Last updated: October 5, 2026

Privacy policy

Vigente is an app for gyms: it shows who paid, who owes and who is at the door, and gives every member a pass with a QR code. This explains what data we use, why and how you control it.

Who is responsible

Vigente is the controller of the data of people who run a gym on Vigente (owners and staff). Contact: privacidad@vigente.com.mx.

If you train at a gym that uses Vigente, the gym is the controller of your data and Vigente processes it on the gym’s behalf, only to provide the service. You can write to your gym or to us and we will pass it on.

What data we use

If you run a gym: your phone number or email (what you sign in with), your name, your gym’s details, the payout details you choose to enter (such as a bank account or Pix key, account holder and a WhatsApp number for receipts) and the status of your Vigente subscription.

If you train at a gym: name, phone number, plan, payment and expiry dates, amounts, payment method, visits (date and time) and, if you report a payment, its reference and bank. If you sign in with email, that email too.

Technical data: app crash reports and the IP address of each request, used only to stop abuse and not stored.

We do not use sensitive data. We do not store photos, passwords or card numbers. The camera only reads QR codes and keeps no images.

Why we use it

To create your account and let you sign in with a code by SMS or email; show your pass and its status and check it at the door; record payments, expiry dates and visits; show members their gym’s payment details and tell the gym when someone reports a payment; manage the gym’s subscription; and find crashes and give support.

The legal basis is the contract you accept by using Vigente and, for members’ data, the gym’s instructions. We do not use your data for advertising and we do not sell it.

Who we share it with

Your gym, which manages your membership. Infrastructure providers bound to protect it: Google (Firebase: sign in, a database in Mexico and crash reports), Cloudflare (servers and email) and Apple or Google Play (subscription purchases). Banco de México, only to check a transfer when you ask. And authorities, when the law requires it.

Some providers process data outside your country, with the safeguards the law requires. WhatsApp messages are sent by you or your gym from their own app; Vigente neither sends nor reads them.

How long we keep it

While your account or your gym’s account is active. If an owner deletes their account, we delete the gym and all its records. A member’s payment records belong to their gym and are deleted when the gym deletes them or its account.

Your rights

You can access, correct, delete, restrict, port and object to the use of your data, and withdraw consent. Write to privacidad@vigente.com.mx with your name, your phone or email and what you need. We answer within one month.

You can also delete your account in the app, under Ajustes or Perfil. If you are not satisfied with our answer, you can complain to your data protection authority.

Children

Vigente is not meant for children under 13. If a gym registers a minor, it does so under its own responsibility and with a parent’s or guardian’s permission.

Changes

If this policy changes we publish it here with the update date. If the change matters, we tell you in the app.