MynDesk

Privacy Policy

Effective 26 September 2026

MynDesk is business-management software for gyms and vehicle service centres, provided by Emergex India LLP, Door No. 632/2, Kanniyampuram, Ottapalam, Palakkad, Kerala 679104, India ("we", "us"). This policy covers the MynDesk web app and the MynDesk mobile apps for Android and iOS.

Who is responsible for which data

  • Your account data (business owners and staff who sign in): we decide how this is used and are responsible for it.
  • Your customers' data (gym members, vehicle owners, etc. that a business enters into MynDesk): the business is responsible for it and decides what to record. We store and process it only to provide the service to that business. If you are a member or customer of a business using MynDesk, contact that business about your data.

What we collect

  • Owner accounts: name, email address, mobile number, and password (stored only as a one-way hash).
  • Staff logins: name, mobile number, password hash, and the permissions the owner grants.
  • Business details: business name, address, phone, GSTIN, bank/UPI details and logo shown on invoices, and plan information.
  • Records a business enters: member and customer names, phone numbers, email, date of birth, gender, blood group, address, vehicle numbers, memberships, orders, sales, payments, expenses, staff attendance and salary records, tasks, and notes.
  • Activity logs: an audit trail of changes (who did what, and when) inside each business, used for security and accountability.
  • Technical data: sign-in session tokens (stored in your device's secure storage on mobile) and server error reports. Error reports are configured not to include personal data.

We do not use advertising, do not track you across other apps or websites, do not sell data, and do not access your camera, location, contacts, or photos.

How we use it

  • To provide the service: sign-in, storing and showing your business records, generating invoices and reports.
  • To send WhatsApp messages (such as membership reminders and receipts) to a business's customers, when that business has turned them on.
  • To provide support, keep the service secure, and fix problems.
  • To meet legal obligations, such as tax record-keeping.

Who we share it with

Only with service providers who run parts of the service for us, under their own data-protection terms:

  • Render (application servers and database hosting)
  • Vercel (web app hosting)
  • Cloudflare (network security and delivery)
  • Meta Platforms (WhatsApp Business messaging, only for messages a business sends)
  • Sentry (error monitoring, with personal data excluded)

Some of these providers process data outside India. We also disclose data if required by law. Within a business, what each staff member can see is controlled by the owner.

Security

Data is encrypted in transit (HTTPS). Passwords are hashed, each business's data is isolated from every other business, and sessions can be revoked at any time.

How long we keep data

We keep data while the business's account is active. When an account is deleted, its data is permanently removed as described on our account deletion page. Database backups are kept for 30 days. Where a business is legally required to keep records (for example GST invoices), we can provide an export before deletion.

Your rights and choices

  • Owners can view and edit their name and email in the app, and export business data on request.
  • Anyone with a login can delete their account from inside the app (More → Delete account on mobile, Settings on the web) or by following the steps on our account deletion page.
  • You may also contact us to access, correct, or erase your personal data, or to withdraw consent.

Children

MynDesk accounts are for businesses and their staff and are not intended for children. Businesses are responsible for having the right to record any minor's details they enter.

Contact and grievances

Questions or requests: hello@myndesk.com or WhatsApp +91 73562 64544.
Grievance Officer: Aswin Lal S, aswinlalmuthuvila@gmail.com. We aim to respond within 30 days.

Changes

We will post changes to this policy on this page and update the effective date above.