akhara.Privacy policy.
Policy version: 17 October 2026
This policy describes the data practices for Akhara gym-management software and this informational website. Contact Akhara at akharasupport@gmail.com for questions. A gym separately decides what member and business information it records; contact your gym about its own collection and retention practices.
Information used by the app
| Account | Google account identifier, email, name and profile picture supplied during sign-in; account name, phone number and photo you provide. |
|---|---|
| Gym operations | Gym and branch information, invitations, role/access assignments, memberships, attendance, session and payment records entered by authorized users. |
| Training | Workout and diet plans, completion records and progress information you or authorized gym staff enter. Avoid entering unnecessary medical information. |
| Owner Gmail | The connected sender address, encrypted authorization credentials, invitation content and recipients needed to send invitations, and delivery-attempt information. |
| Support | Your email address and information you choose to send when asking for assistance. |
How information is used
Information is used to authenticate users, apply gym and branch permissions, provide the requested management and training functions, process authorized invitation sending, maintain payment records, prevent duplicate or unauthorized actions and respond to support or privacy requests. An in-app payment record is not, by itself, evidence that a bank transfer succeeded.
Google account and Gmail access
Google sign-in identifies your account. Gym-owner Gmail connection is a separate authorization for the gmail.send scope, with identity scopes used to match the sender to the signed-in owner. This scope allows sending email on your behalf; it is not limited by Google to invitation messages. Akhara limits its use to invitation sending initiated through its gym workflows. Akhara does not request inbox-reading or email-deletion permissions.
Authorization credentials are stored encrypted on the server, not in the public website. A temporary pre-gym connection is valid for gym creation for 30 minutes. The authorization is attached to the gym when creation succeeds. Unused temporary credentials can remain encrypted until replaced or removed; expiry of the creation window alone does not revoke Google's grant.
Akhara does not sell Google user data, use it for advertising, or use it to develop, improve or train generalized AI or machine-learning models. Akhara's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Who can access information
Gym information is made available to authorized gym users according to their role, branch access and assignments. A global-sharing choice for a workout or diet plan makes that plan available to other eligible app users; do not include private member details in a plan you share. Service providers process information needed to operate the app: Supabase for authentication, database and file storage; Google for account authorization and Gmail delivery; and a payment provider such as Razorpay where online payments are enabled. Payment providers handle their own checkout, bank and verification data under their policies. This website does not collect card or bank details.
Access may also be necessary to respond to a support request, investigate abuse or security incidents, or comply with applicable legal obligations. Akhara does not publish your gym's private records on this website.
Website storage and hosting
This static website has no sign-in form, advertising trackers, analytics scripts or application database connection. Its assets are served locally from the site. The hosting provider may receive standard request information such as IP address and browser details when you visit. If hosted on GitHub Pages, GitHub's privacy statement applies to its hosting operations. Emailing support uses your chosen email provider and sends the information you include to Akhara's support mailbox.
Retention, security and deletion
Account and gym data is retained while needed to provide the service and for applicable record-keeping, dispute and security purposes. Retention varies by record type; this policy does not promise immediate deletion of all gym accounting records. Access controls, private file storage and encrypted Gmail credentials are used, but no service can guarantee absolute security.
You can request an export or deletion through the app's privacy controls where available, or by following the deletion instructions. Deleting an account does not necessarily erase gym ledger records or all records a gym must retain. We will explain the scope and any retained categories when handling a request. Any access to files or camera is requested for the feature you choose; deny the permission if you do not want to use it.
Your choices
You can edit supported profile fields, choose whether to share your own plans globally, request correction or deletion, and disconnect Gmail where available. You may also remove Akhara's authorization at Google Account connections. Revocation stops future Gmail API access once effective; it does not recall invitations already delivered. Disconnecting Gmail does not delete the whole Akhara account.
Changes and questions
Material changes will be reflected in this policy with an updated version date. For questions, corrections or privacy requests, contact akharasupport@gmail.com. Never include passwords, OTPs, card information or authorization codes.