Privacy Policy

1 Information We Collect

When you use GymGPT, we collect information to provide and improve our services. This includes:

Information You Provide

• Account details — name, email address, and password
• Fitness profile — age, height, weight, fitness goals, and experience level
• Workout data — exercises, sets, reps, weights, and session notes
• Journal entries and notes you write within the app
• Chat messages and conversations with the GymGPT AI coach

Information Collected Automatically

• Device information — device type, operating system, and app version
• Usage data — features used, session duration, and in-app activity
• Performance data — crash reports and error logs
• IP address and general location (country/region level only)

Information from AI Body Scan

• Photos or video frames you submit for body scan analysis
• Body composition estimates and physique scores generated by our AI
• Progress comparisons over time based on scan history

2 How We Use Your Information

We use the information we collect solely to deliver and improve GymGPT's services. Specifically:

• To create and manage your GymGPT account
• To generate personalised AI workout programs tailored to your goals
• To power the GymGPT AI coach and provide accurate fitness advice
• To process AI body scan results and track your physique progress
• To send you relevant app notifications and updates (with your consent)
• To analyse usage patterns and improve app performance and features
• To ensure platform security and prevent fraudulent activity
• To comply with applicable legal obligations

We will never use your data to serve third-party advertisements or sell your personal information to external marketers.

3 AI & Body Scan Data

The AI Body Scan feature involves sensitive biometric data. We treat this with the highest level of care:

• Photos submitted for body scan are processed by our AI model and are not stored permanently beyond what is needed to generate your result
• Body scan scores, ratings, and breakdowns are stored securely in your account to enable progress tracking
• Your body scan data is never shared with third parties for commercial purposes
• You may delete your scan history at any time from your account settings
• Body scan images are transmitted over encrypted connections (HTTPS/TLS)

4 Data Sharing & Third Parties

GymGPT does not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

Service Providers

We use trusted third-party providers to operate our infrastructure (e.g. cloud hosting, AI model services, analytics). These providers access data only to perform services on our behalf and are bound by strict confidentiality agreements.

Legal Requirements

We may disclose your data if required by law, court order, or government authority, or to protect the safety and rights of our users and the public.

Business Transfers

In the event of a merger, acquisition, or sale of GymGPT, your data may be transferred as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.

5 Data Storage & Security

We take the security of your personal data seriously and implement industry-standard safeguards:

• All data is encrypted in transit using TLS/HTTPS
• Data at rest is encrypted using AES-256 encryption
• Access to user data is restricted to authorised personnel only
• We conduct regular security audits and vulnerability assessments
• Passwords are hashed and salted — we never store plain-text passwords

Your data is stored on secure servers. We retain your data for as long as your account is active or as necessary to provide our services. You may request deletion of your account and data at any time.

6 Your Rights & Choices

You have the following rights regarding your personal data:

• Access — Request a copy of all personal data we hold about you
• Correction — Update or correct inaccurate information in your account
• Deletion — Request permanent deletion of your account and all associated data
• Portability — Request your data in a portable, machine-readable format
• Objection — Object to certain types of data processing
• Withdrawal — Withdraw consent for optional data uses at any time

To exercise any of these rights, contact us at support@appgymgpt.com. We will respond to all requests within 30 days.

7 Cookies & Tracking

GymGPT's website uses cookies and similar technologies to improve your experience:

Essential Cookies

Required for the website to function properly. These cannot be disabled.

Analytics Cookies

Help us understand how visitors interact with our website so we can improve it. You may opt out of analytics tracking at any time.

Preference Cookies

Remember your settings and preferences for a better experience.

You can control cookie settings through your browser preferences. Disabling certain cookies may affect website functionality.

8 Children's Privacy

GymGPT is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete that information.

Users between the ages of 13 and 18 should use GymGPT only with parental or guardian consent.

9 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make significant changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email or an in-app notification
• Where required by law, request your renewed consent

We encourage you to review this policy periodically. Continued use of GymGPT after changes take effect constitutes your acceptance of the updated policy.

10 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please don't hesitate to reach out.