or when the law requires it.

Some third-party services (such as payment gateways or WhatsApp Business) are enabled only at the gym's request and are subject to their providers' terms.

We keep contact requests for as long as our business conversation with you continues, then delete or anonymise them; you can ask us to delete them at any time.

We keep a gym's data for the duration of its subscription and, after it ends, for a period set in the contract so the gym can export its data; it is then deleted, and backups expire on their normal cycle.

You may ask to access, correct or delete your data, or object to its processing, as provided by applicable law.

If you are a member of a gym that uses XO GYM, contact your gym first, as it is responsible for your data; we will help it fulfil your request.

We may update this policy from time to time and will publish the updated version on this page with its date.