This Privacy Policy describes how Gym Tracker (“Gym Tracker”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects information when you use our mobile application and related services (the “Service”). Please read it carefully. By using the Service, you acknowledge this policy. If you do not agree, do not use the Service.
1. Who we are and how to contact us
Gym Tracker is a personal fitness planning and workout-logging application. We are the controller of personal data processed through the Service, except where a third party (such as Google) acts as an independent controller of data you provide directly to them.
For privacy questions, access or deletion requests, or other data-protection inquiries, contact: betsunaidzeb@gmail.com. We aim to respond within a reasonable period and, where required by law, within applicable statutory timelines.
2. Scope
This policy applies to the Gym Tracker mobile app and associated support channels we operate. It does not apply to third-party websites, services, or platforms that we do not control (for example Google’s account pages or Supabase’s own marketing site), which have their own privacy practices.
3. Information we collect
We collect information in the following categories, depending on how you use the Service.
- Account and authentication data (signed-in users): when you sign in with Google, we receive information needed to create and maintain your session, which typically includes your email address and a Google account identifier (subject to Google’s permissions and your Google account settings). We do not receive or store your Google password.
- Workout and planning content: weekly routines and plans, workout names, exercise names, sets, reps, weights, RPE or similar effort markers, notes, rest-day flags, history, and progress-related data you enter or generate in the app.
- Guest / on-device data: if you continue without an account (“guest mode”), your plans, logs, onboarding state, legal acknowledgements, and related preferences are stored locally on your device (for example via on-device storage). Guest data is not synced to our cloud until you sign in and choose to merge or sync it, subject to the app’s sign-in flow.
- Notification preferences: if you enable workout reminders, we store schedule settings (such as time of day) so the app can schedule local notifications on your device. These reminders are local device notifications; we do not require a separate push-messaging account for the core reminder feature.
- Device and technical data: basic technical information needed to operate the app (such as app version and platform). If crash reporting is enabled for a given release, we may receive diagnostic data about crashes or errors (for example device type, OS version, app state, and stack traces) through our crash-reporting provider to help us fix bugs.
- Support communications: if you email us or use in-app support links, we process the content of your message and any account details you include so we can respond.
- Usage analytics (if enabled): some builds may record limited, aggregated or event-level product usage (for example screen views) to understand feature adoption. Where such analytics are not enabled, we do not rely on them to operate core logging features.
4. Information we do not intentionally collect
We do not require payment card numbers inside the app for the current free Service. We do not ask for precise continuous GPS tracking as a core feature. We do not sell your personal information. We do not use your workout content to train third-party advertising profiles.
5. How we use information
We use information to:
- Provide, maintain, and improve the Service (planning, logging, history, progress views, and sync for signed-in users).
- Authenticate you, secure your account session, and prevent abuse or unauthorized access.
- Merge or sync guest on-device data with a cloud account when you sign in, according to the flows presented in the app.
- Schedule optional local workout reminders you enable.
- Respond to support, privacy, and account-deletion requests.
- Diagnose crashes and reliability issues when crash reporting is enabled.
- Comply with legal obligations and enforce our Terms of Service.
- Communicate important service-related notices (for example security or material policy changes) when appropriate.
6. Legal bases (EEA, UK, and similar jurisdictions)
Where data-protection law requires a legal basis, we typically rely on: (a) performance of a contract — to provide the Service you request; (b) legitimate interests — such as securing the Service, preventing fraud/abuse, and improving reliability, balanced against your rights; (c) consent — where required (for example certain notification permissions on your device, or optional analytics/crash tooling where consent is legally required); and (d) legal obligation — where we must retain or disclose information to comply with law.
7. How we share information
We share information only as needed to operate the Service or as required by law:
- Service providers / processors: we use infrastructure and platform providers to host and run the Service. In particular, signed-in account and workout data are stored and synced using Supabase. Authentication involves Google Sign-In. Crash reporting, if enabled, may involve a provider such as Sentry. These providers process data on our instructions or as independent services under their own terms where applicable.
- Legal and safety: we may disclose information if we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or security of users, the public, or Gym Tracker.
- Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality and notice practices where required.
- With your direction: for example when you choose to sign in and sync guest data, or when you contact support and include information in your message.
8. International transfers
Your information may be processed in countries other than the one where you live, including countries where our service providers operate. Those countries may have different data-protection laws. Where required, we take steps designed to ensure appropriate safeguards for cross-border transfers in line with applicable law.
9. Retention
We retain signed-in account and workout data while your account remains active and as needed to provide the Service. You can edit or delete workout content within the app. Local guest data remains on your device until you clear app data, uninstall the app, or sync/merge and manage it after sign-in.
To request deletion of your account and associated cloud data, use Support → Request account deletion in the app, email betsunaidzeb@gmail.com with the subject “Gym Tracker account deletion request” and the Google email you use to sign in, or follow https://b00147423.github.io/Gym_Tracket/account-deletion.html. We aim to complete verified deletion requests within 30 days, except where we must retain limited information for legal, security, or dispute-resolution reasons.
Support emails and related records may be retained as long as reasonably necessary to handle your request and maintain ordinary business records. Crash logs, if any, are retained according to our provider’s retention settings and our operational needs.
10. Security
We use reasonable technical and organizational measures designed to protect personal data, including transmission to our backend over encrypted connections where supported by the platform, and access controls on cloud data (including row-level security policies for user-owned records where implemented). No method of transmission or storage is completely secure; you use the Service at your own risk to that extent. Please protect your device and Google account credentials.
11. Your rights and choices
Depending on your location, you may have rights to request access to, correction of, deletion of, or a copy of certain personal data; to restrict or object to certain processing; to withdraw consent where processing is based on consent; and to lodge a complaint with a supervisory authority. California and other U.S. state laws may provide additional rights regarding personal information.
You can access and update much of your workout content directly in the app. For account deletion and other privacy requests, contact betsunaidzeb@gmail.com or use the in-app support deletion request. You may disable notification permissions in your device settings. Uninstalling the app removes local guest data stored in the app’s on-device storage (subject to how your operating system handles app data).
12. Children
The Service is not directed to children under 13 (or the higher minimum age required in your country to consent to personal-data processing). We do not knowingly collect personal information from children below that age. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.
13. Third-party services
Google Sign-In and Google account features are governed by Google’s terms and privacy policy. Supabase hosting and authentication infrastructure are governed by Supabase’s terms and privacy policy. Your use of those services may involve data processing by those companies as described in their documentation. We encourage you to review their policies.
14. Do Not Track and similar signals
The mobile Service does not currently respond to browser “Do Not Track” signals. You can control notification permissions and, where offered, optional analytics or crash-reporting settings through the app or your device.
15. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date at the top and, where required by law or for material changes, provide additional notice in the app or by other reasonable means. Continued use of the Service after an update becomes effective constitutes acceptance of the revised policy, except where applicable law requires a different standard.