| IT for gyms is the set of systems a fitness business runs to sell memberships, take recurring payments, control door access and manage bookings, along with the network and support behind them. Most of it has to work at hours when nobody is on site. |
A Christchurch gym owner took a call at 5.20 one morning to be told that three members were standing outside in the dark, holding fobs that would not open the door.
The door controller had lost its connection overnight. Every access controller has a setting for what it does in that situation, and the installer had set this one to admit no one. Treat the example as illustrative; the setting is real and most owners have never been told which way theirs is configured.
IT for gyms gets bought one piece at a time, usually by an owner who needed one thing working that week. Four or five separate systems end up running the business. None of them was chosen with the others in mind.
Call it an illustrative independent 24/7 gym in Christchurch: 640 members at $18 a week, two staffed blocks a day, systems on their own for the rest. The cost of the gaps between those systems turns up in three places. None of the three has a line in the accounts.
About 22 debits fail each week. Staff chase down the bulk of them by hand, but seven a week never get chased at all, and those subscriptions are worth about $6,600 a year.
Twice a week the owner drives in to let members through a door that will not open, which at forty minutes a trip and 104 trips a year comes to $3,100 of owner time.
Bookings and billing sit in different systems, so three hours a week go on reconciling them by hand, which is close to $5,000 a year at $32 an hour.
Those three lines come to $14,700 a year.
What Is IT for Gyms?
IT for gyms is the technology a fitness business needs to sell and hold memberships, take money on a schedule, let the right people through the door and run classes. It covers the member management platform, access control, booking, the payment connection to the bank and the network underneath.
Each piece usually comes from a different supplier in a different year, and no single supplier is responsible for the joins between them.
A gym sells a subscription to a space, so the money moves on a schedule agreed months earlier and the doors have to open for eighteen hours a day.
Which systems does a gym actually run?
Five, at a typical independent site, each holding a different part of the member record.
- Member management, holding the joining contract and the payment authority against one record.
- Payments, moving money out of the member’s bank account on the cycle the gym set.
- Access control, deciding whether a credential opens a given door at a given hour.
- Class booking, the only one of the five that members touch every week.
- The connection and the cameras, which the other four depend on.
Very few gyms have all five talking to each other. The front desk ends up keeping a spreadsheet. The owner cannot answer how many active members the gym has without opening three screens.
Why is a gym different from a cafe or a shop?
A gym charges for time, so its core system is a billing schedule attached to a contract. In a cafe or a shop the sale happens at the counter, and the till sits at the centre of everything.
Gyms still take card payments at the counter for casual entry and merchandise, which works the same way it does for any hospitality venue with a counter.
What Should a Gym Membership System Do?
A membership platform has to hold the joining contract, the payment authority and the current status of every member against one record, updating all three together. Systems that hold them apart produce the member who cancelled in March and has been training for free ever since.
Platforms sold into the sector manage this on their own; the gap opens where booking comes from one vendor and billing from another, and the two reconcile only overnight.
The market includes international products such as Mindbody and Glofox, and GymMaster, built in Christchurch by Treshna Enterprises, which supplies its own RFID and Bluetooth 24/7 door hardware. A platform that owns the door as well as the billing removes the sync problem.
What is a direct debit authority and who holds it?
A direct debit authority, shortened in the trade to DDA, is a member’s permission for the gym to take money from their bank account. Payments NZ, which governs New Zealand’s clearing systems, notes that establishing a direct debit generally requires signed authorisation and that the payer can cancel it at any time through their bank. That makes the authority a record the gym must store and produce on request, and a cancellation can reach the bank without reaching the gym.
Direct debits clear through the Bulk Electronic Clearing System, known in the industry as BECS. Those rules set how soon a bounced debit can be retried, and the membership platform decides what to do about it.
What happens when the billing system and the door system disagree?
An ex-member gets in, or a paying member gets locked out, and both come from a status change that landed in one system and never reached the other.
The fix is to name one system as the master and make the others follow it. Where a live link is not available, a nightly sync and an exception report the duty manager reads each morning will catch most of it.
How Does 24/7 Gym Access Control Work?
Access control at a 24/7 gym works by holding a list of valid credentials on a controller at the door, so entry keeps working when the cloud connection drops. The controller checks the credential against that local list and the current time, then releases the lock. Owners hear about this part of IT for gyms before any other, because the failures happen in front of members.
Sites commonly issue a fob or card using RFID, short for radio frequency identification, or a phone app over Bluetooth that removes the plastic and adds a dependency on a charged phone.
What happens if the internet drops at the door?
That depends on how the controller was configured: some keep admitting members from a cached list until the connection returns, and some stop admitting anybody.
Ask the installer two questions in writing: what does the door do when the network drops, and what does the lock do when the power drops.
Locks are described as fail safe, releasing on power loss, or fail secure, staying locked, and fire egress rules override both.
Who can still get in after a membership is cancelled?
Anyone whose credential was never revoked. Cancelling in the billing system does not remove a fob from the door controller unless the two are linked or a staff member deletes it by hand.
Put the live credential list from the access system beside the active member list from billing. Gyms doing this the first time usually find fobs still working for people who left months ago, and trial passes never switched off.
The other leak is tailgating, the industry’s word for one member swiping in while a second walks through behind them.
Door controllers and cameras are internet of things devices, so change the default password and keep the firmware current.
What Happens When Failed Member Payments Are Not Chased?
A failed payment left unchased for a fortnight usually ends as a cancelled membership, so what the gym loses is every remaining week of that subscription.
Dunning is the sector’s word for the sequence that follows a failed payment: the automatic retry, the reminder, the second retry and the phone call. Membership platforms can run it. Few independent gyms have switched it on.
Chasing a lapsed member back costs a text message and a scheduled retry, which is a fraction of what it costs to find and sign a replacement.
How quickly should a failed payment be chased?
Within three business days, and by automation on the first attempt, because a gym that waits until month end is chasing four weeks of unpaid access at once.
Set the retry schedule inside the membership platform and let it run, then send the debits that fail twice to a named person with a deadline against each.
Can a gym keep charging after a member asks to stop?
No. A member can cancel a direct debit authority through their bank at any time, and the membership contract still has to stand on its own terms. Commerce Commission guidance on unfair contract terms sets out that a court can declare a term in a standard form consumer contract unfair, after which relying on it is an offence under the Fair Trading Act.
Gym memberships are standard form consumer contracts in the ordinary case, because a member signs what is put in front of them. Auto-renewal wording and cancellation notice periods are worth a lawyer’s eye, and the IT job is making sure the system delivers whatever the contract ends up promising.
What Should a Gym Look for in Class Booking Software?
Class booking should sit on the same member record as billing, so a cancelled member cannot hold a spot in a full class. It also has to handle waitlists, class caps and a personal trainer’s own diary, because PT sessions and classes compete for the same floor.
Booking is the system members judge a gym by. It fails in public, on a phone, in front of the person who was about to recommend you.
How Should a Gym Set Up Member WiFi?
On its own network, away from the till, the door controller and anything else that runs the business.
Why does WiFi behave differently in a gym hall?
Because bodies absorb wireless signal and mirrors reflect it. A gym hall is full of both, so a survey taken in an empty room will not predict what happens in a full evening class.
Coverage and separation are different problems with different answers. Getting coverage and capacity right across a building deals with access point placement and density. Keeping visitor internet off the business network deals with who can see what, and a gym member belongs in that second group with a much longer relationship than a one-off visitor.
Should members get the gym’s WiFi at all?
Yes, because members expect it and a steel-framed building is hard on mobile signal. Put it on a separate network with a capped bandwidth and its own password. Keep the door controller and the payment terminal off that network, on the wired side if the building allows it.
What Member Data Does a Gym Hold Under the Privacy Act?
More than most owners realise. It runs to bank account details and a signed payment authority, contact details, an emergency contact, often a health declaration or screening form, and camera footage of people exercising. All of it is personal information under the Privacy Act 2020.
The Privacy Act 2020 replaced the Privacy Act 1993, still the name people search under. Information privacy principle 5 carries the security duty, and the Office of the Privacy Commissioner states it as safeguards that are reasonable in the circumstances to prevent loss and unauthorised disclosure.
Is a health declaration different from other member details?
It should be handled as more sensitive, yes. New Zealand law does not automatically make a gym a health agency, so the Health Information Privacy Code will not usually apply, though the reasonable-safeguards test still scales with sensitivity.
Keep the screening forms in the membership platform with access limited to the staff who need them, and get the paper copies out of the front desk drawer.
Who inside the gym should see what?
Fewer people than currently do. A casual weekend staffer needs to check a member in and take a payment, without access to the full member record or the bank details. Role-based access is a standard setting in these platforms, and the wider duty is set out in our guide to what the Privacy Act asks of a small business.
Cameras need the same discipline. Signage at the entrance and a set retention period are the two that get skipped, and both come up the first time a member asks to see footage.
What Does IT for Gyms Cost in New Zealand?
Between $600 and $1,400 a month for a single-site gym, plus a one-off fitting cost of $3,000 to $9,000 depending on how much access and network hardware needs replacing. The membership platform and managed IT make up most of the monthly figure, and the fitting cost varies with what is already on the wall.
| What you are paying for | What it covers | Indicative range |
|---|---|---|
| Membership and billing platform | Contracts, recurring debits, automated retries and reminders | $80 to $250 a month |
| Access control support | Door controller and reader management, with remote unlock and credential revoke | $1,500 to $4,000 to fit, then $40 to $90 a month |
| Systems integration, one-off | Booking, billing and door access reading from one member record | $2,000 to $5,000 once |
| Managed IT and connection monitoring | Patching, remote support and an alert when the site drops offline | $250 to $600 a month |
| Member WiFi, separated | Access points sized for a full hall, on a network of its own | $900 to $2,500 to fit |
Set that against the gym above. Automated dunning recovers the bulk of the $6,600 in never-chased payments, remote door management and a monitored connection remove most of the $3,100 in call-out trips, and folding three records into one takes back two of the three admin hours a week.
That recovers about $11,200 of the $14,700. Year one costs $4,000: $2,800 to integrate the systems and set up remote door management, plus $1,200 in added subscription and monitoring. Net gain in year one, $7,200.
From year two the subscription and monitoring is the only ongoing cost, so the net settles at about $10,000 a year.
Treat those figures as illustrative, because IT for gyms scales with member count; a 200-member studio sees smaller numbers on every line.
How Do You Fix a Gym’s IT Without Closing?
In stages, starting with the door, because a door failure locks paying members out of a building they have already paid for. Nothing on this list needs the gym to shut for a day.
- Find out what the door controller does when it loses the network, and write the answer where staff can see it.
- Export the live credential list from the access system and compare it against the active member list in billing.
- Switch on automated retries and reminders in the membership platform, and give the second failure a named owner.
- Put member WiFi on its own network with a capped bandwidth and its own password.
- List what member information the gym holds and who can currently see it.
- Decide which system holds the master member record, then link or sync the others to it.
Steps one to four fit inside a fortnight and need no new software. Steps five and six need a decision about who owns the member record. The sensible time for all six is spring, ahead of January, when a gym signs a large share of its year.
Book a Gym Systems Review
Exodesk has supported South Island businesses since 1989 and works with clients across Canterbury, Otago and Southland from offices in Christchurch and Dunedin. Our IT team looks after IT for gyms and studios, from door access through to the billing platform.
Contact us today to discuss how we can help your business or connect with us on LinkedIn to stay updated with more insights.
Frequently Asked Questions
What software does a small gym need?
A small gym needs a member management platform that handles contracts and recurring billing, an access control system for the doors, and a booking tool members can use on a phone. Many vendors bundle all three under one subscription. Buying them separately works when one platform is treated as the master record and the others read from it.
How much does gym management software cost in New Zealand?
Expect from about $80 a month for a single site on an entry tier to $250 a month or more once class booking and a member app are included. Payment processing is charged separately, either as a percentage of each debit or as a few cents per successful transaction.
Can members get into the gym if the power goes out?
That depends on the lock type and whether the site has a battery backup. Maglocks and electric strikes behave differently when power is lost, and a small battery backup on the door controller and reader keeps entry working through a short outage. Ask the installer to confirm the behaviour in writing before you need to know.
What is churn in a gym and how does technology affect it?
Churn is the sector’s term for the share of members who cancel over a given period, usually quoted monthly or annually. Technology moves it in two places: a failed payment nobody chases becomes a cancellation, and a booking system that will not load turns a good member into a lapsed one. Fixing the billing follow-up is the faster of the two.
Is a fob or a phone app better for gym entry?
Fobs are cheaper to issue and work without a charged handset, while phone credentials can be issued and revoked remotely in seconds. Sites commonly run both and keep fobs as the fallback.
Do gyms have to comply with the Privacy Act?
Yes. Every New Zealand business holding personal information is an agency under the Privacy Act 2020, and a gym holds bank details, contact details, emergency contacts and often health declarations. The size of the business does not change the obligation.
What happens to member data if a gym changes software vendors?
Member data belongs to the gym and should come out as a usable export before the old contract ends. Ask any vendor before signing what the export contains and in what format, because a report that omits payment authorities or credential identifiers makes the migration far more expensive. Direct debit authorities usually have to be re-established with the new provider. That is a member communication job as much as a technical one.
Can one system run a gym with more than one site?
Yes, and platforms differ most once a second site opens. Look for one member record that works everywhere and per-site access rules that can differ. Gyms that grow by bolting a second instance onto the first end up reconciling two databases by hand. Ask the vendor what a second site costs before you sign for the first.
Should a gym use the same network for cameras and member WiFi?
No. Cameras and door controllers belong on a separate network segment from member devices, so a compromised phone cannot reach them. Business-grade routers and switches can do this without new hardware.
Is it worth paying an IT provider when a gym only has three staff?
For a single-site gym it is, and the case rests on out-of-hours cover more than on headcount. The systems run for eighteen hours a day while the staff are there for six, so a fault before opening is a fault nobody in the business can fix. A small monthly retainer covering remote door management and connection monitoring usually costs less than the memberships lost in one bad week.
Who provides IT support for gyms in Christchurch and Dunedin?
Exodesk supports gyms, studios and small multi-site fitness operators across Canterbury, Otago and Southland, working from offices in Christchurch and Dunedin. The work covers door access and controller reliability, membership and billing platform support, member WiFi, network security for cameras and controllers, and the integration that makes those systems agree with each other. Exodesk has operated since 1989 and provides IT, cloud, cyber security and AI services to New Zealand businesses.
What does a 24/7 gym need that a staffed gym does not?
A 24/7 gym needs door access that keeps working with nobody on site, a monitored connection that raises an alert before a member phones from the footpath, and an out-of-hours support path. A staffed gym can absorb a system failure, because someone is there to open a door or take a payment by hand. Once the floor is unstaffed, the reliability of the door and the connection becomes a commercial question.
