Information We Collect & Consent
We collect information required to operate the gym dashboard. This includes owner and staff account credentials, gym member details (names, contact numbers, email addresses), membership plan structures, attendance records, and payment logs. Gym owners must obtain explicit, verifiable opt-in consent from members before entering their phone numbers into the dashboard to send automated notifications.
How We Use Your Data & Communication
Data is processed solely to provide dashboard features, compile membership metrics, monitor fee schedules, verify attendance check-ins, and prepare and send automated communication. We explicitly use Meta's WhatsApp messaging platform as our primary communication channel to deliver renewal alerts, payment receipts, and gym updates to members.
Data Access & Roles
asterisks operates as a data processor on behalf of gym owners. The gym owner (account administrator) has full access to their gym's member records, payment logs, attendance history, and staff data. Staff members have access only to features permitted by the gym owner. asterisks employees and systems do not access gym workspace data except for technical support when explicitly requested. Members' personal data is visible only to the gym owner and authorized staff of their respective gym.
Opt-Out & Unsubscribe Mechanism
Members have the right to unsubscribe from notifications at any time. A member can opt-out by replying with the keyword "STOP" directly to any automated WhatsApp message they receive, or by requesting the gym administration to toggle off automated reminders for their profile.
Third-Party Sharing with Meta/WhatsApp
To send automated reminders, we share member names, phone numbers, and relevant payment details (such as due dates and outstanding amounts) with Meta Platforms, Inc. via the WhatsApp Business API. This sharing is mandatory for the messaging feature to function. We do not sell or rent this data to any other third parties.
Data Retention Period
We retain personal and gym records for as long as the gym workspace remains active. Upon membership termination or workspace deletion, records are retained for a maximum period of 5 years to support financial audit trails and historical reports, after which they are permanently deleted unless requested sooner.
Data Security & Deletion Support
Your data is secured using HTTPS transport encryption and stored in secure cloud environments. Gym owners can request a full data export or ask for complete deletion of their account and all associated member records at any time by emailing hello@asterisks.app.
