Privacy Policy
Last updated: 20 October 2026
The short version
- Gritz is the app your gym uses for your membership, gate access, payments, plans and training.
- We collect what is needed to run your membership and the app's features. We don't sell your information and we don't show ads.
- Your gym's staff can see your membership record, including your health answers. Your progress photos are private to you.
- We only read your location when you tap "Get my gate code", to check you are at the gym.
- You can delete your account in the app at any time: Profile → Delete account.
1. Who we are
Gritz is a product of Mykroft Limited ("we", "us"), a company registered in Nigeria (RC 1555023), 1 Ihiala Street, Upper Chime, New Haven, Enugu, Nigeria. See mykroft.tech. You can contact us about privacy at [email protected].
Gritz is used by gyms (for example, Gc Gym) to run their memberships. Your gym decides what your membership involves and uses Gritz to manage it. For your membership record, your gym is the controller of your information and we process it for them. For the app itself (your account, sign-in, notifications and the app's features), we are responsible for your information. Either of us can help with a request, and we will pass it to the other where needed.
2. What we collect
Information you give us
- Account details: name, email address, phone number, password (stored only in scrambled form), and your gym.
- Profile details: date of birth, gender, address, emergency contact, and a profile picture if you add one.
- Health and safety: your answers to the gym's health questions, any medical conditions, medications or injuries you tell us about, and your signed waiver.
- Fitness information: your goals, the answers you give the plan finder (such as experience, training days, weight and height), body measurements and weight you log, workouts and activities you log, and feedback on routines.
- Progress photos: photos you take or choose for your goal.
- Messages and posts: anything you share with other members in the app, where your gym has that feature switched on.
Information created when you use Gritz
- Gym visits: each time you enter or leave through the gym's gate, with the time, and the gate code used.
- Membership and payments: your plans, invoices, receipts, payments, refunds and wallet balance.
- Location, only when you ask for a gate code: when you tap "Get my gate code", the app reads your location once to check you are at the gym. We keep that position, its accuracy and its distance from the gate with the code, so the gym can see where each code was requested. The app does not track your location at any other time.
- Device and sign-in: your device's name and model, a notification token for your device, the time and network address of your last sign-in, and the app version.
- How you use the app: which screens you open, which buttons you tap, and which actions you take (for example "asked for a gate code" or "logged a workout"), with the time, your app version, device model, operating system and approximate country. These are linked to a random internal ID for your account, your role and your gym branch, never to your name, email or phone number. They don't include the content of what you enter: no health answers, measurements, photos, messages or payment details.
- Crash reports: if the app crashes, a report of what went wrong in the app's code, your device model, operating system and app version, and the same internal account ID.
Information from your gym
Your gym's staff may add or update your details at the front desk, for example when you register, pay in person, or renew.
3. How we use it
- To run your membership: your plan, payments, receipts, renewals and reminders before your plan ends.
- To let you in and out of the gym: issuing your gate code, sending it to the gate, and recording visits.
- To keep you safe: so the gym knows about health conditions and who to contact in an emergency.
- To help you train: your plan, workouts, goals, progress and reminders near the time you usually train (you can switch reminders off in Profile).
- To stop misuse: for example, noticing when a gate code is used by someone else.
- To support you and keep the service working, secure and improving, including counting which features are used and fixing crashes.
- To meet legal duties, such as keeping financial records.
We rely on these legal grounds: providing the service you signed up for (contract); your consent, for health information, progress photos and optional features (you can withdraw it at any time); our legitimate interests in running a secure, working service; and legal obligations.
4. Who can see your information
- Your gym's staff, according to their role: your profile, membership, payments, visits, health answers and waiver, and your profile picture (so reception can recognise you at the gate). Staff cannot see your progress photos.
- Your coach or instructor at the gym, where your gym assigns one, to help with your training.
- Other members only see what you choose to share: your first name and last initial (for example "Ada O.") if you join the leaderboard, and posts you share with a group. These are off unless you turn them on.
We use these service providers to run Gritz. They only use your information to provide their service to us:
| Provider | What for | What they receive |
|---|---|---|
| Paystack | Card, transfer and USSD payments | Payment details you enter, your email, and the amount. We never see or store your full card number. |
| Apple Push Notification service | Notifications on iPhone | Your device's notification token and the notification text. |
| Google Firebase Cloud Messaging | Notifications on Android | Your device's notification token and the notification text. |
| Google Firebase Analytics and Crashlytics | Counting which features are used, and crash reports | The app usage and crash reports described in section 2, linked to your internal account ID. No name, email, phone number or advertising identifier. Google keeps this data for up to 14 months. |
| Ably | Sending gate codes to the gym's gate | Gate codes and whether they should open the entrance or exit. No names. |
| The gym's gate supplier | The gate devices at the gym | Gate codes and entry and exit times. No names. |
| Our web hosting provider | Hosting our servers and sending email | The information stored on our servers, and the emails we send you. |
We may also share information if the law requires it, to protect someone's safety, or as part of a sale or reorganisation of our business (in which case this policy continues to apply). We do not sell your personal information, and we do not use it for advertising. The app does not read your phone's advertising identifier and does not track you across other companies' apps or websites.
5. Where your information is kept
Our servers and some of our providers are outside Nigeria. When your information is transferred abroad, we rely on safeguards the law allows, such as the provider's contractual commitments, so it stays protected to the standard this policy describes.
6. How long we keep it
- While you are a member, we keep your information so the service works.
- When you delete your account, we delete your name, contact details, address, emergency contact, health answers, waiver, profile picture, progress photos, sign-ins and notification tokens straight away, and your gate codes stop working.
- Records the law requires us or your gym to keep, such as invoices, payments and refunds, are kept for as long as the law requires, without your name on them. Visit records are kept the same way.
- Copies in our backups are removed when those backups are replaced.
7. Your rights
Depending on where you live, including under Nigeria's Data Protection Act 2023, you can:
- see the information we hold about you, and get a copy;
- correct it (many details can be changed in Profile → Edit profile; some, such as your name, through your gym's front desk);
- delete your account (Profile → Delete account in the app, or see how to delete your account if you can't open the app);
- withdraw consent, for example by switching off reminders or the leaderboard, or deleting progress photos;
- object to or ask us to limit how we use your information;
- complain to the Nigeria Data Protection Commission, or the data protection authority where you live.
To make a request, email [email protected] or ask at your gym's front desk. We will answer within the time the law allows, and may ask you to confirm who you are first.
8. Permissions on your phone
- Notifications: membership reminders, payment confirmations, visit confirmations and training reminders. You can turn them off in your phone's settings.
- Location (while using the app): only when you tap "Get my gate code". Instructors use it the same way.
- Camera and photos: only when you choose to add a profile picture, a progress photo or a post picture.
9. Keeping it safe
We use encrypted connections (HTTPS) between the app and our servers, store passwords only in scrambled form, keep photos out of public view and show them through short-lived private links, and limit staff access by role. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
10. Children
Gritz is for people aged 16 and over. We don't knowingly collect information from anyone younger. If you think a child has given us information, contact us and we will delete it.
11. Changes to this policy
If we make important changes, we will tell you in the app or by email before they take effect. The date at the top shows when this policy last changed.
12. Contact
Mykroft Limited (RC 1555023), 1 Ihiala Street, Upper Chime, New Haven, Enugu, Nigeria. Email: [email protected].