Privacy · Ryzox

Who is responsible for what

Ryzox is used to book group classes at a gym. This page says exactly what data the app holds, why, for how long, and what you can do about it. It describes the software as it works, not an intention.

The gym is in Mauritius, so the applicable text is the Data Protection Act 2017. The rights it grants do not depend on any decision of ours.

Responsibility is shared, and the split is not cosmetic: it decides who you send a request to.

Ryzox: Ryzox is responsible for your ACCOUNT: your sign-up, your identity, your password, your email address. The account belongs to the platform and follows you if you change gyms.
Your gym: Each gym is responsible for its OPERATIONS: your bookings there, the absences it records, its attendee lists, its attendance counts.

This is not the usual arrangement, where the publisher would simply be a supplier to each gym. It would not fit here: you sign up with Ryzox, not with a gym, and your account outlives your membership.

What is collected, and why

Every piece of data has a written purpose. The rule has a consequence we hold ourselves to: data without a purpose is removed, even if it is already stored.

First and last name: To identify you to your gym. Other members only see your first name and the initial of your last name, never your email address. One deliberate exception: if you teach a class, your first and last name appear on the schedule, as they do on the one posted in the gym.
Email address: To sign you in, verify your account and reset your password. It is the only entry check in the app.
Password: To sign you in. It is stored as a hash and is readable by nobody, including us.
Gender: To let your gym know the make-up of its membership, IN AGGREGATE, so it can shape its class offering. No individual decision follows from it, and it is displayed nowhere.
Language: To serve you the interface and emails in the language you chose.
Bookings and cancellations: To deliver the service: keeping track of places in a class with limited capacity.
Recorded absences: To let your gym raise it with you. No automatic blocking follows from it.
Role and status at each gym: To know what you may do: book, coach, manage. And to let a manager suspend access.
Terms accepted: To prove that you accepted our terms of use and this policy, and which version of the text.
Mobile device: To send you notifications about your classes, if you turned them on from the app. The identifier comes from your phone, contains neither your name nor your location, and disappears as soon as you revoke the device or have your account anonymised. Uninstalling the app does not tell us: the identifier then goes on the first notification that comes back to us as undeliverable, and after six months at the latest.
IP address and browser: Carried by your sign-in session, for the security of your account. Erased with it when it expires.

Where your data is hosted

With OVH, in France. You are in Mauritius, so this is a cross-border transfer under the Data Protection Act 2017. It is not forbidden, it is governed.

This transfer is NECESSARY to provide you with the service: your bookings have to be stored somewhere, and that is where. So we do not ask you to agree to it separately, because an agreement you could not refuse without giving up the service would not be one. We tell you here, in plain words, and you accept it along with these terms when you sign up.

OVH hosts, it does not use your data. Three other providers receive part of it, each for a single task: Resend sends our emails, so your address and first name; Google Firebase delivers notifications to your phone, so its device identifier and the text shown; Sentry receives our error reports, which may contain a technical identifier. None of them uses this data for their own purposes, and none receives your password.

For how long

“Indefinitely” cannot be defended. A duration is set per kind of data, and an automated job applies it.

Active account: As long as your account is in use, it is kept. It is in use as soon as you have booked at least one class in the last twenty-four months.
Inactive account: After twenty-four months without a single booking, your account is anonymised automatically. You get an email thirty days beforehand, and signing in and booking is enough to cancel it. No account is ever anonymised without that notice.
Bookings and absences: Your bookings and absences stay as long as your account. They outlive it once anonymised: at that point they are no longer data about you, only your gym’s attendance figures.
Sessions and links: Your sign-in sessions and verification links expire on their own and are erased afterwards.
Mobile device: Your phone identifier is erased as soon as you revoke the device or have your account anonymised. Failing that, it goes after six months without a notification, and as soon as a notification comes back to us as undeliverable.
Contact form: A message sent from our public form, with the name and address you write in it, lands in our contact inbox. We also keep a technical trace of your connection for one hour, to prevent automated bulk sending.
Replayed writes: When you submit a form on an unstable network, the app may send the same request again. To avoid processing it twice, we keep the response you received for twenty-four hours. It is deleted sooner if you have your account anonymised.

Your rights, and the button that carries them out

We do not publish a right the software cannot carry out. Each of the following is reachable from your account page, without writing to us and without delay.

Access your data: “Export my data”, on your account page. You get a file with your profile, your gyms and your full booking history, immediately.
Correct your data: Your first name, last name, language and email address can all be changed on your account page. An address change is confirmed by a link sent to your CURRENT address: without that, anyone with access to your session could point your account at their own.
Erase your data: “Anonymise my account”, on your account page. Your name, address and password are erased, your upcoming bookings are cancelled, and you leave every gym. Your past visits stay in their counts, without being linked to you.
Object, or write to us: For anything the buttons above do not cover, write to . We answer within thirty days.

Anonymising cannot be undone. We do not delete past bookings, because that would distort the attendance figures your gym is entitled to, but nothing ties them to you any more.

Trackers

None. No analytics, no advertising tag, no audience measurement, no sharing with a third party for commercial purposes.

The only cookies are the one that keeps you signed in and the one that remembers your language. Both are strictly necessary, which is why you see no cookie banner on this site.

Write to us

For any question about this page or about your data: .