Privacy Policy

If you are a gym member, your gym decides what to collect about you and why. They are the controller of that information. Nerro stores and processes it on their behalf, and acts on their instructions.

If you are a gym owner or staff member, Nerro is the controller of your account details.

Practically: if you want your member record changed or removed, your gym is the fastest route. You can also contact us directly and we will help.

Your gym creates your record. Depending on what they use, it may include:

• Your name, email address, phone number and date of birth
• A photo, if your gym takes one for the front desk
• Your membership: which plan, when it started, when it ends, whether it is frozen
• Your check-ins: the date and time you came in, and which branch
• Payments recorded against you, including the amount and whether it was cash, bank transfer or card
• Workouts you log yourself: exercises, sets, weights and personal bests
• Body measurements you enter yourself, such as weight and body composition
• Nutrition targets, if you train with a personal trainer who sets them

We never see or store your card details. Nerro records that a payment happened and how much it was. It does not take payments, so there is no card number, CVV or bank login anywhere in the system.

Name, email address, role, and which branch you work at. If you are a trainer, we also hold your commission rate and the clients assigned to you.

• To let you into the gym, which is what the check-in code is for
• To tell your gym when a membership is expiring or a payment is due
• To show you your own training history and progress
• To send you notifications from your gym, such as a reminder or a closure notice
• To let your gym see who is coming in less often, so they can get in touch
• To keep the service working, secure and free of abuse

Your gym and its staff, according to what their role allows. A receptionist sees the front desk, members and payments. A trainer sees only their own clients. Other members never see your record, though they may see your first name on a gym leaderboard if your gym uses one.

We use a small number of services to run Nerro:

• Supabase, which hosts the database and handles logins
• Vercel, which serves the website and the app’s backend
• Resend, which sends email such as invitations and password resets
• Expo, which delivers push notifications to phones

We do not sell your information, and we do not share it for advertising.

For as long as you are a member of a gym using Nerro, and for as long afterwards as that gym needs its own records. A gym is generally required to keep payment records for a period after you leave.

Deleting your account removes your personal details and your training history. Records the gym must keep for its own accounts, such as that a payment of a certain amount was made on a certain date, may remain without being linked to you.

You can delete your Nerro account yourself, from inside the member app, without asking anyone. It is under your profile. This removes your login and your personal data.

You can also email us at hello@nerro.app and we will do it for you.

You can ask for a copy of what we hold about you, ask us to correct anything wrong, and ask us to delete it. Write to hello@nerro.app and we will respond.

Data is encrypted in transit and at rest. Access is restricted by role at the database level, not just hidden in the interface, so a trainer cannot reach another trainer’s clients even by trying. Check-in codes expire within seconds and can only be used once.

Nerro is not intended for children under 13. If your gym signs up a member under 13, their parent or guardian should manage the account.

If this policy changes in a way that matters, we will say so on this page and update the date at the top.

hello@nerro.app. We are based in Pakistan and serve gyms in Lahore, Karachi, Islamabad and elsewhere.