Privacy policy

Tuckly Technologies ("Tuckly", "we", "us") provides gym management software at https://tuckly.co and through the Tuckly web and mobile apps. This policy explains what personal data we collect, why, and the choices you have. It applies to visitors of this website, to gym owners and staff who use Tuckly (our customers) and, to the extent we process it on our customers' behalf, to their members.

1. Data we collect

• Website visitors: pages viewed, approximate location derived from your IP address (used only to show the edition for your country), browser and device information, and anything you submit through our demo and contact forms (name, email, phone, gym name, message).
• Customers (gym owners and staff): account details, billing information (processed by our payment providers; we never store full card numbers), support conversations and product usage data.
• Gym members: data that gyms enter into Tuckly about their members (contact details, membership and payment records, attendance, measurements, documents). For this data the gym is the data controller and Tuckly is the processor acting on the gym's instructions.

2. How we use data

• To provide, secure and improve the Tuckly service and this website.
• To show you the regional edition and currency relevant to your country. A single cookie (tuckly_region) remembers your choice for 12 months.
• To respond to demo and support requests and send service messages. Marketing emails are sent only with consent and always include an unsubscribe link.
• To send messages on behalf of gyms (payment reminders, receipts, class reminders) to their members through WhatsApp, SMS, email and push notifications, as configured by the gym.
• To comply with legal obligations, including tax and accounting rules.

3. Cookies and analytics

We use strictly necessary cookies (region preference, session security). If analytics are enabled, they are configured to anonymise IP addresses. We do not sell personal data and we do not use advertising cookies on this website.

4. Sharing

We share data only with service providers that help us run Tuckly: cloud hosting, payment gateways (Stripe, GoCardless and others), messaging providers (WhatsApp Business API, SMS and email delivery), analytics and customer support tools. Each provider is bound by contract to protect your data. We disclose data when required by law.

5. International transfers

Tuckly serves gyms in United Kingdom and other countries. Data may be processed in data centres outside your country, protected by appropriate safeguards such as standard contractual clauses. Customers can request their primary data region when signing up.

6. Security

Data is encrypted in transit and at rest, backed up daily and protected by role-based access controls and audit logs. Payment card details are handled by PCI-DSS compliant payment gateways and never stored by Tuckly.

7. Retention

We keep customer data for as long as the account is active and for a reasonable period afterwards to meet legal, tax and accounting obligations, after which it is deleted or anonymised. Gyms can export and delete member data at any time from within Tuckly.

8. Your rights

Depending on where you live (including under the GDPR, UK GDPR, India's Digital Personal Data Protection Act, CCPA, Australia's Privacy Act and the PDPA in Singapore), you may have the right to access, correct, delete, export or restrict processing of your personal data, and to withdraw consent. Gym members should contact their gym first, as the controller of their data; we assist gyms with every request. You can also contact us at support@tuckly.co.

9. Children

This website and the Tuckly service are intended for adults. Gyms that enrol minors are responsible for obtaining parental consent as required locally.

10. Changes and contact

We will post any changes to this policy on this page and update the date above. Questions and requests: support@tuckly.co.