Privacy policy
Last updated 7 November 2026
This policy covers the GymBro apps (the phone app and the Windows staff app) and this website, bookandry.com. Both are run by Greentech, the software studio of Rotem Grinhut in Israel. Contact: Rotem@bookandry.com.
Who decides what
GymBro is used by gyms. The gym decides who may use the app, registers its members’ phone numbers and enters their workout packages and trainers. The gym is responsible for that information. Greentech runs the app and processes the information for the gym, only to provide the service.
What GymBro collects
- Your account: your name, email address, and how you sign in (Google, or email and password).
- Your phone number, which your gym registers and which you confirm once with a code sent to you by WhatsApp.
- How the app should address you in Hebrew (the form of address you choose), and your language and display settings.
- Your gym details: your client number at the gym, your appointments, your trainer, your workout packages, how many workouts are left and when they expire, and your purchase history.
- Messages the app sends you (reminders and notices) and a notification token for your device, so the reminders reach it.
- For staff: role at the gym, the profile card you choose to show (photo, bio, certificates) and the actions you take in the app, which are recorded for the gym’s audit history.
GymBro does not show ads, does not include advertising or analytics tools, and does not sell personal information.
How it is used
- To let you sign in and confirm that your phone number belongs to a member or staff member of the gym.
- To book, move and cancel appointments, keep workout counts and show your history.
- To send appointment reminders and notices by push notification and in the app’s inbox.
- To keep the service secure, prevent misuse and fix problems.
Services that process it
GymBro uses these providers to run. Each receives only what it needs for its part:
- Supabase: the database, sign-in and protected file storage, hosted in Frankfurt, Germany.
- Vercel: the app’s server, in Frankfurt, Germany.
- Meta (WhatsApp): delivers the one-time code that confirms your phone number. Your phone number and the code are sent to WhatsApp for this.
- Google: Firebase Cloud Messaging delivers notifications to Android phones, Google Sign-In lets you sign in with a Google account if you choose it, and Google Maps shows the gym’s location.
- GitHub: hosts the Windows staff app’s installer and updates. Downloads carry no account information.
Some of these providers are outside Israel. Information is transferred to them only to provide the service and under their data-protection terms.
How long it is kept
Your information is kept while you use GymBro at your gym. When your gym or you ask for deletion, it is removed within 30 days, except records that must be kept by law, such as purchase records.
Seeing, correcting or deleting your information
You may ask to see the information GymBro holds about you, to correct it, or to delete your account. You can correct your name, form of address and settings yourself in the app’s Account screen.
To delete your account and data, email Rotem@bookandry.com from the email address you use in GymBro, with the subject “Delete my GymBro account” and the name of your gym. You will get a reply confirming the request, and the deletion is done within 30 days. Appointments and workouts you have at your gym will no longer be available to you after deletion.
Security
Information travels encrypted between the apps and the server. Each gym can reach only its own data, staff see only what their role allows, and photos and certificates are kept in protected storage.
This website
bookandry.com sets no cookies, runs no analytics and loads no third-party scripts or fonts. Cloudflare serves the site and keeps short technical logs, such as IP addresses, to deliver it and protect it from attacks.
Changes
When this policy changes, the new version is posted on this page and the date at the top changes.