Venurix app and website

Privacy policy

What the Venurix app and the Venurix websites do with your data, and what your sports venue does. In short: we only process what is needed to sign you in and show your details at your venue. No ads. On the websites we only measure visits if you consent.

Version: draft · Last updated: 12 October 2026

Draft, subject to legal review

This text has not been legally reviewed yet and may still change, in particular the roles of Venurix and the venue, the legal bases and the retention periods. Highlighted fields are still to be filled in.

1. Who we are

Venurix is software for sports venues: bookings, members, memberships, access and more. Venurix is a product of burodevelopment BV (Chamber of Commerce (KvK) number 60091215, De Kazematten 2E, 6681 CS Bemmel, the Netherlands), based in the Netherlands. burodevelopment develops, implements and manages Venurix: the software, its implementation at sports venues, the Venurix app in the App Store and Google Play, and the websites venurix.nl, venurix.com and venurix.app.

This policy covers the Venurix app, the member portal and the sign-in pages on venurix.app, and the websites venurix.nl, venurix.com and venurix.app. For business customers, the general terms and the data processing agreement also apply.

2. Venurix and your venue

You use the Venurix app with a sports centre, club or other venue that works with Venurix. There are two roles:

Your venue is the controller of your data as a customer or member: your customer details, memberships, bookings, payments and access. The venue decides what it records and how long it keeps it. Please also read your own venue's privacy policy.
Venurix is a processor for the venue: we provide and run the software that holds this data, under a data processing agreement and only on the venue's instructions.
For your Venurix account (the sign-in account you use with one or more venues) and for the app itself, we are your point of contact.

3. What data we process

Your account: Your email address, your password (only as a one-way hash), your second factor if you set one up (authenticator app, recovery codes, passkeys) and an internal account id. Needed to sign you in and keep your account secure.
Link with your venue: Which account belongs to which customer of which venue. The link is only made through an invitation the venue sends to your email address.
Data from your venue: Your name as the venue knows it, your memberships, your bookings with price and status, and your access pass. This data comes from the venue; the app fetches and shows it. When you book or cancel in the app, that goes to the venue.
On your device: Sign-in tokens in your device's secure storage (Keychain or Keystore), the venue you chose and your theme. This data stays on your device.
Technical data: On every visit our hosting provider processes technical data such as your IP address to deliver and secure the service. Our own security logs contain internal ids only, no email addresses, names or messages.
Cookies: The sign-in page only uses functional cookies to keep you signed in and protect forms. The websites only set analytics cookies from Google Analytics, and only if you consent. See the cookie policy.

What we do not process: your location, contacts, photos, files, calendar, health data or messages. The app has no ads, no third-party analytics or crash reporting and no advertising id, and does not track you across other apps or websites.

4. These websites, statistics and contact

Visiting the websites: The websites run on Cloudflare. To deliver the pages and fend off attacks, Cloudflare processes technical data such as your IP address and browser. We only see anonymised totals of that.
Statistics with Google Analytics: Only if you click Accept in the cookie notice do we use Google Analytics to measure which pages are visited, how visitors arrive at the site (for example through a search engine), and with what kind of device and browser, with an approximate location at country or city level. For this, Google Analytics sets a cookie with a random id. We use this only to improve the websites. Google Analytics does not store IP addresses; Google signals, advertising features and sharing data with Google for its own purposes are switched off. If you decline, we do not load Google Analytics and nothing is sent to Google.
Contact and launching partners: If you email us, for example to plan an introduction or to apply as a launching partner, we use your name, email address, phone number and what you tell us about your organisation to reply and to discuss a possible collaboration.

5. Purposes and legal bases

Signing in and managing your account: needed to provide the service you use (performance of a contract).
Showing your details at your venue, booking and cancelling: on behalf of your venue, on the legal basis the venue has (usually your membership or booking).
Security and preventing abuse, such as limiting sign-in attempts: our legitimate interest in a secure service.
Emails about your account, such as a confirmation or password reset: only when needed for your account. We send no newsletters through the app.
Statistics about the use of the websites (Google Analytics): only with your consent. You can withdraw that consent at any time via Cookie settings at the bottom of every page.
Answering your questions and discussing a collaboration, including as a launching partner: our legitimate interest in responding to people who contact us, and preparing an agreement if your organisation wants to become a customer or partner.

7. How long we keep data

Your account is kept until you delete it.
Data at your venue (customer, memberships, bookings, payments) is kept by the venue under its own retention periods, also after you delete your account.
Logs: changes are recorded for accountability with an internal id only, which no longer points to anyone once your account is deleted.
Backups are overwritten after at most five weeks.
On your device: until you sign out, delete your account or remove the app.
Statistics (Google Analytics): Google Analytics keeps the data per visitor for 14 months; the cookie expires after 13 months at most, or earlier if you withdraw your consent.
Email contact: up to 2 years after the last contact, unless it leads to an agreement. Then we keep what that agreement and the statutory retention obligations require.

8. Deleting your account

You can delete your account yourself at any time:

In the app: Account → Account verwijderen (delete account).
On the web, also without the app: https://api.venurix.app/account/delete.

To be sure it is you, you sign in again first. We then delete your account completely: your email address, password, second factor and sessions, and the link with your venues. Your data as a customer or member stays with the venue, under that venue's responsibility. If you want that removed too, ask your venue.

If you also have a staff account at a venue, deleting is only possible once that access has been withdrawn.

9. Your rights

You have the right to access your data, have it corrected or erased, restrict processing, object, and take your data with you.

For your data as a customer or member (membership, bookings, payments): contact your venue. We help the venue with this.
For your Venurix account: you can delete it yourself (see above); for other requests email info@venurix.com.
For statistics: withdraw your consent via Cookie settings at the bottom of every page. This applies from that moment; what has already been measured stays anonymously in the totals until the end of the retention period.

We respond within one month. We may ask you to show that the account is yours; never send your password or codes.

10. Security

All connections are encrypted (https). Passwords are stored only as a hash and you can set up a second factor or passkey. The app never sees your password: you sign in on the Venurix sign-in page in your device's browser. Each venue's data is strictly separated and staff only see what their role allows.

11. Contact and complaints

Questions about this policy or your account: info@venurix.com, or by post to burodevelopment, De Kazematten 2E, 6681 CS Bemmel, the Netherlands.

If you are not satisfied with how we or your venue handle your data, you can lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or the authority in your own country.

When this policy changes, we update the date at the top.