Privacy Policy

Last updated: 27 May 2026

This privacy policy applies to this mobile application, operated by Veljko Vulovic (BoxHQ).

Camera Permission

Our app requests access to your device's camera solely for the purpose of scanning QR codes at gym check-in points. We do not capture, store, or transmit any images or video from your camera.

Information We Collect

We collect only the information necessary to provide our gym management services:

• Name and contact information (email, phone)
• Gym membership and attendance data
• Push notification tokens (for sending notifications)

How We Use Your Information

• To manage your gym membership and attendance
• To send push notifications about classes and schedules
• To provide customer support

Data Sharing

We do not sell or rent your personal data. We share data only with service providers that help us operate the app, and only as needed:

• Google Firebase Cloud Messaging — to deliver push notifications (receives your device's push token).
• Resend — to send transactional emails such as password resets (receives your email address).
• Railway — cloud hosting and database where your data is stored.

We may also disclose data where required by law.

Data Security

Your data is stored securely and protected using industry-standard encryption and authentication practices.

Data Deletion

You can permanently delete your account at any time, directly in the app: open Profile → Help & Legal → Delete Account and confirm. When you do, the following happens immediately:

• Your personal information (name, email, phone number, password, and check-in code) is erased.
• Your push notification tokens are deleted, so you stop receiving notifications.
• Any upcoming class bookings are cancelled.

You can also request deletion by email: contact veljkovulovic1@gmail.com with the subject Account Deletion Request and your account email address; we process such requests within 7 days.

For full details, see our Account Deletion page.

Data Retention

After deletion, some records are kept in anonymised form – no longer linked to your name, email, or phone number – for legitimate business and legal/accounting purposes:

• Attendance and check-in history
• Membership and payment records

These anonymised records cannot be used to identify you.

Contact Us

If you have any questions about this privacy policy, please contact us at veljkovulovic1@gmail.com.