AnyGym / Legal
Privacy policy
Last updated 29 October 2026. AnyGym is a product of Dheeram. This policy explains what we collect, why, who sees it and how you can delete it.
What we collect
- Early-access requests (this website): name, phone, email, city, approximate time zone, and for gyms the gym name, member count and machine model.
- Member accounts (when the app launches): name, phone, email, date of birth or anniversary if you add them, wallet and payment records, and visit logs (gym, entry and exit time).
- Face data: a selfie and the face template made from it, used only for door access.
- Gym accounts: business details, prices, packages, payout details and device identifiers.
Why we use it
- To give you early access and contact you about AnyGym in your city
- To open doors you are allowed through and bill time you actually used
- To pay gyms for visits and show them their own reports
- To prevent fraud and keep the service secure
- To meet legal, tax and accounting obligations
Face (biometric) data
We collect face data only with your explicit consent. It is sent only to the devices of gyms you choose, used only to verify you at their door, and removed from a gym's device when your access there ends. We never sell biometric data or use it for advertising. You can withdraw consent and delete it from the app at any time; access by face then stops.
Who we share data with
- Gyms you visit or join — your name, photo/face template for their door, and your visits to their gym. Gyms do not see your visits elsewhere.
- Service providers — hosting, payment processing, messaging and the Cams Biometrics device cloud, under contracts that limit their use.
- Authorities — when the law requires it.
- We do not sell personal data.
How long we keep it
Early-access requests are kept until launch in your city plus 12 months, or until you ask us to delete them. Face data is removed when your access ends or you withdraw consent. Billing and tax records are kept as long as the law requires.
Your rights
You can ask to access, correct or delete your data, withdraw consent, or raise a grievance by writing to contact@dheeram.org. We respond within 30 days. Depending on where you live (for example under India's Digital Personal Data Protection Act or the EU/UK GDPR) you may have further rights, including complaining to your data-protection authority.
Security
Data is encrypted in transit, access is limited to staff who need it, and face templates are stored separately from contact details.
Changes
We'll update this page and change the date above when this policy changes, and tell registered users about significant changes.