Your head coach asks for an account. He wants to see who is signed up for his class, mark attendance, check whether the new member brought his medical certificate. All perfectly legitimate requests.
And you hesitate. Because giving him access, in your mind, means giving him access to everything — including revenue, overdue payments, and what the other coaches earn.
What each person actually needs to see
Ask the question differently: what does this person need in order to do their job today, without calling you?
A coach
The list of members in his classes, attendance marking, the schedule, and the administrative file of his members — medical certificate, signed contract, emergency contact.
He needs neither the amounts collected, nor who is behind on payment, nor access to accounting.
The front desk
Everything above, plus payments, invoicing and overdue reminders. That is the job.
On the other hand, it has no reason to change pricing or access gym settings.
You
Everything, including what nobody else should see: margins, consolidated figures, billing configuration.
Why separation protects everyone
Access rights are often presented as a matter of distrust. It is the opposite.
A coach who sees that a member is behind on payment ends up in an uncomfortable position. Should he mention it? Pretend not to know? Let them train anyway? You have handed him a problem that is not his, and one that can damage his relationship with the student.
Not giving him that information is not distrust. It is sparing him from handling what is yours to handle.
The same reasoning applies to salaries. In a gym where three coaches cross paths daily, a badly configured account always ends in an unpleasant conversation.
The departure case
A coach leaves. It happens, often on good terms. What becomes of his access?
If you shared a single login, you must change the password and redistribute it to the whole team. If everyone has their own, you deactivate one account and nothing else moves.
That difference seems minor until the day a departure goes badly. A former employee who keeps access to your members' contact details, while opening a gym two streets away, is a real and frequent risk in this business.
The minimum necessary rule
The principle is simple to state: each person receives exactly the rights they need for their work, and not one more.
This is not a defensive stance, it is sound management. It limits mistakes as much as abuse. A coach cannot accidentally delete a payment he was never supposed to see.
It also carries legal weight. You hold personal data on your members — identity, contact details, sometimes health data through medical certificates. Restricting access to those who genuinely need it is part of your obligations.
One login per person, never shared
This is the most overlooked point, and the most important.
As long as three people use the same account, you cannot know who did what. Who took that cash payment? Who deleted that record? Who changed that price? Without an answer, no verification is possible.
With one account per person, every action is attributed. This is not surveillance — it is what allows you to trace an error instead of suspecting everyone.
What to check in your own gym
- Does each team member have their own login?
- Can a coach see the amounts collected?
- Does a former employee still have an active account?
- Could you say who took a given payment three months ago?
If any of these questions makes you uneasy, it is not a team problem. It is a tool problem — and it takes minutes to fix.
Try it on your real gym
Members, schedule, payments and reminders in one place. 14 days free, no card required.
Create my account