Privacy Policy

Gymsen ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. What data we collect

When you use Gymsen, we may collect the following information:

• Account information — your email address and an encrypted password when you sign up
• Fitness and workout data — exercises, sets, reps, weights, workout notes, workout templates, personal records, and related activity you log in the app
• Supplement tracking — entries such as the dates you mark supplements as taken
• Photos and posts — any photos you take or upload and any content you choose to post within the app. Photos you upload are automatically scanned for inappropriate content before posting (see section 4)
• Purchase information — if you subscribe, your subscription status and transaction identifiers are processed by Apple and our subscription provider (RevenueCat). We never receive or store your payment card details
• Basic technical data — our hosting and infrastructure providers may automatically log limited technical information (such as IP address and device/browser type) for security and reliability

We do not collect your name, phone number, precise location, or contacts.

2. How we use your data

Your data is used to provide and improve the Gymsen service:

• To store your workout history and sync it to your account across your devices
• To display your progress, charts, and personal records
• To authenticate you when you sign in
• To manage your subscription and unlock paid features

We do not sell your data to third parties, and we do not use your data for third-party advertising.

3. Social features and content you share

Gymsen includes social features. You can follow other users, and content you choose to post (such as photos and workout activity) may be visible to people who follow you. You control the visibility of your account: you can set your account to private, in which case your posts are only visible to followers you approve. Content you post is stored on our servers (see section 4) so that it can be displayed to you and, where applicable, to your followers. Please only post content you are comfortable sharing, and remember that people who can see your posts may be able to save or screenshot them.

4. Where your data is stored and who processes it

Gymsen relies on the following trusted third-party services to operate. Your data may be stored or processed by them as part of providing the app:

• Supabase — database, authentication, and file storage. Your account, the workout data associated with your account, and any photos or posts you share are stored on Supabase servers. Supabase Privacy Policy
• Cloudflare — hosting and delivery of the app. Cloudflare may log basic request data (such as IP address and browser type) for security purposes. Cloudflare Privacy Policy
• Apple & RevenueCat — process subscription purchases and manage entitlements. RevenueCat Privacy Policy
• Google Cloud — when you upload a photo, it is automatically scanned by Google Cloud's Vision content-moderation service to detect inappropriate content before the photo is posted. Photos are processed solely for this moderation check and are not used by Google for any other purpose. Google Cloud Privacy Notice

Some data, depending on the feature, may be held only on your device. Where data is synced to your account, it is stored with the providers listed above.

5. Data security

Workout and account data synced to your account is stored in a secure database provided by Supabase, using Row Level Security so that data tied to your account is isolated from other users.

Passwords are never stored in plain text. Authentication is handled by Supabase Auth, which uses industry-standard encryption.

6. Data retention

Your data is retained for as long as your account is active. If you delete your account, the data associated with it is permanently deleted from our servers within 30 days.

7. Your rights

You have the right to:

• Access the data we hold about you
• Request deletion of your account and its associated data
• Export your workout data
• Correct any inaccurate information

To exercise any of these rights, contact us at the email address below.

8. Children's privacy

Gymsen is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: