Privacy Policy

Effective June 27, 2026

This Privacy Policy explains what GymPal collects, how it is used, and the choices you have.

1. Information You Provide

Account: when you sign in with Apple or Google, we receive your email address and, if you allow it, your name. Profile: the training details you enter — name, date of birth, sex, height, body weight, goals, training level, and any limitations you note. Training data: your workouts, sets, attendance, ranks/XP, and a gym location you choose to save.

2. How Your Data Is Stored

All of the above is stored locally on your device. If you create an account, your data is also mirrored to our backend (Supabase) under your account so it can be backed up and restored on another device. If you use the app as a guest, your data stays only on your device and is not uploaded.

3. Location

If you save a gym location, GymPal requests your location only in the foreground, only at the moment you start a workout, to check whether you are at your gym. GymPal does not track your location in the background and does not store a history of your movements.

4. AI Coach

If you use the AI Coach, your messages and relevant training context are sent through our backend to our AI provider (Groq, running Meta's Llama models) to generate a response. These are processed to answer you; they are not used to advertise to you.

5. Payments

Subscriptions are processed by Apple's App Store and managed through RevenueCat. We never receive or store your payment card details.

6. What We Do Not Do

We do not use third-party analytics SDKs, advertising identifiers, or cross-app tracking. We do not sell or rent your personal information.

7. Sharing

We share data only with the service providers needed to run the app: Supabase (authentication and backup), Groq (AI Coach responses), RevenueCat and the App Store (subscriptions). Each processes data only to provide their part of the service.

8. Your Choices and Rights

You can edit your profile in the app at any time. “Reset all data” clears the data on your device. “Delete account” permanently removes your account and the data stored on our backend. Where required by law, you may request access to or deletion of your data by contacting us.

9. Data Retention

We keep your account data until you delete your account. Local data remains on your device until you reset it or uninstall the app.

10. Children

GymPal is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect data from them.

11. Changes

We may update this policy. Material changes will be reflected here with a new effective date.

12. Contact

Questions about privacy? Contact us at support@gympal.xyz.