Effective 13 October 2026
Vyaam is a workout, nutrition and gym-management app built and run by one person. This page
explains what the app collects, why, where it goes, and how to delete it. It covers the Android app
and the web app (app.vyaam.in) — both are the same product.
If you use guest mode, none of this applies beyond what's stored on your own phone: guest data never leaves your device, there is no account, and nothing here is collected or sent anywhere. Everything below describes what happens once you sign in. If you make an account after using the app as a guest, what you logged as a guest moves into that account and from then on is treated like everything else on this page.
You can sign in with your phone number, with Google, or with your e-mail address — by a one-time code sent to it, or with a password you choose. Each creates an account identified by a random ID. We store your name, your phone number, your e-mail address if you gave one, and your profile photo (from your Google account, or one you set yourself), so the app and the people you connect with can show who you are. A password is kept by Google's sign-in service, which stores it only in a form that cannot be read back; Vyaam's server passes it on when you choose it and does not keep it.
An adult's profile photo can be seen by anyone signed in to Vyaam, and so can a larger copy of it that opens when the photo is tapped. The larger copy is made on your phone, at most 1080 pixels across, with any location and camera details removed before it is uploaded. A new photo replaces both, and You › More › Remove profile photo deletes both; so does deleting your account. Someone who already opened the larger copy may keep its link until you replace or remove the photo. A teen account has only the small photo, and loses the larger one if it turns out to belong to someone aged 14 to 17.
When your gym adds you as a member, or later, its staff may take your photo, with your agreement, so that you can be recognised at the desk; it becomes your profile photo, but it never replaces a photo you added yourself. It is processed the same way as a photo you add yourself (cropped on the phone, at most 1080 pixels across, with location and camera details removed), and you can replace or remove it at any time from your profile. Staff can't take a photo for an account belonging to a 14- to 17-year-old.
Vyaam keeps a note of which version of the app you have, whether you are on Android or the web, and where the app came from — Google Play, a download from vyaam.in, or your browser. It is written when you sign in, kept on your account, and used to support the app and to know which versions are still out there. You and Vyaam's administrators can see it. Your gym cannot, and neither can other members.
If you install Vyaam by scanning a poster at a gym, Google tells the app which gym the poster was for, so it can offer you that gym instead of asking you to find it. That is all it tells us, it is read once when the app first opens, and it is not stored anywhere.
Vyaam confirms your phone number before you can use the app. You do it once, the first time you sign in, and there are two ways to do it — you choose which. It exists so that a number belongs to one account and one person: your gym finds you by it, and it is what stops somebody else claiming your account. Afterwards, Settings → Account shows the number that was confirmed and lets you change it, which starts the check again for the new one.
With Truecaller. If you have Truecaller on your Android phone, tapping "Verify with Truecaller" hands the check to it. Truecaller shows you its own consent screen; if you agree, it tells Vyaam the number it has already verified, and nothing else — not your name, e-mail address, photo or address, which Vyaam does not ask it for. Vyaam sends Truecaller nothing about you beyond starting that check.
With a text message. Otherwise Vyaam asks Google to text you a six-digit code, and Google is told the number in order to send it. Before the message goes, Google checks silently that the request comes from the real app or a real browser rather than from a machine sending messages in bulk. Codes go only to Indian numbers, and there are limits on how many can be sent.
What is kept: on the private part of your profile, which only you and Vyaam's administrators can read — the number that was verified, when, and which of the two ways you used. Your profile also carries a plain yes-or-no "verified" mark, which the people who can already see the last four digits of your number can see. Change your number and the mark goes with it, until you verify again.
If it does not work. You can try again, switch to the other method, or use a different number — and you can sign out. Until a number is confirmed the app does not open, so if none of that works, tell your gym or write to support@vyaam.in rather than being stuck: we would rather fix it than leave you outside.
You can also sign in with your number, not only confirm it. "Continue with phone" texts you a six-digit code in the same way, or, on Android, lets Truecaller confirm the number in one tap. Vyaam's server checks that the code was entered, or the number confirmed, moments before, and only then opens the account that number belongs to. If a gym made an account for your number at its desk, you are first asked whether that membership is yours, as described under "When your gym already made you an account", and the gym is told when you first sign in to it.
A phone number confirmed by the person who holds it replaces the same number typed on another account without confirmation, and that account is told that its number was removed, without being told who confirmed it.
A mobile number that has been given up can be given to somebody else. So if a number has not been proved on its account for 90 days, and that account can also be opened another way — Google, a password or a confirmed e-mail address — Vyaam asks you to sign in that way once instead.
Workouts, weekly plans, exercise notes, body weight and measurements, personal records and streaks are stored in your own account so they survive a reinstall and follow you to a new phone. Nobody but you can read them, with four exceptions you will see in the app: a workout or streak you choose to share with a buddy; each buddy you have accepted, who can see a summary of your training to compare it with theirs — your last twenty sessions, your best lifts, and which days you trained; your gym's leaderboard, described under "Your gym's leaderboard"; and, if you belong to a gym, a summary of your last 31 sessions, which your gym's owner, managers and trainers can see so that they can coach you. What your gym sees for each session is the date, its name, how long it took, the number of sets, the total weight lifted, up to four of the exercises, and the best set of each of up to six lifts — its weight and reps — but not every set, and never your body weight, measurements or notes unless you share them with your trainer, as described under "What your trainer can see, if you choose".
When you copy one of your gym's plans, Vyaam keeps a note that you have it, so that you can be told when the gym updates the plan. The gym's staff can't see this list. The note is removed when you remove the copy, turn it into your own plan, leave the gym or delete your account.
When you start, and later in the places where each one matters, Vyaam asks a few questions about you: what you are training for, how many days a week you can train, how experienced you are, whether you train at a gym or at home, when you usually train, a target weight, your diet (vegetarian, eggetarian, non-vegetarian, vegan or Jain), how many meals you eat a day and when, what keeps you going, and any injuries or parts of the body to train around, with a note if you want to add one. Every question can be skipped, and Settings → Your profile shows every answer and lets you change any of them.
The answers are stored in your own account, like your workouts, and only you can read them — not your gym, not its trainers, not your buddies. They are used to choose the programme you are offered, to time your meal reminders, to open food search on your diet, and by Zen and the plate scan, as described under "Zen, the in-app coach".
For a member aged 14 to 17, a target weight, diet, meals and meal times, and injuries are saved only if their guardian has agreed to the nutrition and health part of the consent (see "Children").
Progress photos you take in Body — front, side or back — are kept only on the phone, or in the browser, you took them on. Vyaam never uploads, syncs or backs them up, nobody else can see them, and they do not follow you to a new phone. They are kept separately for each account signed in there, stay when you sign out, and are deleted when you delete them, when you delete your account on that phone, or when you uninstall the app. "Save to gallery" copies a photo to your phone's gallery (or downloads it, on the web); from there it is outside Vyaam, under your phone's own settings, including any cloud backup of your gallery. Accounts belonging to 14- to 17-year-olds have no progress photos.
Meals you log, and any custom foods or meals you create, are stored the same way — in your own account. If you photograph a plate to estimate its nutrition, the photo is downscaled on your phone and sent to an AI model (Google Gemini, or OpenAI if Gemini is unavailable) to read what's on it. We do not keep a copy of that photo afterwards — it is used once, to answer that one scan, and discarded.
Scanning a packet's barcode is free and sends no photo anywhere: the camera reads the number on your phone. Vyaam looks the number up in your own foods, then in its shared food library, then in Open Food Facts, a free public database of packaged foods run by a non-profit in France. Only the barcode number is sent to Open Food Facts — nothing about you, though, as with any website, it sees the network address the request comes from.
If nobody has the packet, you can add it from its label. It is saved to your foods and published to the shared food library with its barcode, so that the next person who scans it finds it. Like every food and meal in the shared library, it is stored with your name as the person who added it, anyone signed in to Vyaam can read the library, and it stays there if you delete your account.
Only if you grant permission, and only for the days shown in the Activity screen (the last 7 days):
Readings you type in and your medicines: heart rate, respiratory rate and blood glucose readings you add by hand, and the medicines you list with their dose times and whether you marked each dose taken or missed, are stored on your phone and in your own account. Only you can see them — not your gym, your trainer or your buddies. Medicine reminders are scheduled on your phone; what they say is hidden on a locked screen.
What we write: body weight only, and only weigh-ins you type into Vyaam yourself. Nothing else is written to Health Connect. Workouts you finish in Vyaam are stored inside Vyaam, not pushed into Health Connect.
Where it goes: Health Connect data is stored on your phone and in your own account in Vyaam's database (Google Firebase, Firestore), so it survives a reinstall and shows on your other devices. Nobody else can read it unless you turn on "Body and health" for your trainer, as described under "What your trainer can see, if you choose". Otherwise your gym, your training buddies and other Vyaam users see only what you explicitly share with them (workouts and streaks), never steps, sleep, heart rate or weight. It is never sold, never used for advertising, and never shared with third parties or analytics services. If you ask Zen (the in-app coach) a question, only the summary numbers needed to answer it are sent, for that one request, only to OpenAI and never to Gemini — not the raw Health Connect records — and Vyaam never uses it to train any AI model.
How to stop it: turn the permissions off any time in Health Connect → App permissions → Vyaam (the app falls back to manual entry immediately); Settings → Health data inside Vyaam shows what is connected and opens those permissions; delete your Vyaam account to remove the stored health data with it; or uninstall the app to remove the copy held on your phone.
Zen answers questions using your own training, activity and nutrition data. When you ask something, your question and a short summary of the data needed to answer it are sent to OpenAI or Google Gemini to generate the reply — OpenAI first with Pro or Max, until that day's allowance is used, and always for figures that come from Health Connect, which are never sent to Gemini. That summary is figures, not records: your recent workouts and the weights you lifted, body weight and its trend, seven-day averages of steps, calories, sleep and resting heart rate, the heart rate, respiratory rate and blood glucose readings from the trackers you turned on, how many of your medicine doses you marked taken (never a medicine's name), your calorie and macro totals against your targets, and, if you belong to one, your gym's name, your membership status, how often you have been in lately, and your next class. Your name, e-mail address, phone number and date of birth are never sent. Your age stays on your phone. So do your height and sex, except for Zen's body analysis, described below, which needs them. The names of foods you log often are sent when you scan a plate, as described below; nothing you have eaten is sent with a question to Zen. Your conversations with Zen are kept on your device only and are not stored in Vyaam's database. The one exception is Zen's latest daily analysis — one each of your training, your health and your body — which Vyaam keeps so that it appears on your other phone or after you sign in again. Each is replaced when the next is written, and only you can see it.
When you scan a plate, the photo and any hint you typed are sent to the same services to estimate what is in it. So are the names of up to sixty foods you log most often — the names only, with no amounts, dates or times — so that your usual dal is recognised as the one you already have rather than estimated again from the picture. If you gave a diet on your profile — vegetarian, eggetarian, vegan or Jain — a sentence saying so goes too, so that the estimate does not read paneer as chicken. Nothing else goes with the photo.
You can also attach one photo to a question for Zen — a label, a machine, a meal. The photo goes, with your question, to the same services as a scanned plate, only to answer that question. Vyaam does not store it or keep a copy, and it counts towards your Zen questions for the day. Don't send a photo with anyone else in it unless they're happy for you to. Nothing a 14- to 17-year-old does reaches Zen, so this never applies to a teen account.
If you have Pro and ask Zen to tailor a plan, Vyaam first shows you exactly what will be sent: the plan's exercises with their sets and reps; your goal, days a week, experience and where you train; any body areas you chose to protect (as a list, never your notes); and, for the plan's lifts only, your recent best set rounded off, how often you did it in the last eight weeks and whether it is going up; and how many times a week you have trained lately. That goes to the same services as Zen's answers to work out the changes. Your name, age, height, weight, gym, photos and notes are not sent. Vyaam keeps no copy of the request; the plan you choose is saved like any other plan of yours.
Owners, managers, trainers and front-desk staff can ask Zen about their own gym, such as today's collections, how many memberships end this week, or the busiest hours. Each person can ask only about what their role in the gym already lets them see; members can't ask about the gym's business or about other members. To answer, Zen is sent the question and the gym's totals and counts, such as amounts collected, numbers of members or check-ins, and the names of the gym's plans and classes. No member's name, phone number, payments or other personal details are sent: any list of members is shown by the app from the gym's own records. Phone numbers and e-mail addresses typed into a question are removed before it is sent. Each question is recorded in the gym's activity log with who asked and which kind of figure was asked for, but not the question or the answer.
Gemini and OpenAI are separate companies, not Vyaam's processors, and under the terms Vyaam uses they may use what is submitted to improve their own services. This is why the app's Data safety entry on Google Play lists health, fitness, message and photo data as shared. If you would rather nothing was sent, do not use Zen or the plate scan; every other part of the app works without them.
Zen does not give medical advice or diagnoses; it will point you to a professional for pain or health concerns. If a reply is wrong or offensive, report it with "Report this reply" underneath it — see Reporting and blocking.
Zen's body analysis. With Pro, Zen can also write a daily analysis of your body measurements. For that it is sent:
It is not sent your name, your date of birth, your notes or any photos. It goes to the same services as Zen's other replies. A one-line summary of the same figures is also included in Zen's daily health analysis.
Zen is also sent a one-line summary of the profile answers you have given: your goal, days a week, experience, where and when you train, your target weight, diet, meals a day, what keeps you going, and the parts of the body you are training around, with the first 120 characters of any note you wrote about them. That is how it avoids, say, suggesting squats to someone training around a knee, or chicken to a vegetarian. An injury note is health information in your own words; if you would rather Zen did not see it, leave the note empty — the body areas alone are enough. Nothing a 14- to 17-year-old does is sent to Zen.
With Pro or Max you can have Zen coach. It is on unless you turn it off: the app tells you once, in a short notice, that it is on and what it uses, with a button to turn it off, and you can turn it off any time in Settings → Zen coach. Until you have seen that notice in an up-to-date app, it sends you nothing. It is not available to anyone under 18. With Free or a gym membership, Zen instead sends you a short summary of your week on Sundays, made from the same records by a fixed template, with nothing sent to an AI; the notice tells you about it, and you can turn it off there or in Settings. Saying yes to the Sunday summary is not saying yes to the coach: if you later get Pro or Max, you are asked again before the coach starts.
Once it is on, Vyaam's server reads your own records once a night — your workouts and plan, the food you logged against your targets, your body weight and its trend, and, if you connected Health Connect, your sleep and steps — and works out, by fixed rules, whether there is something worth telling you: a morning plan, a missed session, a personal best, a lift ready to go up, a debrief after a workout, a weekly review. To word a message, only the few figures it is about (for example "bench press best 72 → 75 kg; sleep average 6.1 h") and your first name are sent to OpenAI. Nothing goes to Gemini, and no photo, note, medicine, phone number, e-mail address or gym name is ever sent. If OpenAI is not used, a ready-made sentence is filled in instead.
So that it can follow up like a coach, Vyaam keeps a small coach record in your account: the goal you set, any limitation you told it about (a knee, say — only what you said, in your words, never something it guessed), commitments you made, your answers to its check-in questions, the suggestions it made and whether you took them, and when it last wrote to you. Only you can see it. A suggested change to your plan is applied only if you tap to accept it. Messages waiting to be sent are deleted within three days; messages in your alert list after 30 days. You can pause the coach, change how often it writes and which messages it sends, or turn it off, in Settings → Zen coach; turning it off stops the nightly reading. The coach record is deleted with your account and included when you download your data.
With Max, Zen also writes a monthly progress report and a week's meal plan to your targets. For the meal plan, only the names of the dishes chosen for the week are sent to OpenAI, to put them in a sensible order; it is not medical advice. If your gym gives you a trainer, you can choose to share a weekly coach summary with them under "What your trainer can see, if you choose": it is off until you turn it on, it shows your training that week and the coach's flags — never your food log, sleep, weight or medicines — and you can stop sharing at any time.
Coach messages are written by a computer. If one is wrong or offensive, use "Report this" on it.
Some of what the app does is a small judgement rather than a piece of writing: which of your records a question needs, how to order the results of a food search, whether a scanned estimate looks wrong, what muscle an exercise you invented belongs to, how a food you added is measured. Those are decided by Jev, a model run by TypeSafe. It answers only by choosing from a list of options the app supplies, with a confidence score; it writes no text, never sees a photo, and nothing it returns is shown to you as words. When it is unsure it declines, and the app does what it did before.
What is sent, decision by decision:
Your name, e-mail address, phone number, date of birth, account id and gym are sent with none of them, and no photo ever is. A muscle-group answer is remembered, so a given exercise name is sent once and never again.
These decisions happen only when you use the feature that needs one — asking Zen, scanning a plate, searching for a food, typing a set in words, adding an exercise or food of your own, or a search on Home that found nothing on your phone. Logging a workout from the picker, and every other part of the app, sends nothing to TypeSafe.
TypeSafe is a separate company, on the same footing as Gemini and OpenAI above, not one of Vyaam's processors.
During a workout you can tap the microphone and say a set out loud, in English or Hindi, instead of typing it. The microphone is on only while the listening sheet is on your screen; it never listens in the background. Vyaam asks for permission to use it the first time you tap it, not before.
Your voice is turned into words by your phone's own speech service — Google's, on Android — or by your browser, if you use Vyaam on the web. That service may send the recording to Google to do it — or to Apple, if you use Vyaam in Safari on an iPhone — under that company's own terms. Vyaam never receives the recording. What comes back to the app is the text, which you see as you speak and can correct before it is saved; from there it is handled exactly like a set you typed, as described under "Quick decisions". Vyaam keeps no recording of your voice.
Scanning your gym's door code — to check in, to join the gym there, or, if you are on the gym's staff, to mark yourself present — reads your phone's location once, at that moment. The app sends it to Vyaam's server in India, which works out how far you are from your gym and then discards the location itself: only the distance in metres is kept, with the time, on the check-in or staff-attendance record that your gym's staff can see. Your coordinates are never stored. On Android the app also checks whether the location came from an app that fakes it, and refuses the scan if so.
If your phone can't get a location, or you would rather not share it, your gym's daily desk code, where the gym uses one, or the front desk checks you in without it. For a member aged 14 to 17, the location is read only if their guardian has agreed to it on the gym's current consent form; otherwise they check in at the desk.
If your gym uses a door device that recognises your face, palm or fingerprint, the scan is stored and checked only on that device, which belongs to the gym; Vyaam never receives or keeps it. Vyaam gives the device a door number for you, your first name and initial, and the dates your membership is valid, so it lets you in only while your plan is active. Each time you enter, the device tells Vyaam your door number and the time, and this is recorded as your check-in for the day. Your gym asks for your agreement before it records your face, palm or fingerprint, and you can ask it to delete them from the device at any time.
When you check in at your gym, its front-desk staff (and any staff who turn this on) are told, with your first name.
Your gym may ask you for a Google review; Vyaam only counts how often it asked and how often it was opened.
If you say yes when Vyaam offers it, starting a workout also checks you in at your gym when you are there, so you need not scan the door. The offer comes the first time you start a workout as a member of a gym, and your phone asks for location permission only after you say yes. From then on, when you start a workout, the phone reads its location once. If you are plainly nowhere near the gym, nothing is sent. Otherwise the location goes to Vyaam's server, which judges the distance exactly as it does at the door and keeps only the distance, with the time, on the check-in — never your coordinates. It happens at most once a day, the app tells you when it has checked you in, and Settings → Workout turns it off. It is for members, not staff, and for a 14- to 17-year-old it needs their guardian's agreement to location, as at the door.
On Android, during a workout you started at your gym with location allowed, the app checks your phone's location about every four minutes, only on your phone, to tell whether you have left the gym so the workout can be finished; no location is stored or sent, and it stops when the workout ends.
If you have already allowed Vyaam to use your location, Home may read your phone's rough, recently known position to tell whether you are at your gym, and if you are, put what you need there first. This happens only for a gym that has drawn its check-in area, only while the app is open on your screen, and for a 14- to 17-year-old only where their guardian agreed to location. The comparison is made on your phone: the position is not stored or sent anywhere. Home never asks for location permission itself.
If you allow notifications — on your phone, or in your browser on the web — a device token is stored against your account so we can deliver them (new messages, buddy requests, gym announcements, and similar). It identifies your device for this purpose only.
Your notifications are also kept in the list behind the bell at the top of the app, so you can see what you missed. Each one holds who or what it is about, a short line of text and the time, and is visible only to you. Opening a notification, or the list, marks it as read on all your devices. They are deleted automatically after 90 days, and with your account. Likes and similar activity are grouped into one notification, and you can switch each kind off in Settings → Notifications.
Reminders to log a meal are set up by the app on your phone, from the times you usually eat — the meal times you gave in your profile, until the diary on that phone shows a pattern of its own. They are not sent from our servers and nothing about your meals or your timing leaves the device to make them work. There is a switch for them in Settings, and for an account belonging to a 14- to 17-year-old they are off unless the teen turns them on, which needs their guardian's agreement to the nutrition and health part of the consent. A reminder to drink water works the same way: it is off until you turn it on in Water, it is worked out on your phone from your meal times and what you have logged that day, and nothing leaves the phone to make it work.
Some notifications come from Vyaam's servers on a schedule, rather than from something a person just did:
They follow your notification settings, and muting gym announcements stops the class reminders.
If you use Vyaam in a browser and turn its reminders on — offered after your first finished workout, or in Settings → Notifications, and never before — you get the same reminders the phone app gives itself: a session that is due, a streak at risk, the morning after a workout, and your week wrapped up. A browser cannot set a reminder for later on its own, so it saves the list of reminders it has planned — the kind, the time and the words of each — to your account, and Vyaam's server sends each one to your browser when it is due, checking every 15 minutes. None are sent between 10 pm and 6 am. If your phone app's own reminders are on, the browser is sent none, so you are not reminded twice; for that, the app records on your account how far ahead its reminders run on each phone. The list is deleted with your account, and turning the reminders off stops them.
Vyaam sometimes sends announcements — a new feature, a change to how the app works, or a problem we are fixing — as a notification and in your alert list, to everyone or to a group chosen by gym, role in the gym, whether you use Android or the web, the version of the app you have, or how recently you have used it. By e-mail we send only notices about the service itself, such as a change to these terms or a security matter, never promotions. Accounts belonging to 14- to 17-year-olds never receive them. You can turn announcements off in Settings → Notifications → General, or with the unsubscribe link in any e-mail. A security notice about your own account, such as a warning about an unusual sign-in, still reaches you after that, because you need to know. We keep only totals for each announcement — how many were delivered, failed or read — and, for 30 days, a note that it was sent to you, so that nobody gets the same one twice.
When your gym's staff post an announcement, members get a notification with the poster's name and the start of the announcement. You can react to an announcement with an emoji: other members see only how many people reacted, and your gym's staff can see who reacted and with which emoji. You can remove your reaction at any time.
If you have no gym in Vyaam, you can ask to join one by scanning the code on its door — with your phone's camera, or with "Scan the gym's QR" on the "Your gym on Vyaam" screen. There is no list of gyms to browse and no way to ask a gym you have not stood in front of. Asking sends that gym your name, your phone number, your e-mail address if your account has one, and whether your account is an adult or a teen one. Nothing else goes: not your training, not your weight, not your diary.
That is the point of asking, and it is what the gym needs to know who is at the door. Its owner, managers and trainers can see it, and nobody else can. You can ask only one gym at a time; asking another withdraws the first, and the first gym stops seeing you.
If the gym says no, you are told, and you can ask again after a week. A request that has been decided is deleted after 30 days, and one you withdrew is deleted at once. If the gym says yes you become a member, and what the gym can see about you from then on is described under "Your gym".
If you are 14 to 17, a gym cannot accept you until the desk has your guardian's details, as described under "Children".
A gym cannot add you to its members without you. If you already use Vyaam, the way in is to scan the gym's door code and ask; the gym's staff cannot put your account into their gym from the desk.
If your gym adds you from its own records without your date of birth, its owner or manager may confirm that you are 18 or over so your membership can start; the gym's activity log records who confirmed it. When you first sign in, Vyaam asks for your date of birth, and if you are under 18 the rules for teen accounts apply from then on.
If your gym gives us your date of birth. When your gym adds you and enters your date of birth, and your account has none yet, Vyaam uses the gym's date as yours, so you are not asked again. If your gym's records say you are under 18, the app won't accept a date that makes you an adult; if the date is wrong, ask the front desk to correct it. If you enter a date that makes you younger than the gym's record, yours is used. If gyms have different dates, the youngest counts. The gym's activity log records that a date was set, with only whether it says adult or under 18, not the date.
If your gym's records list more than one person on the same phone number, such as a parent and their children or a couple, the gym can keep each of them as a member. The Vyaam account on that number belongs to one person; the others are kept by the gym without an app account (their name, plan, dates and anything they owe), and the gym's staff can see that they share that number. The gym can later give any of them their own login on a number of their own, and their plan, payments and check-ins then move to it. Your gym also keeps a short list of your earlier memberships here (the plan and its dates, and the price where it has one), taken from its own records and from your renewals. If your membership ended some time ago, the gym may keep your name, number and past plans without an app account, so you don't have to fill them in again if you come back; you can ask the gym to remove them.
If you scan the code while you are inside the gym, you can join on the spot rather than ask: you become a member straight away, without a plan, and the gym's staff are told. The gym receives the same details as it would from a request, and your location is read once to confirm you are there, as described under "Location, for gym check-in". This needs a phone number you have confirmed. Accounts for 14- to 17-year-olds are made at the desk instead.
Gyms often add their members at the desk before those members ever open the app. If the number you confirm is one a gym typed in and nobody has used, Vyaam offers you that membership: you are shown the gym's name and the plan, and you choose.
Say yes and the membership becomes yours — its dates, your payments and receipts, your check-ins, your classes, whatever the gym recorded against it — and the empty account the desk made is deleted. Say "not me" and nothing happens to it, and you carry on with your own account.
Your gym is told either way, in its activity log: that the offer was made, and what you decided.
A gym can add its existing members to Vyaam in one go, from a spreadsheet or a list it already keeps. The file is read on the staff member's own device, and only these details of each person are sent: name, phone number, and, where the gym has them, date of birth, sex, e-mail address and plan dates. Other columns, such as an emergency contact, are not sent.
Each row is checked. An adult with a date of birth becomes a member of that gym, with an account the gym has made for them, exactly as if the desk had typed them in; you are offered it when you first confirm that number, as above. A row without a date of birth, or for somebody under 18, is not made into an account: it waits at the desk, for the date of birth or for a guardian to come in, and is deleted after 90 days if nothing happens. A row for somebody under 14 is never made into an app account. A member added by a trainer waits until the gym's owner or a manager approves them. Each import is recorded in the gym's activity log with how many rows it added.
Your gym decides whose details it puts into Vyaam and is responsible for them; for these records Vyaam works on the gym's behalf.
If you join a gym through Vyaam, that gym's owner, managers and front desk can see your name, phone number, email, plan dates, payments and check-in history, and its trainers can see the same apart from your payments — a trainer sees a payment only if it is for personal training with them — but only for their own gym, not any other. Your profile card — your name and photo, the number of workouts you have logged, the badges you have earned, your gym's name and your role in it, and the last four digits of your phone number — can be opened by anyone signed in to Vyaam who comes across you: members of your gym, your buddies, or someone who finds you to send a buddy request. There is no directory of members to browse. But the people you follow, and the people who follow you, are listed on your profile, and any adult signed in to Vyaam who opens your profile can see those lists — each person's name and photo, and nothing else. Accounts belonging to 14- to 17-year-olds never appear in anyone's lists, and nor does anyone you have blocked. Whether you are using the app at that moment, and when you last did, can be seen by the adult members and staff of your gym and by your buddies, unless you have turned that off in Settings. They cannot see your full phone number, your e-mail address, your date of birth or your sex: those are kept where only you and Vyaam's administrators can read them. They can also see anything you post to the gym's feed.
If you belong to more than one gym, each gym sees only its own membership: no gym, and no other member, can see which other gyms you belong to. Your profile then shows no gym, and a post you share with everyone names only the gym you posted from.
Your gym's staff can remove a post you made to its feed, but cannot change it.
A post you share is shown to everyone signed in to Vyaam unless you choose My gym; a member under 18 can share only with their gym. Posts you made for your gym stay with your gym: the app asks you once whether to share your earlier gym posts with everyone, and changes nothing unless you say yes. You can move any of your posts back to My gym, or delete it, at any time. When a post goes from your gym to everyone, its likes stay: the post shows everyone how many, and only your gym's members and staff see who gave them. Someone outside the gym who likes a gym's public post is shown by name to that gym's members and staff, in the same way.
When you share a workout to the feed, the post shows what you choose to share from that session: how long it took, how many sets you did, the exercises you did, each with your best set's weight and reps (marked if it was a personal record), and the muscle groups you trained. It is seen by the people you share it with, your gym or everyone, and you can delete the post at any time.
When you watch videos in the app's full-screen viewer, Vyaam notes what you watched, for how long, and whether you liked, shared or skipped it. We use this only to order the videos you see and to count, without names, how each video is doing and how much video your gym uses. Your viewing profile is visible only to you, is never shown to anyone else, never sold and never sent to an AI provider; the detailed record of what you watched is deleted after 90 days. You can turn this off in Settings → Data → "Personalised feed", which also clears your profile, and you can mark any video "Not interested". If you are under 18, nothing about what you watch is used to order your feed and no viewing profile is kept.
Every Vyaam account has a username, such as @asha.rao. The app shows people by name; your username is there to tell two people with the same name apart, and it appears under your name on your profile and in search results. We make it from your name, and if someone already has that one we add the last two digits of your phone number (or more digits, or a number). You can change it in Settings, up to twice in 14 days, and the old one becomes free for others. People can find you by your username in the same way, and with the same limits, as they find you by name: if you are under 18, only other members of your own gym whose guardian also agreed can find you. Your username is deleted with your account.
Your profile picture can carry a frame that shows your plan, Gym, Pro or Max, and next to your name there can be a small icon for Pro or Max. Anyone who can see your profile, your posts or your name in a list can see it, so it tells other people which plan you are on. We set it ourselves from your plan and take it away when the plan ends; you cannot turn it on for yourself, but you choose how it looks (the stone or the metal) in Settings, under Badge. It is not shown for anyone under 18, and an account under 18 has no badge. It is deleted with your account.
When a gym owner accepts Vyaam's gym agreement we keep a record of the acceptance (name, phone number, version and time) for as long as the agreement and any claims under it last, even if the owner later deletes their account.
If you run or work at a gym and tap "Report a problem" in Settings, or on the screen that says something went wrong, Vyaam receives what you typed, the screen you were on, the app version and your phone's platform, your gym and your role there, and your account id. You can add one screenshot; whatever is on it comes too, so check it first. Only Vyaam's own team can see these, never your gym or anyone else, and we use them to fix the problem and to tell you when it is fixed. If you mark a report urgent, the app then opens WhatsApp so you can message us; that message is yours to send, and it goes through WhatsApp's own service. A report and its screenshot are kept until 90 days after we mark the problem resolved, and then deleted. If you delete your account, your reports and their screenshots are deleted with it.
If you run a gym on Vyaam, we keep a record of each payment you make to Vyaam — the amount, the month, the UPI reference number, who sent it and when — as a billing record.
Photos and short videos posted to a gym's feed, on announcements, and on the session recaps a trainer posts after a class are stored as files by Google Firebase Storage (Google Cloud, Mumbai region) — the same processor that runs our database — and are visible only to members and staff of that gym. A recap may include photos or a video of the class; the rating shown on it is an average across everyone who rated and never identifies who rated. Your gym's trainers may also record a short clip of an exercise for the gym's library, which members watch mid-workout; a clip you record for one of your own exercises is private to your account. Only the person who uploaded a file can replace or remove it, and no teen account can upload media. Media is deleted when the post or exercise it belongs to is deleted, and with your account when you delete it.
The gym sees the number you confirmed rather than the one its desk typed, if those differ, and its staff can see the number that was replaced. The change is recorded in the gym's activity log. This is so that the number the gym calls is the one that reaches you.
Besides your plan and payments, your gym can record in Vyaam: a part payment and the balance still due, with the day it is due; a discount on your plan, and the reason for it; a joining fee; a couple or family plan, which links the members on it so that one payment renews them together; a freeze from one date to another, and a request you make to freeze, with any reason you give, which the gym approves or declines; that you have left the gym, with a reason if the gym gives one; and which classes you booked, which you attended, and which you booked and missed.
If your gym finds that two of its records are the same person, its owner or a manager can merge them. The record kept takes the later plan, the other plan becomes an earlier plan, and payments and check-ins move across. If one of the two was a Vyaam account that nobody had ever signed in to, that account is deleted. Before it merges, Vyaam keeps a backup of both records for 90 days, which only Vyaam can read, so that a mistake can be put right. The merge is written in the gym's activity log.
Your phone number is seen by your gym's owner, managers and front desk, and by your own trainer if you have one; your e-mail and date of birth only by the owner, managers and front desk.
If you refer a friend to your gym, you give us their first name and phone number. We use them only to recognise your friend when they join, so that both of you get the reward, and your gym's owner, managers and front desk can see them. If your friend doesn't join within 90 days, their details are deleted. Only add someone who is happy to hear from your gym.
If your membership can't be frozen (for example, an offer), you can ask your gym's owner for an exception and attach up to three documents, such as a medical certificate or a ticket. Only the owner decides. The request can be seen by your gym's owner, managers, front desk and trainers; the documents themselves only by the owner, managers and front desk, and by your own trainer if you have one. They are kept in Vyaam's storage for your gym, opened inside the app only, never shared with anyone else and never analysed. They are deleted 90 days after the owner decides, or 90 days after you asked if nobody decides, and at once if you delete your account. If you are under 18, medical documents can be sent only if your guardian agreed to the health part of the consent.
When you pay, the gym can give you a payment slip, or a tax invoice if it is registered for GST, and a credit note if a payment is refunded or corrected. It keeps a register of its invoices and credit notes for its tax returns. These are the gym's business records. Its staff see them according to their role, and you see your own.
Your gym's staff can send you WhatsApp messages from the gym's own phone: renewal reminders, and messages to a group of members such as a class change, an offer, a note that you have been missed, or a birthday wish. Vyaam writes the message — with your name, your plan, its dates and any amount due — and opens WhatsApp on the staff member's phone; the gym sends it, under WhatsApp's own terms. Vyaam does not send or read WhatsApp messages. It records that a message was sent — who sent it, when, what kind it was and, for renewal reminders, how many there have been — on your membership and in the gym's activity log, so the gym can see what it has already sent. Members under 18 are sent only renewal and class-change messages.
If your plan has ended, your gym may send you an offer to come back, from its own WhatsApp; the gym keeps a list of whom it asked, so it can see who returned. Every such offer says how to stop them: if you tell your gym you don't want offers, the gym marks it, and its offers to you stop. Renewal reminders and class changes still come, because they are about your own plan. Vyaam does not send these messages itself.
If your gym has your date of birth, Vyaam keeps your birthday on your gym membership as a day and a month only — never the year — so that the gym can wish you on the day. No birthday is kept for a member under 18.
If your gym has given you a trainer, you can let that trainer see more than your training, in Settings → Account. There are two switches, both off until you turn them on, one for each trainer:
The trainer can read what you turned on and cannot change any of it. Only that trainer can: not the gym's owner, managers, desk or other trainers, and not your buddies. It stops at once if you turn it off, if the trainer leaves the gym's team, or if the gym gives you a different trainer — a switch left on for a former trainer opens nothing, and Settings shows it so that you can remove it. For a member aged 14 to 17 the switches work only if their guardian agreed to the nutrition and health part of the consent. Nothing you share this way is sent to any AI service by being shared.
Your trainer, or the gym's owner or a manager, can make a one-page progress report about you for a month, as a PDF, from what the gym already sees: the sessions you logged, how long you trained and how many sets, the lifts you trained most and the ones that moved, the days you checked in, and how many weeks you were active. It includes your body weight only if you share "Body and health" with the trainer who makes it. The report is made on their phone, carries your name, and is theirs to share — usually with you, on WhatsApp or by e-mail. Vyaam does not keep a copy.
If your gym has recorded when your plan ends, Vyaam reminds you a week before, on the last day, and for a few days after, until you renew. Your gym's staff also see who is due to renew that week, and can message you about it on WhatsApp from their own phone. Vyaam writes that message, with the amount due and a link to pay the gym directly by UPI, and a member of staff sends it. Vyaam does not send it to WhatsApp itself, and the payment goes straight to your gym, never through Vyaam.
A gym that runs on Vyaam can keep a note of people who have asked about joining, so that somebody remembers to call them back. If you enquire — at the desk, by phone or by message — the gym's staff may record your name, your phone number, what you asked about, how you heard of the gym, when to call you back, their notes of the conversation, and in the end whether you joined or, if not, why. You do not need a Vyaam account for this. The record belongs to the gym: only that gym's staff can see it, never its members, and Vyaam does not use it for anything else or pass it to anyone. If you were already in the gym's records — a past member, say — or you join later, the note is linked to your membership so that the staff know it is you; it is still seen only by staff, and it is deleted if you delete your Vyaam account. It is stored in India with the rest of the gym's records and deleted automatically a year after the gym closes the enquiry, whether you joined or not. An enquiry with no update for six months is closed as having had no reply, and is then deleted on the same schedule.
Ask the gym to delete it sooner and a manager can, at once. If you would rather not ask them, write to support@vyaam.in and we will take it up with them on your behalf.
If your gym offers it, you can book a session with one of its trainers, at the gym or at your home. Your gym provides the session and is responsible for it; Vyaam is the booking software and takes no part of the payment.
Trainer profiles. Each trainer's profile shows what the gym and the trainer put on it — photo, rates, specialisations, years of experience and certifications — and two figures from Vyaam's own records of personal-training sessions at that gym: how many members they have trained and how many sessions they have done. Only that gym's members and staff can see it.
A booking keeps your name, the trainer, the type of session, the date and time, the price you were shown (including any home charge and GST), its status (requested, confirmed, declined, cancelled, done or missed), any late-cancellation fee under the gym's rule, and how it was paid. You, the trainer and the gym's owner, managers and front desk can see it. It stays with the gym's records, as payments do.
Your address, for a session at home. You type it in; the app never uses your location. Only the trainer you booked — once they have confirmed — and the gym's owner, managers and front desk can see it, and the trainer's "Open in Maps" searches for the address you typed, not for where either of you is. The address is deleted 30 days after the session, or when the booking is cancelled or declined, and at once if you delete your account.
Notifications. You are told when the trainer confirms, declines or suggests another time, and reminded before the session; the trainer is told of your request.
Reporting a problem with a session. You or the trainer can report a problem with a booking: choose a reason and, if you like, add a few words. The report goes to the gym's owner and managers, not to the other person or the front desk; if the report is about the gym's owner or a manager, or you say you felt unsafe, Vyaam receives it too. The gym can mark it handled, and you are told when it has. A report is kept for three years after the session, as the gym's safety record. If you delete your account, your name is taken off the reports you made, but what was reported and when stays with the booking.
Booking is for adults only: an account under 18, or whose age we don't know, cannot book.
If you are on a gym's staff in Vyaam, the gym uses it to keep the ordinary records of your work: your shift pattern and when it changes; the days and times you checked in at the door, with how far from the door you were when you scanned; any attendance the desk entered by hand, with who entered it and why; and your leave — the kind, the dates, any note you add, and who approved it. From the day you check in, you also count — as a number, together with members — in the gym's figures for who is in today, visits and busy hours, and the front desk's list of who is in today shows you as staff with the time you arrived. You never count towards workout streaks, leaderboards or challenges.
These are the gym's records as your employer. You can see your own; the gym's owner and managers can see everyone's; other staff and members cannot see yours. You do not need to give a medical reason for sick leave, and the app does not ask for one.
From these records the app also works out, for the gym's owner and managers only, a few counts for each person: the days you checked in late against your shift, the scheduled days with no check-in and no leave asked for, the days you left early, and the days with a check-in but no check-out. When a count passes a set limit, it is marked so that they notice it. Counting starts on the date the gym chooses to start; days before it are kept apart as practice and never counted. Until the gym chooses that date, every day counts, but nothing is marked. A day you worked with no shift set is counted as worked, never as late. These counts are worked out on the owner's or manager's phone from the records above; nothing new is stored, and they are not sent to you or anyone else as a notification. A count is only as good as the door scans behind it: if one is wrong, tell your manager, who can correct the attendance, and the correction is recorded.
The gym is required by law to keep these records, so they are kept for five years after the end of the year they belong to and then deleted. That stays true if you leave the gym or delete your Vyaam account: the records belong to the gym, and the law makes it keep them. Nobody can change attendance or a leave decision after the fact without it being recorded who did.
If you are a trainer and your gym pays commission on personal training, the owner can record your rate in Vyaam, with the date each rate starts, and the personal-training payments made for sessions with you are marked as yours. You and the owner can see your rate and your monthly figure; other staff and members cannot. Every change of rate is recorded in the gym's activity log.
If you set up a gym in Vyaam yourself, the gym's name and city are recorded, with your account as its owner and the phone number you confirmed. Vyaam reviews every new gym before it opens to the public: until then nobody can join it or find it by its door code, and Vyaam may call you on that number about it. If Vyaam turns it down you are told why, and the gym's records are kept, closed to the public.
Members of your gym can see how you are training, on a leaderboard only that gym can read. It carries your name and photo, which days in the last four weeks you checked in at the gym or logged a session, your streak, and your best set on each of up to sixty exercises you have trained recently — the weight, the reps and the name of the exercise. Any member can pick an exercise and see how the gym ranks on it.
It does not carry anything you have eaten, your body weight or measurements, what you have written in notes, or anything from Health Connect.
You can stay off it. Settings has a switch to keep you off the leaderboard, and turning it on removes your entry rather than hiding it — there is nothing left in the gym's records to show. Your workouts stay yours either way.
If you join a challenge your gym runs, your first name, your photo (unless you choose Anonymous) and your score are shown to your gym's members on that challenge's board. Check-ins are counted by Vyaam from the check-ins your gym records; for a challenge about your own workouts, your score comes from your own log and is marked as self-logged. When the challenge ends, the winners may get a discount code from the gym, and the gym may post the results to its feed with first names. Your entry and the board are deleted 90 days after the challenge ends, and at once if you leave it or delete your account. If you are under 18 you can join only if your guardian agreed to the social part of the consent; you are shown by first name without a photo, and never named in a results post.
Accounts belonging to 14- to 17-year-olds are not on the leaderboard at all: their entry is never published, and they do not see other people's.
Your gym's staff can also make a weekly card — an image with the week's check-ins, sessions and how many members showed up — to post in the gym's WhatsApp group or elsewhere. It names the most consistent members of the week, as a first name and initial ("Asha V."), and only from those on the leaderboard. If you stay off the leaderboard you are never named on the card, and nobody the gym's records show as under 18 is ever named, whatever they chose. Once the gym has shared the card it is outside Vyaam.
When you record an exercise clip in Vyaam, it records sound as well, unless you turn that off. The Sound button is on the recorder, before and during the take; "Record sound with videos" is in Settings → Permissions; and after recording you can choose "Remove sound" before you save it. If you do not give Vyaam permission to use the microphone, clips are recorded without sound. While sound is on, the recorder reminds you that people nearby may be heard.
The sound is part of the video file, kept on Google's servers in India. Nothing else is made from it, and it is not sent to any AI service or anyone else. Whoever can see the video can hear it:
Videos you post to your gym's feed, or with a class recap, are ones you choose from your phone's gallery. They keep whatever sound they already had — Vyaam neither adds it nor takes it away — and the members and staff of your gym can hear it.
A gym is not a quiet place, and a video may pick up other people talking. If you hear yourself in a video and would rather not be in it, use "Report" on it in the app, tell the gym, or write to support@vyaam.in, and it will be taken down.
Accounts belonging to 14- to 17-year-olds cannot upload videos.
Other members of your gym can see whether you are using Vyaam at that moment, shown as a dot beside your name, and when you last had it open — on the member list, on profiles and on leaderboard rows. So can you, about them. It is worked out from the app itself: while you are using Vyaam it says so every few minutes, and it stops when you put it away, switch to something else, or leave it untouched for a few minutes.
When you are not using it, the app shows the time you last were — for example "4:32 pm" earlier the same day. If you are part way through a workout, that is shown too, as it already is to your training buddies.
You can turn this off. In Settings → Account, "appear offline" stops anyone seeing your dot or your last seen — and, so that it is not a one-way mirror, stops you seeing theirs. It also stops the app showing that you are training now. While it is on, the app records nothing about when you were using it, so there is no time being kept that somebody could be shown later.
If you train with a personal trainer at your gym, that trainer's home screen can show when you are part way through a workout: that you are training now, for how long, and the name of the day's workout, never your sets, weights or reps. "Appear offline" stops this too, and accounts belonging to 14- to 17-year-olds are never shown.
Accounts belonging to 14- to 17-year-olds are left out of this altogether: their dot and last seen are shown to nobody, and they see nobody else's.
A gym that runs on Vyaam keeps an activity log of what happens in it: who checked in and when, payments recorded, taken online, or refunded, members added or edited, content posted or removed, and settings changed. Each entry names the member of staff who did it and the member it was about. The log is visible to that gym's owner and managers, and to Vyaam's administrators for support. Entries are deleted automatically after 180 days. It is a record of actions in the gym, not of what you train or eat.
Each week Vyaam also works out, for each gym, how many of its members are using the app, how many have logged a workout, how many turned up that week, and how many who were reminded to renew did so. These are counts only, made from records Vyaam already holds; they name nobody, and only Vyaam's administrators see them, to help gyms get their members started.
Paying your gym. When you pay a membership fee in the app by card or online banking, the payment is processed by Razorpay on your gym's own account. Card numbers, UPI IDs and bank details are entered on Razorpay's secure page and never reach Vyaam. Vyaam stores what a receipt needs: the amount, the plan, the date, a payment reference from Razorpay, the receipt number, and the payment's status (pending, paid, failed, refunded). Your gym sees the same record in its Razorpay dashboard together with the payer name Razorpay shows it. Vyaam does not receive or hold the money.
Paying your gym by UPI. If your gym takes UPI in the app, you pay from your own UPI app straight to the gym's UPI ID; the money goes to the gym, and Vyaam never sees it or your bank details. You then tell the app you have paid. Vyaam keeps your name, the plan, the amount, a short code that goes in the payment note, the 12-digit UPI transaction reference if you choose to enter it, and whether the payment is waiting, confirmed or declined. The gym's staff see this so that they can find the payment in the gym's account; a manager confirms it, which records the payment and extends your membership, or declines it with a reason. If you delete your account, a payment still waiting is withdrawn and your name is removed from the rest; the amount, plan, dates and any transaction reference stay with the gym's payment records.
Buying Vyaam Pro or Max. On the web, Razorpay processes the payment on Vyaam's account; we store the subscription reference, plan, dates and status, and never see your card or your UPI id. Buying Pro or Max inside the Android app is done through Google Play, which processes the payment under Google's own privacy policy; Vyaam never sees your card, your UPI id or your Google account's payment details. Your Vyaam account id — a random identifier, not your name, e-mail or phone — goes to Google Play with the purchase, so that the subscription stays with the account that bought it. If you tap Restore purchases while signed in to a different Vyaam account, on a phone whose Google account holds the subscription, it moves to that account and the first account loses it; this can happen once in 30 days, and we keep a record of which accounts it moved between. Vyaam's server then checks the purchase with Google itself and keeps a record of your plan (monthly or yearly), its state (active, renewing, in a grace period, on hold, paused, cancelled, expired or refunded), when the paid period ends and whether it renews, which you can see in the app. It also keeps, on the server only, the purchase token Google issued and Google's order number, so that one subscription is tied to one Vyaam account and a refund or a question can be traced. Google tells our server when the subscription renews, is cancelled or refunded, and nothing else about you. Deleting your Vyaam account deletes this record and the token; it does not cancel the subscription, which you cancel in Google Play → Payments & subscriptions. The sales records Vyaam keeps for tax are the reports Google Play gives us, which carry order numbers and amounts but not your name.
What we keep and for how long. Payment records for gym fees are the gym's business records and are retained by the gym; Vyaam keeps its copy for as long as the gym is on Vyaam and for 8 years after, as required for tax records, then deletes it. Vyaam's own sales records (Pro, gym subscriptions) are kept for 8 years for the same reason. Deleting your account removes your profile and training data; payment records survive in anonymised form (a receipt number, amount and date without your name), because the law requires them to.
Before Pro could be bought, tapping "Notify me when Pro launches" recorded that you asked, when, and which feature you were looking at. Only you and Vyaam's administrators can read that record. Vyaam used it to count who was waiting and to tell you when Pro launched, and it is deleted with your account.
Training buddies you add can see your workouts and streaks if you share them, chat with you, and see your badges.
Besides text and photos, you can send voice notes, short videos and files in a chat. They are encrypted on your phone in the same way, including a file's name, and Vyaam stores only the encrypted copy, kept within size limits. If you pin a message, Vyaam stores only which message is pinned, never its contents, so both of you see it at the top of the chat. Saving a photo, video, voice note or file from a chat puts a copy on your phone, outside Vyaam.
Messages are end-to-end encrypted. When you first sign in on this version of Vyaam, your phone or browser makes a pair of keys for Messages: the private key stays on that device and is never sent to Vyaam, and the public key is stored with your account so your buddies' devices can encrypt messages to you. Every message, photo and video, and anything you share in a chat, is encrypted on the sender's device before it leaves, and can be decrypted only on the devices of the two people in the conversation. Vyaam's servers, and Vyaam's staff, hold only the encrypted copy and cannot read it. Photos have their location and camera details removed on your device before they are encrypted; videos are sent as recorded, so a video can carry the location your camera saved in it, which only the person you send it to can see.
On Android, a new-message notification can show the message's text: it reaches your phone still encrypted, with the copy of the key made for that phone, and is decrypted on the phone to be shown. Vyaam's servers never see it. You can turn this off in Settings → Notifications (“Show message text in notifications”); where your lock screen hides private content, it shows only “New message”.
What Vyaam can see is the information needed to deliver messages: who is talking to whom, when each message was sent, whether it is text, a photo or video, or a share, its size, whether it was delivered and read, and which emoji reactions were added.
On the web, your private key is kept in your browser's storage, so anyone who can use your unlocked browser profile could read your messages there. On Android, it is protected by the phone's secure key store. A new phone or browser cannot read messages sent before it was set up. A message to a buddy who has not yet updated Vyaam waits on your device, marked as not sent, and goes as soon as they update; it is never sent unencrypted. If a buddy's keys change (for example, a new phone), the chat says so.
Messages sent before end-to-end encryption was turned on remain stored as before, readable by the two people in the conversation, and are marked in the chat.
Everywhere else — on the web, on an iPhone, and on Android with “Show message text in notifications” off — a notification about a message says only who sent something ("Sent you a message"), never what it says. While Vyaam is open on your screen, the card that pops up for a new message shows its words, opened by your device with its own key, as your chat list does; on Android with "Show message text in notifications" off, it shows only who sent it. The copy kept in your alert list never holds the words either.
In the Android app you can check whether people in your phone's contacts are on Vyaam, from "Find friends from contacts" on the buddies screen. Nothing is read until you tap it, read what it does and allow Vyaam to see your contacts; you can say no and the app works the same.
The app reads only the phone numbers in your contacts — not names, e-mail addresses or anything else — and scrambles each one on your phone into a one-way code before it is sent, over an encrypted connection, to Vyaam's server in India. The server scrambles it again with a secret key that never leaves the server, compares the result with the numbers of people who can be found this way, and sends back the matches. Scrambling stops a number being read in passing, but it is not anonymity, so we keep as little as we can:
A match shows the person's name, photo and username, with Add buddy and Follow. It never shows their number, and it never tells them that you looked.
Being found. People who have your number can find you this way, and are told when you join, only if "Let people who have my number find me" is on (Settings → Account). It is on unless you turn it off: a new account sees the switch when setting up its profile, and an account made before this feature sees a notice first — nobody is findable until they have seen it. Only a number you have verified is used. We keep a record of your choice and when you made it. Turn the switch off and you stop being found at once. Nobody under 18, or whose age we don't know, can be found or use this feature, and people you have blocked, or who have blocked you, are never matched. Your phone keeps the last list of friends it found (their names, photos and usernames, never their numbers), so it can show it again without checking; it is replaced when you check again and removed when you sign out.
Reporting. You can report a feed post, a comment, a chat message, a member's profile, a Zen reply or a scan result. A report records what you reported, the reason you chose and anything you typed, your account id, the account the report is about, and the time. Reports go to Vyaam and, for content inside a gym, to that gym's staff, so that they can act on it. The person you report is not told who reported them. You cannot delete a report once it is sent, and neither can the person it is about. Reports are kept while they are being dealt with and for up to 180 days after.
Because messages are end-to-end encrypted, Vyaam can see a reported message only if you report it. Reporting messages shares the ones you choose, decrypted on your device, with Vyaam's safety team, together with the key for each one, so that Vyaam can check that they match what was actually sent. Nothing else in the conversation is shared.
Blocking. You can block another member. The block is stored privately in your own account: they are not told, and nobody else can see who you have blocked. Their posts and comments stop appearing for you, they cannot send you messages or buddy requests, and they disappear from your search. Blocking does not remove them from your gym or hide the gym's feed from them. Undo it at any time in Settings → Account → Blocked members.
These are the outside services Vyaam relies on, and exactly what each one gets:
We do not run ads, do not use an advertising or analytics SDK, and do not sell your data to anyone, ever. The one reporting SDK in the Android app is Crashlytics, for crashes only.
When something goes wrong while you are signed in, the app sends an error report so it can be fixed. It contains the error message and the technical trace, the screen you were on and the last few things you did in the app, the app version, your device model and browser identification, your account id and, if you belong to one, your gym's id. It does not contain your name, your messages or anything you have logged. These reports are visible only to Vyaam's own administrators and are deleted automatically after 180 days.
If the app fails before you have signed in, a report is kept too, so that problems with signing in can be fixed. It carries the same technical details but no account id and no gym id. To stop one connection flooding us with reports, your network address is used in scrambled, one-way form to count how many it has sent; that count is deleted within about two days. Vyaam never stores the address itself, though, as with any website, Google's servers that run Vyaam keep standard request logs, which include it, for 30 days. Before any report is saved, in Vyaam's own record as well as anywhere else, it is cleaned: anything shaped like an e-mail address or a long run of digits is replaced with a marker, and the text is cut short.
When you report a problem yourself, you can attach a screenshot. It is stored with your report, is visible only to Vyaam's administrators — never to your gym or to other members — and is deleted with the report after 180 days. Only attach a screenshot you are happy for us to see; whatever is on the screen when you take it comes with it.
When the app or our server hits an error, a report is kept in Vyaam's own error record, on the same Google Cloud project that runs the rest of Vyaam, so that it can be fixed. From the app it carries the error and its technical trace, the app's version, whether you are on Android or the web, the screen you were on, and the last twenty steps you took — screen names and actions such as "opened membership", not what you typed or logged. From our server it carries the error, the route that failed, and which version of our code was running.
It does not carry your name, e-mail address, phone number or account id, no request contents, no passwords or tokens, and no recording of your screen.
Before a report leaves your phone or our server, it is cleaned: anything shaped like an e-mail address or a long run of digits — a phone number, a payment reference — is replaced with a marker, and the text is cut short. One honest limit remains. An error message is written by the code that failed, and now and then it quotes what it was working on: the name of a food that could not be read, for example. That is not removed, because it is not contact information and it is often the only clue to the fault. Nothing in a report identifies you. These reports are kept for up to 180 days and seen only by Vyaam. Until September 2026 they were also sent to Sentry, a crash-reporting service in the United States. Vyaam's Sentry projects, and every report in them, were deleted on 30 September 2026, and nothing is sent there now.
The Android app also reports crashes and freezes of the app itself — the kind that close it before it can write to Vyaam's own record — to Google Firebase Crashlytics, as listed under "Who we share data with". Such a report identifies an installation of the app by a random number, not you: it carries no name, e-mail, phone number or account id. As with any crash report, the trace can now and then quote what the app was working on when it failed. Crashlytics keeps these reports, and the installation number, for 90 days. A version of the app built for testing sends none, and the web app sends none.
We count the actions you take in the app, such as starting or finishing a workout and checking in, without your name, to improve Vyaam. Each day's counts are stored under your account id, with the last few actions and their times (not for anyone under 18, whose actions are only counted), and only Vyaam's administrators see them, added up across everyone. They are deleted after 13 months, and at once if you delete your account.
Your profile, your training records, your photos and videos, and everything your gym keeps in Vyaam are stored on Google's servers in India — the database in Delhi, the media in Mumbai — and the code that answers the app runs in Mumbai. Since 29 September 2026, the request logs Google keeps for the servers that run Vyaam, which include the network address each request came from, are stored in Mumbai too, for 30 days.
Two things about your account are not. Your sign-in record — the e-mail address, phone number, name and photo that let you sign in, and your password if you set one — is held by Google's sign-in service, which runs only in the United States. And notifications reach your phone through Google's messaging service, which is not tied to any one country; a notice about a buddy's message carries their name and, on Android with "Show message text in notifications" on, the message still encrypted, which only your phone can open.
What leaves India is named on this page and nothing else: your sign-in record and your notifications (to Google, as above); crash reports from the Android app (to Google Firebase Crashlytics); e-mails Vyaam sends, including your sign-in codes (through Resend, in the United States); questions to Zen and any photo you attach, its daily analyses and coach messages, and plates you scan (to Gemini, OpenAI and TypeSafe); payment details (to Razorpay and Google Play, in India and abroad respectively); barcode numbers looked up in Open Food Facts (in France); the phone number you verify by text message (to Google, so that it can send the code); and, if you speak a set rather than typing it, your voice, which your phone's or browser's speech service may send to Google (or, in Safari on an iPhone, to Apple) to turn into text.
Vyaam's administrators look after accounts and gyms through an internal console. Signing in to it takes a Google account and a code from an authenticator app, every time. Inside it, personal details such as your phone number and e-mail address are hidden by default. An administrator can reveal one only by giving a reason, and each reveal, and every change made through the console, is recorded, with who did it and when. There is no way in the console to sign in as you or to see the app as you see it.
Without revealing anything, an administrator can see an adult account's basics: its plan and gym, which version of the app it uses and how it signs in, when it was made and last used, how many workouts and check-ins it has logged and its current streak, and the dates and lengths of its recent workouts — never what was lifted, eaten, weighed or written. A 14- to 17-year-old's account is only counted, never shown.
When a gym or you ask us to, Vyaam's support can add your account to a gym or remove it from one. Once you are a member, that gym's staff can see what any member's gym can see. You are told in the app each time. If you were added and it was not you, "Not me" in that notice removes you again for the next 7 days. A 14- to 17-year-old is never added this way: their gym's front desk does it, with their guardian.
Everything above travels encrypted (TLS) between your device and every service listed. Data at rest is encrypted using Google Cloud's standard encryption.
Vyaam is for people aged 14 and over. We do not knowingly create accounts for anyone younger, and the app refuses a date of birth under 14.
How a teen account is made. Members aged 14 to 17 can have a teen account, set up by their gym's front desk. Someone aged 14 to 17 cannot finish signing up on their own: the app asks them to go to the desk, and keeps nothing about them until an account is made there. At the desk, a parent or guardian signs a consent form in person and shows proof of identity. The app records the guardian's name, phone and relationship to the teen, the kind of identification the desk saw (never its number), which member of staff checked it and when, and what the guardian agreed to. This follows India's Digital Personal Data Protection Act, 2023, which requires a guardian's verifiable consent before a child's data is used.
An account made before Vyaam asked for a date of birth. Some accounts were made before the app asked everyone for one, and the app now asks for it once. If it shows that the account belongs to someone aged 14 to 17, the account becomes a teen account straight away, with the same limits as any other teen account:
What the account already holds stays in it, and it can be deleted at any time from Settings → Account. The gym learns only the date the account turns 18, and that a guardian's consent is needed. If the date of birth was entered wrongly, write to support@vyaam.in: once support has corrected it, a chat closed in the last 30 days can be reopened, but buddies and follows are not put back.
What a guardian agrees to. Three things, each separately:
What a teen account never has, whatever a guardian agrees to:
We run no advertising, to anyone.
A teen account also has no progress photos, and no automatic check-in unless the guardian agreed to location. Its gym keeps no birthday for it, only the date the account turns 18, so that the teen limits end on that day, and may send it WhatsApp messages only about renewals and class changes. A gym cannot add a 14- to 17-year-old from its register: they are added at the desk, with their guardian.
Who can see a teen's profile. Only their gym and their buddies — not anyone else signed in to Vyaam — until shortly after they turn 18.
Withdrawing consent. A guardian can withdraw any part of their consent, or all of it, at any time, at the gym's desk or by writing to support@vyaam.in. What is withdrawn switches off at once. Withdrawing all of it restricts the account, which can then be deleted from Settings → Account; that removes the teen's data as described above.
If you believe a child under 14 has an account, write to support@vyaam.in and we will remove it.
You can delete your account any time from inside the app: Settings → Account → Delete account. This removes your sign-in credentials first, then your private data (workouts, plans, body data, nutrition diary), your profile and device tokens, your notifications, your buddy connections and the chats that went with them, your follow relationships, your gym membership record and staff role, your gym feed posts, and the comments and reactions you left on other members' posts. It also deletes the answers in your profile and your place on the Pro waiting list and, on the phone you delete it from, your progress photos. Records your gym must keep about you, such as staff attendance or payments, note the date you deleted your account, so that they can be corrected but never added to. Two kinds of record stay: your gym's own business records (payments it took from you and your check-ins, which carry only an account id and no name), and exercises, foods or templates you contributed to the shared library, which other people may already be using. Email us if you want any specific item like that removed by hand, and we will. If you own a gym on Vyaam, transfer ownership to another staff member before deleting your account.
Activity logs — your gym's record of what was done in its part of the app, and Vyaam's own record of changes made on its servers — record people by account, not by name. The name shown in a log is looked up when the log is read, so a deleted account appears as "a deleted account" and a teen account is never shown by name. Names kept in entries made before this change are never shown, and every entry is deleted about 180 days after it was made.
You can also just email us to ask what we hold about you, to correct it, or to have it deleted, without going through the app.
Vyaam's database is backed up once a week to Google Cloud storage in Delhi, in the same project and the same country as the database itself. Each backup is deleted within eight weeks of being taken, and in the worst case nine. Backups exist so that data can be restored after a failure; nobody browses them, and access is closed to everyone outside Vyaam. Four times a year a copy is also taken off Google's servers and kept encrypted on a disk in India, so that a failure of the account itself is survivable; those copies are kept for a year, then deleted together with the key that unlocks them, which leaves them unreadable. When you delete your account, your data goes from the live database immediately and from the backups as those expire — in the worst case nine weeks later.
You can download what Vyaam holds about you from Settings → Export your data → Download your data. It makes one file with what is on your phone — your workouts, plans, records, food diary, water, health days, weight, measurements and settings — and, if you are signed in, what your account holds on Vyaam's servers that you are allowed to see: your profile, your gym memberships and what each gym keeps about you that you can see in the app (your payments, check-ins, health answers, your trainer's notes and assessments, and places at events), your posts and comments, your buddies, the chats you are in, who you follow and who follows you, and your notifications. Records a gym keeps only for its staff, such as its note of an enquiry you made before joining, are not in it; ask the gym for those. The file is put together on your phone and handed to you to save or share, and Vyaam keeps no copy of it. The account part can be downloaded once a day. Progress photos stay on your phone and are not in the file.
When you ask us for a copy of your data, to correct or delete it, or anything else about your privacy, we reply within 30 days, and usually within a week. We keep a record of the request — what you asked, when, and what we did — for three years after it is closed, so that we can show it was handled. The record never includes a copy of the data we sent you.
If this policy changes, we'll update the date at the top. Material changes (a new third party, a new kind of data) will also be reflected in the app's own update notes.
Vyaam is built and run by one person. Questions or requests: support@vyaam.in.
Grievance officer: Rishi Mishra, support@vyaam.in. We acknowledge a complaint within 24 hours and resolve it within 15 days; see Contact.