Everything included. Nothing behind a paywall.

Indian gyms collect some of the most sensitive data any small business handles: names, phone numbers, health conditions, payment history, and attendance patterns. GymOS is built around the principles of the Digital Personal Data Protection (DPDP) Act.

Consent is captured in the member's language and recorded in an append-only ledger you can never quietly overwrite. Health and medical notes are encrypted on the member record. Every data field is mapped to the purpose it was collected for. When a member asks to be forgotten, a real erasure routine removes their personal data while retaining only what tax and financial law require.

• Versioned consent notices in English and Hindi, with re-consent on version change
• Guardian consent captured for members under 18
• Append-only audit trail: auth events, CRUD diffs, money lifecycle, exports, permission changes
• Sensitive-view auditing — opening a member's medical notes is itself logged
• Grievance inbox with a 90-day SLA clock
• Member data export and anonymize routine
• Per-gym compliance toggle, so gyms outside India aren't shown irrelevant consent UX
• No Aadhaar-number field exists anywhere in the system — only a masked government-ID document upload

Gym finances go wrong quietly — a skipped invoice number here, an edited payment there, and by year-end the books don't reconcile. GymOS closes those gaps.

Invoice numbers are generated sequentially under database row-locking, so even when your front desk and manager bill at the same moment, you never get a duplicate or a gap. Once a payment is recorded it is immutable: any correction runs through a logged approval workflow, so there is always a trail showing who changed what and why.

• Gap-free sequential invoice numbers per gym (INV-{year}-{sequence})
• Immutable payments — direct edits are blocked; corrections need manager approval
• Cash, UPI, card and bank transfer recorded and reconciled in one place
• Day-close cash reconciliation with a closing checklist
• Refunds and expenses tracked against the same ledger
• Dues and renewals queue, so nothing lapses unnoticed
• Finance reporting: collections, outstanding, expense breakdown
• PDF receipts generated per payment

QR-code check-in is the heart of daily operations. Members scan; the rule engine instantly blocks expired memberships and overdue fees, refuses duplicate scans, and writes every event to an audit log. The screen flashes the member's photo and a green/amber/red status so your front desk can act in a glance.

There is no biometric or RFID hardware to buy, install, support or troubleshoot on-site — the whole thing runs in software, using the browser camera you already have.

• QR check-in with rate limiting and duplicate-scan protection
• Guest passes and a public lead-capture kiosk
• Centralized multi-branch management from one login
• Class scheduling with capacity, waitlists and occupancy reporting
• Equipment register and stock/inventory tracking
• Staff shift rostering and staff attendance
• Incident logging and an internal task board
• Document vault on private storage — every download authorized and audited

GymOS watches for members drifting away and raises at-risk alerts before they lapse. A lead pipeline tracks every enquiry back to its source, with ROI reporting that shows which channels actually convert.

Members get streaks, badges, a referral program and NPS surveys, all through a member app that is a rebrandable, mobile-friendly web app — no app-store install needed. WhatsApp reminders are one tap away using ready-made message templates.

• At-risk alerts, win-back queues and birthday lists
• Lead pipeline with kanban, today's call queue and call scripts
• Lead-source ROI so you know which channel pays
• Member app: home, classes, workout, progress, dues, diet, badges, water, feed, referrals
• Streaks, badges and a referral program
• NPS and feedback collection
• Digital membership pass on a signed, time-limited link
• Offers and gym announcements

Give every role exactly the access it needs and nothing more. GymOS ships with five ready-made roles — owner, manager, sales, trainer, accountant — and 57 granular permissions across eight groups. Owners build custom roles from any subset of those permissions.

Anti-privilege-escalation guardrails mean a manager cannot hand out a permission they do not themselves hold. Trainer access is scoped at the policy layer, so one trainer genuinely cannot reach another trainer's assigned members — not even by editing a URL. When platform staff need to step into a gym to help, impersonation is privacy-preserving: the gym-facing log shows "System", while the real actor is recorded server-side.

• 5 seeded roles plus unlimited custom roles
• 57 permissions grouped by members, money, leads, classes, attendance, ops, content, admin
• Trainer scoping enforced by policy and proven by tests
• Cross-gym data isolation enforced structurally, checked in the build pipeline
• Staff performance tracking, targets and leaderboards
• Custom fields, so your intake form matches how you actually sell