A fitness club with 900 members and a front desk staffed from seven to nine. Outside those hours the door is locked, even though some members would rather train precisely then. The owner wants longer opening hours without rostering another member of staff, and wants to know who is inside when nobody is at the desk. Anyone choosing gym access control ends up on those two questions: what does it cost in desk time, and how much control do you keep?
Revtek · 19 August 2026
Every reader, gate and turnstile on the market opens the door reliably. The work sits in the list behind it: keeping who may enter aligned with who is paying.
Every club knows the pattern. Someone cancels and their fob keeps working until somebody deactivates it. A member pauses with an injury and access carries on. A direct debit fails and nobody notices until the month-end close. In each case two systems that know nothing about each other have drifted apart: your membership administration and your access system.
So measure the options below against one question: how often does someone have to step in by hand to keep the list correct?
Almost every fitness club uses one of these five, or a combination of them.
1. Fob or card. The member holds a card or tag to the reader. Works without a phone and without internet, and members know it. Fobs get lost, break and get lent out. Every replacement costs a fob and a conversation at the desk.
2. QR code on the phone. The member receives a personal code on joining and scans it on arrival. There is nothing to hand out and nothing to replace; if one is lost you send a new code. The member does need their phone at the entrance.
3. Licence plate recognition (ANPR). A camera reads the plate in the car park and opens the barrier. Hands-free, and it handles parking and access at the same time. Works only for members who drive; at a city-centre club that is a minority.
4. PIN code. The member types a code. No hardware needed on the member’s side. Codes get passed around, and most systems cannot revoke one without changing the code for everybody.
5. Front desk. A staff member checks each person in by hand. That gives personal contact and direct control, and it costs staff during every hour the club is open.
The purchase price of a fob is rarely the problem. Work it through for your own club. Take 900 members and assume one in seven loses or replaces their fob each year. That is roughly 130 replacements a year. If each takes five minutes at the desk (look up, issue, pair, block the old one), you spend close to eleven hours a year on it.
Fill in your own numbers. This is a worked example, not an industry figure. The cost sits almost entirely in desk time, and that time lands when reception is already busy.
Lending is the other factor. A fob is attached to a piece of plastic rather than to a person. Whoever lends one out gives a second person access on a single membership, and the reader cannot tell.
Which of the five you pick matters less than whether access is linked live to your membership administration.
Without that link you maintain two lists by hand and structurally run behind. With it, this happens by itself:
Revtek connects to Virtuagym, Perfectgym, SportBit Manager, eGym, Technogym Mywellness, Fitmanager and Mindbody, and in principle to any membership system with an API. You keep managing members where you do today; access follows.
Clubs rarely hesitate over longer opening hours for technical reasons. The question is who is inside when no staff are present, and whether you can demonstrate that afterwards.
So record every entry at member level: name, time, access point. After an incident you can see who was in the building. A code tied to one membership that expires on use prevents the lending that fobs allow. Set alerts for exceptions as well, such as a door held open too long or a repeated refused entry, so you only hear about what deviates.
That lets a club open from six to midnight on half a day of cover.
Access logs are personal data: they show where an identified person was at a given moment. You therefore need a lawful basis, a retention period and a data processing agreement.
Practically: record why you keep the logs (access security and member safety), set a retention period that matches rather than keeping everything indefinitely, and make sure your supplier signs a processing agreement. If you use WhatsApp to communicate with members, do it through the official Meta Business API rather than a staff member’s personal phone. The latter is processing you cannot account for.
A few rules of thumb:
All four cases share the same requirement: the access system has to know who is paying.
For more, see the page on access control for gyms and fitness centres.
Book a free demo and find out what Revtek can do for your site.
Book a demoOr email us at info@revtek.nl