Privacy Notice
Last updated 12 October 2026
Draft pending legal review. This text describes how MemberKu currently works and will be finalised before paid launch.
This notice explains how personal data is handled when you use MemberKu, either as a gym (our customer) or as a member or visitor of a gym that uses MemberKu. It is written with Malaysia's Personal Data Protection Act 2010 in mind.
Who is responsible
Each gym decides why it collects its members' and visitors' data and is responsible for it. MemberKu processes that data on the gym's behalf to run the service. For gym owner accounts and MemberKu billing, MemberKu is responsible.
What we collect
- Account details: name, email, phone number and password (stored encrypted).
- Membership details: plans, payments, receipts and check-in times.
- Identity details: IC or passport number and an optional emergency contact. These are stored separately and are visible only to the gym's owner and managers. They are never shown to staff or sent to AI tools.
- Messaging preferences: whether you agreed to receive messages, and any opt-out.
Why we use it
- To register you, run your membership and check you in.
- To take payments and issue receipts.
- To remind you about renewals, but only when you have agreed to receive messages. You can reply STOP at any time.
- To keep the service secure and prevent abuse.
Who we share it with
Only with the gym you joined and the service providers needed to run MemberKu: hosting, payments (Curlec), messaging (WhatsApp, once enabled) and AI writing assistance. AI tools only receive first names and membership facts, never IC numbers, phone numbers or emails. We do not sell personal data.
How long we keep it
For as long as you're a customer of the gym, and afterwards for as long as needed for legal, tax and accounting purposes. Ask your gym to delete data that is no longer needed.
Your rights
You can ask to see or correct your data, or withdraw consent to marketing messages. Contact your gym first; you can also email MemberKu at privacy@memberku.fit.
Security
Data is encrypted in transit. Each gym's data is kept separate, and access is limited by role. Administrative access by MemberKu staff is restricted and every action is recorded.