Last updated: 29 September 2026
B-Strong is a members' app for a single private gym in Serbia. It is not a public service: a phone can only use it after the gym pairs it at the front desk. This policy describes what the app and its server hold, and why.
The data controller is B-Strong. Contact: bojanapetrovicfitness@gmail.com.
| Data | Why |
|---|---|
| First and last name | So the front desk knows who checked in, and the app can greet you. |
| Member ID | Identifies your membership record. Sent with every request the app makes. |
| Phone number, and email if you gave one | Held by the gym on your membership record so they can contact you. |
| Membership plan and its start and end dates | To show whether your membership is active and when it needs renewing. |
| Check-in history — the date and time of each visit | Shown to you in the app, and used by the gym to run the gym. |
| Session bookings and attendance | To reserve your place, and to record whether you attended. |
| Session credits — what you bought, spent and have left | So you and the gym agree on how many sessions remain. |
| Payments recorded by the gym | The gym's own records of what you paid for your membership. |
Pairing stores a secret key on your phone: on an iPhone in the iOS Keychain (via Apple's Secure Enclave-backed keychain services), on Android encrypted with a key held in the Android Keystore. Your rotating six-digit check-in code is generated from that key on the device. The key itself is never transmitted by the app, never sent to us, and is not readable by any other app on your phone. Removing the app, or using "Unpair this phone" in Settings, deletes it.
The app asks for camera access for exactly one purpose: reading the pairing QR code shown on the gym's own screen. Frames are decoded on your device. No image is stored, transmitted or uploaded, and the camera is not used anywhere else in the app.
The server is hosted in the European Union, and app updates are delivered through Expo, which receives technical information about your device and app version but none of the membership data above. Neither uses your data for their own purposes.
Your membership record, visits, bookings and payments are kept by the gym for as long as you are a member, and afterwards where they are required for accounting or legal reasons. Data on your phone — the check-in key, and a cache so the app still works without a signal — lives only on the device until you unpair or delete the app.
Under the GDPR and the Serbian Law on Personal Data Protection you may ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to bojanapetrovicfitness@gmail.com, or use Settings → Request account deletion in the app, which opens the same email. Deletion is handled by the gym, who hold the membership record; they will confirm by email. You may also complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection.
The app is for gym members and is not directed at children under 13. Members under 18 are registered by the gym with a parent or guardian's consent.
If this policy changes materially we will update this page and the date above.
Poslednja izmena: 2. septembar 2026.
B-Strong je aplikacija za članove jedne privatne teretane u Srbiji. Nije javni servis: telefon može da koristi aplikaciju tek nakon što ga teretana upari na recepciji. Ova politika opisuje koje podatke aplikacija i njen server čuvaju i zašto.
Rukovalac podacima je B-Strong. Kontakt: bojanapetrovicfitness@gmail.com.
| Podatak | Zašto |
|---|---|
| Ime i prezime | Da recepcija zna ko je evidentiran i da aplikacija može da vas pozdravi. |
| Članski ID | Identifikuje vaše članstvo. Šalje se uz svaki zahtev aplikacije. |
| Broj telefona i imejl ako ste ga dali | Teretana ih čuva u vašem kartonu radi kontakta. |
| Članarina i datumi početka i isteka | Da se prikaže da li je članarina aktivna i kada ističe. |
| Istorija dolazaka — datum i vreme svake posete | Prikazuje se vama u aplikaciji i teretani za vođenje evidencije. |
| Rezervacije termina i prisustvo | Da se rezerviše vaše mesto i evidentira da li ste došli. |
| Krediti za termine — kupljeni, potrošeni i preostali | Da se vi i teretana slažete koliko vam je termina ostalo. |
| Uplate koje teretana evidentira | Evidencija teretane o vašim uplatama za članarinu. |
Uparivanje čuva tajni ključ na telefonu: na iPhone-u u iOS Keychain-u, a na Androidu šifrovan ključem koji čuva Android Keystore. Vaš rotirajući šestocifreni kod generiše se iz tog ključa na samom uređaju. Ključ se nikada ne šalje nama, niti je dostupan drugim aplikacijama na telefonu. Brisanje aplikacije ili opcija „Unpair this phone" u podešavanjima ga briše.
Aplikacija traži pristup kameri isključivo da bi očitala QR kod za uparivanje prikazan na ekranu teretane. Obrada se vrši na uređaju. Nijedna slika se ne čuva niti šalje, i kamera se ne koristi nigde drugde u aplikaciji.
Server se nalazi u Evropskoj uniji, a ažuriranja aplikacije isporučuju se preko Expo servisa, koji dobija tehničke podatke o uređaju i verziji aplikacije, ali nijedan od gore navedenih podataka o članstvu. Nijedan od njih ne koristi vaše podatke za sopstvene svrhe.
Karton člana, dolasci, rezervacije i uplate čuvaju se dok ste član, i nakon toga onoliko koliko je potrebno iz računovodstvenih ili zakonskih razloga. Podaci na telefonu — ključ za prijavu i keš da aplikacija radi bez signala — ostaju samo na uređaju dok ne poništite uparivanje ili obrišete aplikaciju.
Prema GDPR-u i Zakonu o zaštiti podataka o ličnosti imate pravo na pristup, ispravku i brisanje svojih podataka. Pišite na bojanapetrovicfitness@gmail.com ili koristite Settings → Request account deletion u aplikaciji. Brisanje sprovodi teretana, koja vodi karton člana, i potvrdiće ga imejlom. Takođe možete podneti pritužbu Povereniku za informacije od javnog značaja i zaštitu podataka o ličnosti.
Aplikacija je namenjena članovima teretane i nije usmerena na decu mlađu od 13 godina. Članove mlađe od 18 godina teretana upisuje uz saglasnost roditelja ili staratelja.
Ako se politika bitno promeni, ažuriraćemo ovu stranicu i datum iznad.