Updated 10 November 2026
Privacy notice
goJim is gym management software run by CodePixel Works ("we"). Two kinds of people appear in it: gym owners and staff, who use it to run a gym, and members, whose details a gym records. This page explains what the software does with that information. Each gym decides what it records about its own members and why. We run the service on the gym's behalf and keep every gym's records separate from every other gym's.
What is stored
- Your login: email address, name and mobile number. A password is stored only as a salted hash, so nobody at goJim can read it. If you sign in with Google we also keep your Google account's id, name and verified email address.
- What a gym enters about its members: name, phone, email (optional), date of birth, gender, address, city and state, an emergency contact, health notes, a photo, membership plans, invoices, payments, attendance, class bookings, diet charts, personal-training sessions and supplement purchases.
- What a gym enters about its staff: name, phone, role and photo.
- An activity trail that records who took a payment, gave a discount, changed a price or cancelled a membership, so a gym can see who did what.
- Sign-in attempts, kept so that guessing a password or a code can be slowed down. The address a request came from is stored only as a keyed hash.
- Anything you send us through the contact form: your name, email address, optional gym name and phone number, and your message.
- If a gym owner connects an AI assistant, a record of that connection: its name, what it may do, and when it was created, last used and set to expire. The access token itself is stored only as a one-way fingerprint.
Why it is used
To run the gym's records and billing, to sign you in, to email sign-in codes and reminders (for example that a membership is about to expire or an invoice is overdue), and to keep the service secure. If analytics is switched on, to see which parts of the product are used. The software shows no advertising and does not sell personal data.
Who else handles it
We use a small number of providers, and each sees only what its job needs.
- Our hosting and database providers run the servers and the database that hold everything above.
- Cloudflare R2 stores photos and payment QR codes. Each is kept at a long random web address that is not listed anywhere, but anyone who has the address can open it, so treat a photo as unlisted rather than private.
- Resend sends the emails: sign-in codes, reminders, and contact-form messages to us.
- Google is involved only if you choose to sign in with Google.
- PostHog provides usage analytics when the site is configured with it. It receives page paths, the name of an action (for example "payment recorded") and an anonymous user id with a role. It does not receive names, email addresses, amounts, or recordings of your screen, and it is switched off by your browser's Do Not Track setting.
- Meta Pixel runs on the public website, pricing, sign-up and owner overview pages (never on member records, staff screens or the member portal) to measure ad visits and sign-up steps. It receives page views and anonymous conversion actions, with automatic click-text collection switched off so member details are never sent.
- Moonshot AI (Kimi) is used only when gym staff run Import with AI to read uploaded spreadsheets, PDFs, register photos or pasted text into a preview before saving members. Uploaded document files are removed from temporary extraction storage immediately after reading.
- An AI assistant, only if a gym owner chooses to connect one (it is off by default). Through that connection it can read members' names, phone numbers, email addresses, plans, dues, invoices and attendance, but never health notes, dates of birth, emergency contacts or photos, and, if the owner allows it, check members in or record payments. What it reads goes to the company that runs the assistant. Every change it makes appears on the gym's activity page as made by an AI assistant.
- WhatsApp: the software prepares messages, such as a reminder to a member, which staff open in WhatsApp and send from their own phone. Where automatic reminders have been set up they are sent through WhatsApp's business service.
How long it is kept
- Sign-in codes expire after 10 minutes and are deleted after 1 day. Records of sign-in attempts are deleted after 1 day.
- In-app notifications are deleted after 90 days, and the log of WhatsApp reminders after 180 days.
- A gym's own records (members, memberships, invoices, payments, attendance and the activity trail) are kept for as long as the gym uses goJim, because they are its books. The gym's owner can export them as spreadsheets at any time from Settings.
- Members and staff can be deactivated in the app. There is no button to delete a person or a gym yet: to have data removed, email us (see below) and we will do it by hand.
How it is protected
Traffic to the site is encrypted. Passwords are hashed, and sign-in codes, sign-in tokens and AI assistant access tokens are stored only as hashes. Each gym's data is separated from every other gym's by the software and again by checks in the database itself. Staff see only what their role allows, and repeated wrong sign-in attempts are slowed down. No system is perfectly secure, and we do not claim this one is.
Your choices
If you are a member, your gym holds your records and decides what they contain, so ask the gym first: it can correct them, export them or deactivate you. If you are a gym owner or staff member, you can change your details and export your gym's records from Settings.
For anything else, including a request to have your data deleted, email team@codepixelworks.com. We reply personally, usually within a day.
Changes to this page
If what the software does changes, we update this page and the date at the top. This version is from 10 November 2026.