Data Retention Policy
This policy states the default operational retention periods and records that are not automatically deleted.
Gym and member data
Core account, member, membership, attendance, training and measurement records remain while the gym is active and are not automatically deleted.
Financial records
Payments, receipts, debts and related records remain until the gym requests a lawful action consistent with accounting obligations.
Trial requests
Closed or converted trial requests are deleted after 730 days. Open requests are not automatically deleted.
Activity log
Gym activity records are retained for 1095 days for security and audit purposes.
Security records
Public-form attempts are deleted after 7 days and login attempts after two days when no longer needed.
Backups
When R2 is enabled, daily restore points for the last seven days are kept in private storage and share unchanged protection files. The previous copy remains until the replacement is complete and verified. Deleted files required by retained points are preserved. Without R2, a rotating local snapshot is used. Cleanup failures may delay deletion. Hosting backups and copies outside the Cloudflare account follow their own policies.
Deletion requests
Deletion requests are verified against identity, third-party rights and legal duties. Anonymisation may be used when a financial record cannot lawfully be deleted.