Privacy Policy

Pull360 is a business-to-business platform used by gyms to run their operations. The information handled through Pull360 generally falls into a few categories:

• Account information for gym owners and staff, such as name, email and role.
• Member information that a gym chooses to enter, such as member profiles, memberships, payments, invoices and attendance records.
• Operational data generated through use of the platform, such as reminders configured and reports viewed.
• Technical information needed to operate the service securely, such as authentication and log data.

Information is used to provide and operate the Pull360 platform, including to:

• Deliver the features a gym has enabled, such as memberships, payments, attendance and reminders.
• Secure accounts and control staff access.
• Provide support and communicate about the service.
• Maintain, troubleshoot and improve the platform.

The gym decides what member information to enter into Pull360 and is responsible for its relationship with its members. This includes providing any notices and obtaining any permissions or consents required for the member data it processes. Pull360 provides the software platform that the gym uses to run its business.

Where a gym enables WhatsApp Automation, reminders are sent using the gym's own connected WhatsApp Business account. Pull360 processes the information necessary to send the reminders the gym configures, such as which member to remind and when.

Pull360 does not use one common WhatsApp number across all gyms. WhatsApp and Meta may apply their own terms and messaging charges to the gym's account.

Where a gym connects a compatible biometric attendance device, biometric verification occurs on the device itself. Pull360 does not store biometric templates, fingerprint data, facial recognition templates or raw biometric information.

Pull360 receives only the attendance information generated by the device, such as a member identifier, date, time and attendance status.

Pull360 relies on trusted third-party providers to operate the platform, such as cloud hosting and messaging services (including WhatsApp / Meta for WhatsApp Automation). These providers process information only as needed to deliver their part of the service.

Pull360 uses measures such as secure authentication, role-based access and secure API communication to protect information. No method of transmission or storage is completely secure, but we work to protect data in line with the sensitivity of the information handled.

Pull360 is designed so that each gym's data is isolated at the gym level, and staff access is controlled through permissions set within the account.

Information is retained for as long as needed to provide the service to the gym and to meet legal, accounting or reporting requirements. When information is no longer required, it is deleted or de-identified.

Because gyms control the member data they enter, requests from members are generally directed to the gym. Gyms can contact Pull360 for help with requests relating to data held in the platform. See our Data Deletion page for how to make a deletion request.

Members can opt out of WhatsApp messages by replying to the gym or contacting the gym directly. Because reminders are sent from the gym's own WhatsApp Business account, the gym manages its messaging relationship with its members.

Pull360 is intended for use by gym businesses. Any information about minors that a gym chooses to enter is the responsibility of the gym, which must ensure it has the appropriate permissions to do so.

We may update this policy from time to time. Material changes will be reflected here with an updated date.

Questions about this policy can be sent to hello@pull360.app.