Security & data
Member data, locked in the cage
GetGymPOS keeps gym data on hosted servers, encrypted in transit with HTTPS, backed up daily and protected by per-user roles. Card numbers are never stored; payments run through your processor. We explain our practices plainly and claim no certifications.
- 01
Hosted, not on your desk
Your data lives on our servers, not on the front-desk laptop. A stolen or broken device loses no member records.
- 02
Encrypted in transit
Every page of the app is served over HTTPS (TLS), so logins and member data are encrypted between the desk and the server.
- 03
Daily backups
The database is backed up every day, with backups kept separately from the live server so a failure can be restored.
- 04
Roles and permissions
Each user has a role. Limit the desk to selling and check-in, trainers to their own sales, and keep settings and reports for owners.
- 05
Per-location access
Staff can be limited to the locations they work at.
- 06
No card numbers stored
Card payments run through your processor. GetGymPOS records the payment, not the full card number.
- 07
Your export, any time
Members, products and sales export to spreadsheets, so your data is never locked in.
Your part
- Give every staff member their own login; never share the owner account.
- Use the narrowest role that lets each person do their job.
- Remove logins on the day someone leaves.
- Export a backup of members and sales monthly for your own records.
- Keep health notes to what trainers need, with the member's consent.
Set log · 8 reps
Security questions
Is GetGymPOS secure?
It is hosted with HTTPS throughout, daily backups and role-based access. We describe what we do in plain language here and claim no certifications.
Is GetGymPOS PCI certified?
We do not claim PCI certification. GetGymPOS does not store full card numbers; card data is handled by your payment processor, which carries its own compliance.
Is health information protected like a medical record?
No. The member health record is for gym notes, not medical records, and GetGymPOS is not HIPAA-certified. Keep notes to what a trainer needs, with the member's agreement.
Who can see my data?
Your users, by role. Our support staff access an account only to help when you ask.
Where is data stored?
On our hosted servers. Ask on a demo if your business needs data in a specific country.
What happens to my data if I cancel?
Export it first. After cancellation the account is kept for a grace period, then deleted as described in the privacy policy.
Can I turn on two-step login?
Ask us about the current login options for your account; use strong unique passwords for every staff login.
How do I report a security issue?
Through the contact page, marked "security". We respond promptly and credit responsible reports.
Safe data, simple desk
See roles and permissions on a demo, or set them up in the trial.
