Privacy Policy

01 Overview & Controller

This Privacy Policy governs the use of the MangoFit software suite, including the member mobile applications, admin command cockpits, and IoT turnstile hardware controllers operated by Mangosoft ("we", "us", or "our").

When you use MangoFit as a gym or athletic club member, the specific facility operator (gym or hotel) is the Data Controller, and Mangosoft acts as the Data Processor on their behalf.

02 Data We Collect

• Account & Identity: Name, email address, phone number, and account credentials.
• Turnstile Access Telemetry: Timestamp, gate identifier, zone location, and entry/exit status recorded during physical passage.
• Mobile Device Diagnostics: Device model, OS version, and cryptographic tokens used strictly to validate dynamic QR passes and prevent unauthorized credential sharing.
• Transactions & Orders: Purchases made via the in-app supplement/shake store or automated membership renewals. Payment card numbers are processed directly by certified PCI-DSS compliant providers (such as Stripe) and are never stored on our servers.

03 Security & Encryption Standards

All data in transit is encrypted using modern TLS protocols. Hardware gate controllers communicate over mutual TLS-authenticated MQTT channels. Physical passage tokens are hashed and salted with SHA-256 signatures and expire in 15 seconds.

04 Member Rights & Retention

You have the right to request access to your personal data, rectify inaccurate records, or request deletion of your account. Access logs are retained in accordance with facility policies and local legal requirements before automated redaction.

For privacy inquiries, please contact our data team at privacy@mangosoft.mk.