Privacy Policy

This Privacy Policy explains how Afrastic collects and uses information when visitors use the public website, when gym teams use the Afrastic platform, and when gyms enter member or staff data into the service.

If a customer has a signed order form, data processing addendum, or other written agreement with Afrastic, that agreement controls where it conflicts with this public policy.

• Account data such as names, emails, phone numbers, roles, authentication settings, and support history.
• Gym operating data such as gym profile details, staff records, member profiles, plans, invoices, payments, wallet balances, attendance events, class schedules, and reports.
• Communication data such as message templates, delivery logs, opt-in or preference records, WhatsApp session metadata, and email delivery status.
• Technical data such as device, browser, IP address, approximate location, logs, security events, cookies, local storage, and usage activity.
• Billing and commercial data needed to administer subscriptions, plan limits, support, trials, renewals, and customer communications.

• Provide, secure, monitor, and improve the Afrastic platform.
• Authenticate users, enforce roles, support 2FA, and prevent unauthorized access.
• Process platform subscriptions, usage limits, invoices, support requests, and customer success workflows.
• Deliver product communications, service notices, support responses, and legally required notices.
• Generate operational reports, audit logs, backups, platform health checks, and abuse prevention signals.

Gyms decide what member, staff, billing, attendance, and communication data they enter into Afrastic. Afrastic processes that data to provide the service and follows the customer instructions in the applicable agreement.

Gym customers should make sure they have permission to collect and use member data, including contact details, attendance records, payment records, and communication preferences.

Afrastic shares information only as needed to operate the service, comply with law, protect the platform, or complete a transaction requested by the customer.

• Service providers and subprocessors that help with hosting, storage, email, messaging, security, support, analytics, and backups.
• Legal, regulatory, or safety recipients when disclosure is required or reasonably necessary.
• Business transfer recipients if Afrastic is involved in a merger, acquisition, financing, or sale of assets.
• Customer-authorized recipients, integrations, staff users, or administrators configured by the customer.

Afrastic keeps information for as long as needed to provide the service, meet contractual and legal obligations, maintain audit and security records, resolve disputes, and enforce agreements.

Customers can request export or deletion of customer data subject to account status, legal retention, backup cycles, and fraud or security obligations.

Afrastic uses administrative, technical, and organizational safeguards designed to protect customer data. No online service can guarantee absolute security, but the platform is designed around role-based access, tenant separation, audit logging, authentication controls, backups, and platform health monitoring.

• Staff users can update account details through the platform where available.
• Gym customers can manage member communication preferences inside Afrastic.
• Visitors can control browser cookies and local storage through their browser settings.
• Customers can contact Afrastic to request access, correction, export, deletion, or privacy support.

For privacy questions or requests, contact Afrastic at [email protected]. Include the gym name, account email, request type, and enough detail for us to route the request correctly.