Privacy Policy
Your privacy matters to us. This policy explains what data GymGPT collects, how we use it, and your rights regarding your information. Please read it carefully.
Information we collect
When you use GymGPT, we collect information to provide and improve our services. This includes:
Information you provide
- Account details: name, email address, and password
- Fitness profile: age, height, weight, fitness goals, and experience level
- Workout data: exercises, sets, reps, weights, and session notes
- Journal entries and notes you write within the app
- Chat messages and conversations with the GymGPT AI coach
Information collected automatically
- Device information: device type, operating system, and app version
- Usage data: features used, session duration, and in-app activity
- Performance data: crash reports and error logs
- IP address and general location (country/region level only)
Information from AI body scan
- Photos or video frames you submit for body scan analysis
- Body composition estimates and physique scores generated by our AI
- Progress comparisons over time based on scan history
How we use your information
We use the information we collect solely to deliver and improve GymGPT's services. Specifically:
- To create and manage your GymGPT account
- To generate personalised AI workout programs tailored to your goals
- To power the GymGPT AI coach and provide accurate fitness advice
- To process AI body scan results and track your physique progress
- To send you relevant app notifications and updates (with your consent)
- To analyse usage patterns and improve app performance and features
- To ensure platform security and prevent fraudulent activity
- To comply with applicable legal obligations
We will never use your data to serve third-party advertisements or sell your personal information to external marketers.
AI & body scan data
The AI Body Scan feature involves sensitive biometric data. We treat this with the highest level of care:
- Photos submitted for body scan are processed by our AI model and are not stored permanently beyond what is needed to generate your result
- Body scan scores, ratings, and breakdowns are stored securely in your account to enable progress tracking
- Your body scan data is never shared with third parties for commercial purposes
- You may delete your scan history at any time from your account settings
- Body scan images are transmitted over encrypted connections (HTTPS/TLS)
Body scan images are processed in-memory and not retained on our servers after your result is generated, unless you explicitly save a scan to your history.
Data sharing & third parties
GymGPT does not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:
Service providers
We use trusted third-party providers to operate our infrastructure (e.g. cloud hosting, AI model services, analytics). These providers access data only to perform services on our behalf and are bound by strict confidentiality agreements.
Legal requirements
We may disclose your data if required by law, court order, or government authority, or to protect the safety and rights of our users and the public.
Business transfers
In the event of a merger, acquisition, or sale of GymGPT, your data may be transferred as part of that transaction. You will be notified before your data becomes subject to a different privacy policy.
Data storage & security
We take the security of your personal data seriously and implement industry-standard safeguards:
- All data is encrypted in transit using TLS/HTTPS
- Data at rest is encrypted using AES-256 encryption
- Access to user data is restricted to authorised personnel only
- We conduct regular security audits and vulnerability assessments
- Passwords are hashed and salted, so we never store plain-text passwords
Your data is stored on secure servers. We retain your data for as long as your account is active or as necessary to provide our services. You may request deletion of your account and data at any time.
Your rights & choices
You have the following rights regarding your personal data:
- Access
- Request a copy of all personal data we hold about you
- Correction
- Update or correct inaccurate information in your account
- Deletion
- Request permanent deletion of your account and all associated data
- Portability
- Request your data in a portable, machine-readable format
- Objection
- Object to certain types of data processing
- Withdrawal
- Withdraw consent for optional data uses at any time
To exercise any of these rights, contact us at support@appgymgpt.com. We will respond to all requests within 30 days.
Children's privacy
GymGPT is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete that information.
Users between the ages of 13 and 18 should use GymGPT only with parental or guardian consent.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make significant changes, we will:
- Update the "Last updated" date at the top of this page
- Notify you via email or an in-app notification
- Where required by law, request your renewed consent
We encourage you to review this policy periodically. Continued use of GymGPT after changes take effect constitutes your acceptance of the updated policy.
Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please don't hesitate to reach out. Our team typically responds within 1–2 business days.