About the business
I run a mid-size gym. Around four hundred members, open from early morning to late at night, and a small front-desk team. At the quiet hours there's nobody at the desk at all, so the door has to do the checking.
The problem: the door opened for whoever held the fob
Every member got a key fob. It worked fine until I actually read the entry records.
Then it didn't.
A few fobs were being used at times that didn't add up, like the same fob opening the door while its owner was on the other side of the gym. Fobs were getting passed around. One paid membership was covering two or three people.
The second leak was expired members. Staff were supposed to deactivate a fob when a plan ended. That depended on someone remembering, and some people kept training for weeks after their payments stopped.
Neither problem looked big on its own. Together, people were using the equipment, the space and the showers without paying, and I only found out by accident.
What we changed: access that follows the membership
We connected the door system to the membership records. An active membership opens the door. When a plan ends or a payment fails, access switches off by itself. Nobody has to remember anything, and nobody at the front desk has to have an uncomfortable conversation with a regular whose card stopped working.
For sharing, we moved most members off loose fobs and onto a phone-based QR check-in tied to one person. A QR code on a phone isn't perfect, since people can send screenshots, so the codes refresh every time they're used. A screenshot of yesterday's code doesn't open today's door.
For members who wanted it, we added palm vein entry as an option. We were careful here. A palm scan is biometric data, and several states require written notice and signed consent before you collect it. We take written consent at sign-up, publish how long the data is kept, and anyone who'd rather not simply uses the phone QR. Nobody is pushed into it.
The result: the door agrees with the books
Expired memberships stop working the moment they expire, with no staff time involved. Sharing dropped once access was tied to a personal credential instead of a piece of plastic. And because the entry records now match the membership list, I can trust them when I'm working out how busy the gym really is and when.
The goal was never to catch anyone.
It was to make sure the door and the books tell the same story. If you run a shared workspace rather than a gym, the same idea applies to members and guests.
If you suspect more people use your gym than pay for it, tell us how members get in today. We'll tell you whether a refreshing QR setup is enough, or whether you need something stronger.
Free door-by-door access review
Send us your door list, or just tell us what's behind each door. We'll reply with the weak spots and what to fix first, cheapest first.
- Free
- Reply within 24 hours
- No obligation