Last updated 2 October 2026

Privacy policy

What MemberTap collects when you visit the site, request a demo or use a gym's member app, who we share it with, and the choices you have.

MemberTap is a member app that gyms offer under their own name, built and run by sundaystack. This policy explains what we collect, why, and who sees it. It covers three groups of people: visitors to this website, gym staff who use the MemberTap console, and gym members who use a gym's app.

Who is responsible for your data

For this website and the console, sundaystack is the controller of the data described below. For the member app, the gym you belong to is the controller of your membership data, and we process it on the gym's behalf and on its instructions. If you have a question about your membership record, ask your gym first.

Visitors to this website

When you request a demo we collect what you type into the form:

  • your name and email address
  • your gym's name
  • optionally, the club-management software you use, your approximate member count, and a message

We use it to reply to you and to arrange the demo. The request is stored with Loops, our email service, and our team is notified by email. We do not sell it or use it for anything unrelated to MemberTap. We may email you about your request; you can ask us to stop at any time.

The form is protected by Cloudflare Turnstile, which checks that a person is submitting it. Turnstile processes technical signals from your browser, such as your IP address, under Cloudflare's own privacy policy. Our hosting provider and Cloudflare also keep ordinary server logs. We do not run advertising or analytics trackers on this website.

Gym staff using the console

When a gym's staff are invited to the console we store their name, email address and role, and a password hash rather than the password itself. The console sets a session cookie to keep you signed in. It is needed for the console to work and is not used for tracking.

Gym members using the app

The gym's club-management software remains the record of its members. MemberTap reads from it and keeps a local copy of what the app needs to function:

  • your name, email address and membership status
  • the gym's class schedule and your bookings and waitlist places
  • the credential your gym uses to let you in, such as a barcode, which we store encrypted
  • your sign-in details, with the password stored as a hash

Bookings and cancellations you make in the app are sent to the gym's club-management software. We only use member data to provide the app to your gym. Credentials your gym gives us to connect its software are also stored encrypted.

Who we share data with

We use a small number of service providers to run MemberTap: Railway for hosting and the database, Cloudflare for the domain and bot protection, and Loops for email. They may process data only to provide their service to us. We share member data with the gym that the member belongs to, and with the gym's club-management software provider as part of the connection the gym has set up. We may disclose data if the law requires it.

How long we keep data

We keep demo requests for as long as they are useful for the conversation with you. Member and console data is kept while the gym is a MemberTap customer and is removed or returned when the gym asks us to once the agreement ends, unless we must keep it by law.

Your choices

You can ask to see, correct, export or delete the personal data we hold about you, or object to how we use it. If you are a gym member, we will pass the request to your gym where it is the controller. You can also complain to your local data protection authority.

Security

Data is sent over HTTPS, access to each gym's data is limited to that gym, and sensitive fields are encrypted in our database. No system is perfectly secure, so we cannot promise absolute protection.

Children

This website is not directed at children, and we do not knowingly collect their personal data through it.

Changes and contact

We will update this page when our practices change and revise the date above. To exercise your rights or ask a question, use the request form and say it is a privacy request.