Biometric Data Policy

In short

• Face check-in at the gym is your club's feature. The reference photo is stored in the club's CRM; the selfie from the app is only used to compare against it.
• Face ID and fingerprints for the app lock stay on your phone. VMI does not receive them.
• Both features are optional: you can enter the gym by QR code or at the front desk, and you don't have to turn on the lock.

1. Face check-in: where the reference comes from

A club employee takes or uploads the reference photo when registering you as a member or selling you a membership. The photo is stored in the club's CRM, which runs on the Visit Manager platform. The club decides whether to use face check-in and obtains your consent to take and use the photo itself.

As the CRM operator, VMI stores and processes the reference photo on the club's behalf and only for entry to that club. We do not use it for anything else, do not share it with other clubs and do not combine photos from different clubs.

2. How the check works

• You choose face check-in and take a selfie in the app.
• The selfie travels over a secure connection through VMI's server to the club's CRM, where the system compares it with the reference photo.
• Confident match — your entry is recorded automatically. Uncertain — an administrator confirms it. No match — you can try again or show your QR code.
• The selfie is only used for this check: the app does not save it to your gallery, and VMI does not keep it longer than the comparison requires.
• The log keeps the date, club, result and match score — without the image. It is used to resolve disputed entries.

3. How to opt out

• Don't use face check-in — enter by QR code or at the front desk.
• To delete the reference photo, contact your club: it is stored in the club's CRM and the club deletes it. If the club does not respond, write to [email protected] and we will pass your request on.
• Delete your account — Profile → Delete account. This deletes your face check-in log at VMI, but the reference photo in the club's CRM remains until the club deletes it.

4. Face ID and fingerprint in the app

You can turn on a lock in your profile: the app will ask for Face ID or a fingerprint when it starts and when you return to it after more than a minute away.

The check is done by iOS or Android itself. Your biometric data never leaves the phone: neither the app nor VMI receives or stores it — the app only learns the result, yes or no. If biometrics fail, you can enter your phone's passcode.

You can turn the lock off in your profile at any time. It has nothing to do with face check-in at the gym: they are separate features, and no data passes between them.

5. Legal basis

The Law “On Personal Data” (ZRU-547) treats biometric data as data that requires special protection. The reference photo is processed based on your consent, which the club obtains. The selfie is processed because you start the check yourself in the app.

6. Security

Reference photos and selfies are only transmitted over a secure connection (HTTPS). Each club's data is stored in the CRM separately from other clubs' data. It can be accessed by club staff with the right permissions and by a limited number of VMI staff who need it to support the service.

7. Questions

About the photo and CRM data — ask your club. About the app and what VMI does — write to [email protected]. Full Privacy Policy: vmi.uz/privacy.