Data Processing Addendum
An operational draft for reviewing data processing with a gym; contractual terms need legal approval.
Last updated 7 October 2026
1. Subject matter
This draft describes processing of gym members' data for review by the gym and Kynvelo. It does not establish a signed subscription agreement, legal entity status or an approved data processing contract.
2. Scope of processing
Member identity and contact details, membership and plan records, attendance timestamps and gate identifiers, payment and invoice records, and any training or nutrition data members choose to log.
3. Processor obligations
The software provides tenant-scoped API access, role permissions, exports and reviewed erasure requests. Instructions, personnel confidentiality and any additional processor obligations must be agreed and implemented by the operator.
4. Sub-processors
Code integrations include Clerk, Razorpay, Firebase and, when configured, AWS S3, Sentry and Meta WhatsApp. AI analysis can use OpenRouter and its selected model host, Google Gemini or local models. The configured providers and their contractual terms need operator review; this draft does not claim signed equivalent-obligation agreements.
5. Return and deletion
The gym can export supported records and request reviewed account erasure. Offboarding, retention periods and deletion of remaining deployment data require an agreed operational process; there is no automatic 90-day gym offboarding job.
6. Audit
Contact support@kynvelo.online to discuss available technical documentation. Audit rights and any formal compliance evidence need to be agreed as part of the service contract.