GDPR-Compliant Gym Software: What to Verify
Is there GDPR-compliant gym membership software?
For EU/EEA gyms, you should be able to cite a published Article 28 contract, a sub-processor list, and clear hosting and retention facts. Sessy documents this on a dedicated page and in its legal texts.
Short answer: Sessy is gym membership software where your studio is the data controller, Sessy is the processor, core platform data is hosted primarily in the EU on Google Cloud / Firebase, and the Processor addendum is the written GDPR processing agreement. Sub-processors are listed at Sub-processors. Sessions use a 3-year TTL; newsletters are removed after 1 year. Optional Article 9 health-data consent is available since version 11.0.0. In-app AI (platform mode) uses Opper (EU) and Azure (EU); Sessy does not train models on gym data. MCP AI vendors are the gym’s processor, not Sessy’s.
Read the full, FAQ-backed summary: GDPR-compliant gym software.