Privacy policy

Two roles to distinguish

mjounclub processes data in two very different situations, and it matters not to confuse them.

Your gym data

When you create an account, we process your information as data controller: the owner's identity, contact details, billing information.

Your members' data

When you enter your members into the application, we act as processor: that data belongs to you, you alone decide how it is used, and we only handle it to run the service you entrust to us.

We do not read your data, do not sell it, and use it neither for advertising nor for training models.

What we collect

When you sign up

• Owner name and email address
• Gym name, country, address
• Legal and tax details required for invoicing

While you use the service

• The data you enter: members, payments, schedules, attendance, documents
• Technical logs required for security and diagnostics

What we do not collect

• No banking data is stored on our servers
• No advertising trackers, no marketing profiling

Why we process it

• To provide the service — performance of our contract
• To bill your subscription — contractual and accounting obligation
• To ensure security — legitimate interest in preventing fraudulent access
• To comply with the law — retention of accounting records

How long

• Account data — for the duration of the subscription, then 3 months
• Your members' data — until you delete it, or 3 months after the subscription ends
• Invoices and accounting records — 10 years, as required by law
• Technical logs — 12 months at most

The three-month window gives you time to retrieve your data if you change your mind. After that, deletion is permanent and irreversible.

Who has access

Our technical providers, strictly within the scope of their task:

• Supabase — database hosting, European infrastructure
• Vercel — application and website hosting
• Google — AI assistant, only if you use that feature

No data is transferred, rented or sold to third parties.

Isolation between gyms

Each gym is partitioned at database level. One gym cannot technically access the members, payments or figures of another. This separation is enforced by the server, not by the interface.

Security

• Encryption in transit (HTTPS) and at rest
• Passwords stored in irreversible hashed form
• Role-based access: a coach does not see members' financial status
• Automatic daily backups
• Administrator access log

Your rights

You may at any time request access to your data, its correction, deletion, portability, or object to a processing operation.

Exporting your members and accounting entries is available directly in the application, at no cost and without any procedure.

For any other request: contact@mjounclub.com. We reply within 30 days.

If you are established in Morocco, you may refer the matter to the CNDP. If you are established in the European Union, you may refer it to your national supervisory authority.

Your obligations towards your members

You remain responsible for the data you enter. It is your duty to inform your members how their information is used, to obtain their consent where the law requires it, and to enter only data genuinely necessary to run your gym.

Changes

Any substantial change to this policy will be notified to you by email at least 30 days before it takes effect.

Last updated: August 2026