SmartGym · Plataforma digital de fitness
Del acceso QR a las operaciones del gimnasio. Un sistema, 24/7.
Con el equipo de SmartGym diseñamos y desarrollamos una plataforma para socios, operaciones y el escáner de acceso. El móvil, la web y el dispositivo de la puerta leen el mismo estado de membresía.
Información
- Plataforma
- Web, iOS, Android y quiosco
- Registro verificado
- 439 commits · de enero a mayo de 2026
- Nuestro papel
- Desarrollamos la plataforma junto con el equipo de SmartGym. Trabajamos en la web, la aplicación móvil y el backend.
- Estado
- Servicio público en funcionamiento
Tecnología
- React
- TypeScript
- Capacitor
- iOS
- Android
- Express
- Bun
- YugabyteDB
- Drizzle ORM
- Tailwind CSS
- GoPay
- Cloudflare R2 & Stream
- FCM / APNs
Lo que aprenderá
- 01La puerta no puede confiar en una imagen QR. Deciden una firma de corta duración y el estado actual de la membresía.
- 02Un webhook de pago es una notificación, no la fuente de verdad. El estado se vuelve a consultar en GoPay.
- 03La validación facial comprueba la detección y los puntos de referencia de la foto. No identifica a nadie en la puerta.
- 04Tres superficies de producto necesitan permisos coherentes, auditoría y lanzamientos disciplinados en móvil y web.
01
De una promesa 24/7 a un solo sistema
SmartGym has three surfaces. A member app, an operations web and a kiosk or scanner at the door. Members buy a membership and open QR on their phone. Staff handle clients, training and payments.
These are not three separate products. They share a React and Vite foundation, Capacitor packages it for iOS and Android, and one YugabyteDB-backed API holds membership, payment and visit state.
02
Acceso sin confianza ciega
The QR rotates every 15 seconds under HMAC-SHA256, so a photographed code dies at once. The scanner takes only the adjacent step. A daily limit, a 15-minute grace and one device per account close it.
The same flow accepts MultiSport and UpBalansea cards plus equipment QR codes. A profile photo runs face detection and landmark checks, which is not the same as recognising a person at the door.
03
Un rastro de datos para pagos y operaciones
GoPay OAuth2 handles one-off and ON_DEMAND payments, 21% VAT, partial refunds and mandate cancellation. No webhook overwrites blindly. The backend refetches from GoPay before changing a membership.
Apple PKPass, Google Wallet and an offline HOTP code carry a pass outside the app. YugabyteDB with Drizzle holds about 92 tables. Cloudflare R2 and Stream serve files and video, FCM and APNs push.
04
Cómo ampliamos el sistema con el equipo de SmartGym
439 commits between 6 January and 26 May 2026. January laid Bun, React 19 and CI. February brought identity, QR and RBAC. March peaked at 198 commits. April and May closed the scanner and hardening.
Rise worked with the SmartGym team on web, mobile and backend. From workflow design through the data model and permissions to native builds, integration tests, security scenarios and GitHub Actions.
05
Un servicio activo y una rama de desarrollo aparcada
The public service still runs and SmartGym still lists active locations and 24/7 self-service. The branch we analysed has been parked since its last CI fix on 26 May. That is not the product ending.
What is left is one product foundation covering members, operations and physical access. The value is not the screen count. It is that QR, payment, permission and visit meet in one verifiable record.
Un objetivo parecido, adaptado a sus necesidades
