Privacy

Aurum Club · last updated 15 October 2026

Aurum Club is the member app for gyms that use Aurum. It is also for people whose gym does not use Aurum: they sign in with Apple or Google, find a freelance coach, message them and follow their courses. Freelance coaches use it, and Aurum's portal, to publish courses and answer messages.

If you belong to a gym, your gym holds your membership record; this app shows it to you and lets you use it. If you use Aurum without a gym, or as a coach, Aurum holds your account. This page explains what is stored, why, and how to have it removed. The terms of use cover subscriptions, courses, chat and suspension.

What we hold

• Who you are — name, email address and phone number, so the club can identify you and sign you in. If you sign in with Apple or Google, what that provider gives us instead — see below.
• Your picture, if you add one or the club takes one at the desk — see below.
• Your membership — the plan you bought, when it starts and ends, and the invoices and payments behind it.
• Your visits — when you check in and out, and the classes you book. If your gym uses an entry card or a gate reader, the card's number and every attempt it makes at a door — including the ones that were refused, so the club can tell you why.
• Your training — the programme your coach wrote or a course gave you, any plan you build yourself and the exercises you add to it, the sets you log, and any food plan you were given.
• Health information you choose to give — date of birth, weigh-ins, body measurements, what you eat, and any health notes or emergency contact you or your coach records, including the reason a membership was frozen. A trainer needs this to coach you safely.
• Your food scans, if you use them — the estimate that came back, and the ingredients and meal you typed beside it. Not the photo — see below.
• Your messages, if you message a coach — see below.
• What you buy from Aurum — Aurum Pro, scan packs and coaches' courses: what was bought, when, the price and the store's transaction number. Never a card number — see below.
• What you write about a coach — if you rate a coach, the stars and any comment you add.
• Anything else the club records for you — a vehicle for parking, a signed waiver, or a note at the desk.
• Your tab — money prepaid at the front desk and what you spent it on at the counter.
• Your device — a notification token, so the club can send class reminders and receipts, and so you hear when a coach replies. Each kind can be turned off in the app.
• Your sign-ins — when you last signed in, and the short description of the software each sign-in came from (a web browser's name and system; for the app, little more than the toolkit it is built with). Some changes to your account are recorded with the internet address they came from, so misuse can be looked into. The server's request log also notes the internet address of every request for a short time, until the log is overwritten.
• When you last used the app — roughly when you last opened it (to within an hour), which version of the app it was, and whether it was the iPhone or the Android one. It is used to run the service: to know which versions are still in use before an old one stops working, and to answer you if you write to us about a problem.
• The people you blocked, and any report you made about a message.

What we do not do

• No tracking across other apps or websites. The banners on the home screen are the club's own promotions and local shops' ads; every member of the club sees the same ones, and nothing records which you see or tap. No advertiser is told who saw or tapped a banner. A shop learns your name only if you use one of its offer codes — see below.
• Nothing is sold or shared with data brokers.
• No analytics SDK is included in the app. Nothing records which screens you open or how long you spend on them. The one thing the app sends by itself is a crash report — see below.
• The app does not read your location, contacts or health app. It sees a photo only when you pick or take one: for your profile, for a food scan, or, if you are a coach, for a certificate.
• Nothing in Aurum is medical advice. Training and food plans are written by a trainer at your club or by the coach whose course you bought, weigh-ins and measurements are readings taken at the gym, and a food scan's calories are an estimate — not a clinical assessment. Talk to a doctor about any health concern, and before changing how you train or eat if you are pregnant, managing a condition, or taking medication.

The camera, and your picture

The camera is used for three things. Reading the code printed on your gym's counter when you pay from your tab: nothing is photographed, uploaded or stored. Taking a profile picture, if you choose to. And photographing a meal for a food scan, if you use it — see below.

A profile picture is one you pick from your phone or take yourself, or one the club takes at the front desk. It is made smaller before it is stored, 320 pixels across, which also removes anything the original file recorded about where or when it was taken. Staff at your gym see it, so they can put a face to your name at the desk, and so does a coach you message. You can remove it in the app at any time.

Signing in with Apple or Google

If you sign in with Apple or Google, the provider tells us your name, your email address, whether it has checked that address, and a number it uses for you in Aurum. We use them to make your account and to sign you in again; we never see your Apple or Google password.

Apple lets you hide your email address. If you do, we receive an address ending in privaterelay.appleid.com that forwards to yours, and we never learn the real one. Apple also tells us if you stop using Sign in with Apple for Aurum or turn off forwarding to that address; when you stop, your sessions in Aurum end.

Messages with a coach

Without a gym, you can message a freelance coach in the app; gym members cannot message anybody. What you write is stored on Aurum's server, so both of you can read the conversation, along with when each message was sent and when each of you last read the conversation.

• Before a message is stored, phone numbers, email addresses, links, social media handles and a list of swear words in English, Arabic and Kurdish are replaced with •••. What is stored is what both sides see.
• The other person gets a notification with your name and the first 80 characters of the message, unless they turned message notifications off.
• You can report any message. A report sends that message and the five before it to Aurum, who reads them and may hide the message or suspend the sender. Aurum has no screen for reading a conversation nobody reported.
• You can block anybody you are talking to. Neither of you can then message the other. You can unblock them under You → Blocked people.
• Your gym, if you later join one, cannot see your conversations.

Messages are kept as long as both accounts exist. When either of you deletes your account, the conversation is deleted for both of you — with one exception: if a message in it had been reported, the reported messages and the five before each are kept, out of both inboxes, for up to 180 days so the report can still be judged, and are then deleted.

Food scans

The food scan is part of Aurum Pro. It is powered by DeepSeek, an outside AI company, and the app asks before your first scan. You can withdraw that agreement at any time on the Aurum Pro card under You.

• The photo is shrunk on our server, which also removes anything the file recorded about where or when it was taken, and is sent to DeepSeek once, with any ingredients you typed, the meal and your language. DeepSeek processes it on its servers in China.
• Your name, email and phone number are not sent — only a code that stands for your account and cannot be turned back into it.
• Aurum does not keep the photo. Once DeepSeek has answered, it is discarded. What DeepSeek itself does with what it receives is set by DeepSeek's own terms.
• We keep the estimate that came back, so you can correct it before it goes in your food log, and so a failed scan can be given back to you.

Paying

In the app, Aurum Pro, scan packs and courses are bought through the App Store or Google Play. Apple or Google takes the payment; we receive a record of the purchase — the product, the transaction number, the date, the price and currency, and whether it was renewed, refunded or cancelled — and never your card or bank details. If you ask Apple for a refund, Apple may ask us how the purchase was used; we answer with whether it was delivered and used (for example, whether a course was started or scans were spent), nothing else.

On aurumclub.app, the same things can be bought through Rasedi, a payment company in Iraq, which takes the payment by card or wallet on its own page. We tell Rasedi the amount and what is being bought, not your name, email or phone number. We keep the order: what it was for, the amount, Rasedi's reference for it, and whether it was paid. The account page on the website keeps you signed in only in that browser tab, until you close it; the site sets no cookies.

If your gym lets its members pay it online, that payment goes through Rasedi the same way, and is recorded against your invoice or tab as if you had paid at the desk.

Coaches

A freelance coach's profile — name, photo, bio, specialties and certificates, with a photo of each — is shown in the app to people using Aurum without a gym, so they can choose a coach. Phone numbers, email addresses and links are masked in it the same way as in messages. Courses are shown only after Aurum approves them.

When somebody buys a coach's course, Aurum records the sale and the coach's share of it, and pays the coach each month. The coach sees how many of their courses sold and what they earned; they are not told who bought them. A coach sees the name and picture of somebody who messages them, and what they write.

When the app crashes

If the app closes unexpectedly, it sends a report to Google Firebase Crashlytics so the fault can be found and fixed. The report contains the error, the point in the code it happened at, and the phone's model and operating system version.

It does not contain your name, your email address, your membership, your club, or anything you typed, so it is not connected to your account. Crashlytics gives each installation of the app a random number of its own, so it can count how many phones the same fault happens on.

Who can see it

Staff at your own gym, according to their job. The front desk sees what it needs to check you in and serve you; trainers see your training and the health notes relevant to coaching; only the owner sees the club's financial reports. Staff at other gyms cannot see you at all.

If you use Aurum without a gym and a gym that uses Aurum adds a member with your email or phone number, it may invite your account to join it. It sees your name on the invitation. Nothing moves until you accept in the app; once you do, the gym holds your record like any other member's.

Other members see one thing: if you rate a coach, members of your club see your name, your stars and your comment on that coach's page. Nothing else about you is shown to other members.

A coach you message sees your name, your picture and your messages, as above.

A shop sees you only if you use one of its offer codes. When the code is typed in at its counter, the shop sees your name, the offer and the day, so it can tell the code is yours; it sees nothing else about you.

The person who runs Aurum can see accounts in order to run the service: to answer you, to deal with a reported message, to approve coaches' courses, to pay coaches, and to suspend an account that breaks the terms.

Who else is involved

• Apple and Google sign you in, if you choose them, and take payment for what you buy in the app. They are told what they need for that; nothing else about you is sent to them.
• DeepSeek estimates what is in a food photo, if you agree to it, as described above.
• Rasedi takes payments made on aurumclub.app, as described above.
• Google Firebase delivers push notifications, and receives crash reports. For notifications it is given a device token and the text of the notification; for crashes, what is described above.
• Google Fonts supplies one typeface, used only if your club chose the rounded style. The app downloads it from Google the first time it needs it, which, like any download, shows Google your phone's internet address. Nothing about you is sent with it. The website's sign-in page also loads Google's and Apple's sign-in buttons from them.
• Hostinger hosts the server, and the database on it, in the European Union. Encrypted backup copies are also kept elsewhere, as described below.

How long it is kept

Your record is kept while you are a member and afterwards, so the club has its own history. Financial records are kept because a business is required to keep them. An account without a gym is kept until you delete it. Notifications are deleted 30 days after they are sent.

The database is backed up every night. Each backup is encrypted before it is written, so it can only be read with a key that is not kept on the server. The server keeps the last 30 nights and deletes older ones. Copies are also kept, encrypted the same way, on the computer of the person who runs Aurum, so the records survive if the server is lost; those are kept for 30 nights too.

Deleting your account

In the app: You → Close your account. A suspended account can always do this too: it can still sign in, to a screen that offers only deleting the account and signing out. You confirm with your password, or, if you sign in with Apple or Google, by signing in with it once more. You can no longer sign in, and the following are erased straight away:

• Your name, email address, phone number, password and picture. Your email and phone number can be used for a new account.
• Your Apple or Google sign-in: the provider's number for you and the email it gave us. Signing in with the same Apple ID or Google account later makes a new, empty account. If you signed in with Apple, Aurum also asks Apple to end Aurum's access to your Apple ID; you can check, or do it yourself, in your Apple ID settings under Sign in with Apple.
• Your date of birth, gender, height, goal, health notes, emergency contact and the club's notes about you.
• Your weigh-ins and measurements, food plans and what you logged eating, food scans, supplement reminders, training programmes, plans and exercises you made yourself, logged workouts, and achievements.
• Your conversations with coaches, for both sides, except reported messages kept for review as described above. Reports you made are deleted with them.
• Your sign-ins, your devices and every notification sent to you. Notifications stop immediately.
• Your agreement to food scans.
• Your vehicles, entry cards and wristbands, extra room access, waiver signatures, and offer codes you never used.
• Your comment on any coach you rated.
• Notes and free text written about you on the records the club keeps (below): invoice and payment notes, the reason a membership was cancelled or frozen, coach notes on personal training, desk notes on check-ins, and the card number read at the door.

Deleting your account does not cancel an Aurum Pro subscription. Apple or Google bills it, and only you can cancel it, in your App Store or Google Play subscriptions. The app reminds you of this when you delete.

What is kept is attached to a numbered entry that holds nothing that says who you were:

• Invoices, payments, your tab's history, memberships, personal training sessions, counter sales and locker or parking rentals — the amounts, dates and what was bought — because a business must keep its financial records.
• Your purchases from Aurum — the store's transaction records, website orders, Pro and scan credits, and courses bought — with the store's own copy of each receipt and any note typed beside them removed. Aurum needs them for its accounts and tax, and because each course sale is part of what the coach who wrote it is paid.
• Check-ins, class bookings and door attempts, because they are the club's own attendance history and door log.
• The stars you gave a coach, because they are part of that coach's average. On the coach's page they now show as from a deleted member.
• Offer codes you used, so the shop and Aurum can count which offer brought people in. The shop now sees them as used by a deleted member.
• The club's record of what its staff did, with your card numbers, reasons typed by staff and your own internet addresses removed.
• Incident reports, which are the club's safety and insurance record. They no longer point to you, but what staff wrote in them is not changed and may still mention you.
• A block somebody else placed on you. It is remembered only as a scrambled code made from your Apple or Google sign-in and verified email, so that if you come back with the same one, the people who blocked you stay blocked; nobody else can tell it was you.
• If Aurum had suspended your account: scrambled codes made from the Apple or Google sign-in, email address and phone number it used, so that no new account can be made with them while the suspension stands. They are not the details themselves, and they are deleted if Aurum lifts the suspension.

Erased details leave every backup within 30 days, as the oldest backups are deleted.

If there is money on your tab, collect it at the front desk first — the account will not close while the club still owes you something.

You can also ask any member of staff at your gym to erase you, and they can do it from their side.

Coaches close their account through Aurum, not in the app: write to us below. Your courses are taken off sale (people who bought them keep their copies, shown as from a former Aurum coach), and your profile, certificates, conversations and sign-ins are erased as above. Your sales and payouts are kept, for the same accounting reasons. An account cannot be closed while a payout to you is still waiting.

Getting in touch

If you belong to a gym, speak to your gym first — they hold your record. For anything about the app itself, or if you use Aurum without a gym or as a coach, contact nawshadbaway@gmail.com or call 0770 448 6255.