Privacy policy

TheXL Gym app and website are operated by RECONCILE SOFTECH KGN PRIVATE LIMITED. This policy applies to the personal information processed through TheXL Gym services.

We collect information provided directly by you, by an authorised gym team member or by another person using our services, including:

• Personal identification information (name, email, phone number, address)
• Membership and payment information
• Health and fitness data (InBody analysis, workout history)
• Referral contact information (such as a referred person’s name, phone number and email address)
• Communication preferences and feedback
• Photos and videos taken at our facilities (with your consent)

We use the information we collect to:

• Provide, maintain and improve our services
• Process your membership and payments
• Track your fitness progress and provide personalised recommendations
• Communicate with you about your membership, classes and promotions
• Manage buddy referrals and contact referred people about the requested follow-up
• Ensure the safety and security of our facilities
• Comply with legal obligations

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. This includes:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Restricted access to personal information on a need-to-know basis
• Staff training on data protection and privacy

You have the right to:

• Access and receive a copy of your personal information
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Object to or restrict certain processing of your information
• Withdraw consent where processing is based on consent
• Lodge a complaint with a data protection authority

We use contracted service providers to operate TheXL Gym, including cloud hosting and database storage, OTP delivery, transactional email and file storage. They receive only the information needed to provide their service and must protect it. We may also disclose information when required by law, to prevent fraud or to protect people and our services.

We do not sell personal information. We do not share health, fitness or contact information with advertisers.

We keep account and membership information while your account is active and only as long afterwards as needed to provide the service, resolve disputes, prevent fraud and meet legal, tax and accounting obligations. Health and fitness records are removed when they are no longer needed for the service or when a verified deletion request applies, unless a legal obligation requires limited retention.

You can submit a deletion request from Profile > Delete Account & Data in the Android app, or use the instructions at thexlgym.com/account-deletion if you no longer have access to the app. A request does not trigger an immediate database deletion. We verify account ownership, inventory the linked data and review applicable retention requirements before carrying out approved erasure or anonymization.

After verification, we delete the account, sign-in credentials and associated personal, fitness and health data that we are not required to retain. Limited payment, invoice, fraud-prevention, security or audit records may be kept only for an applicable legal or regulatory period, with access restricted for that purpose.