🏋️ GymLog

Privacy Policy

This policy explains what GymLog collects, why, who receives it, how long it is kept, and the choices you have. It covers the GymLog app on iPhone and Android, the services behind it, and our website (getgymlog.web.app, which hosts these pages, the workouts and templates you choose to share with a link, and the connect page where you can create an account or connect an AI assistant). It is also our notice at collection: the categories we collect, why, and how long we keep them are set out below (Sections 2, 6 and 10).

Questions about this policy or your data? Email armgardtj@outlook.com.

1. Who we are

GymLog ("we", "us", "the app") is run by an independent individual developer based in New York, United States. The app uses Google Firebase as its backend.

Controller. The controller of your personal information (the person who decides how it is used) is John Armgardt, who operates GymLog. Contact for every privacy matter, including using your rights: armgardtj@outlook.com. Email is the only contact channel. He is also the person in charge of protecting personal information (privacy officer) for Canadian law, including Quebec's Law 25, and for other laws that ask for one.

Where GymLog is offered. The United States and many other countries, including Canada, Australia, New Zealand, South Africa and Brazil. GymLog is not offered in the EU/EEA, the United Kingdom or Switzerland.

2. What we collect and why

GymLog is local-first: your detailed workout history (every set, rep, weight and note) is stored on your device and works offline. We collect only what a feature you use needs. If you created your account on our website and don't use the app, your training is kept in your account on our servers instead (see "Accounts created on our website" below).

Workouts and training data you create

• Workouts — exercises, sets, reps, weights, durations, rest, cardio you enter, and notes. Used to log, show and analyse your training. Notes are private: your workout note, exercise notes and set notes are never shared with anyone.
• Captions — an optional one-line caption you can give a workout. Unlike notes, a caption is meant to be shared: it is shown with the workout to whoever can see it (see "Who can see this?" below). A caption on a Private workout is seen only by you. If you are signed in, each workout's and template's caption and sharing setting are kept in your account, so your other devices show them; they stay private to you unless you share the item.
• Templates, programs, equipment, exercise settings, exercise groups and gyms you create or edit.
• Imports. If you import a Strong, Hevy, Caliber or MacroFactor export, the file is read on your device; only the resulting sets, reps and weights become workouts. If you import a Google Timeline file, GymLog reads it on your phone to find gym visits. It keeps only the gym, date and time of each visit as a workout, never your location history, and the file isn't uploaded. To tell which visited places are gyms, GymLog sends only those places' Google place IDs (no times, no location) through our server to Google Places. GymLog has no health importers. An AI assistant you connect can also import workouts it already holds (Section 3a). They are stored in your account like other synced workouts and marked as imported.
• Workout photos you add. Each photo is re-saved without its hidden details (location, time, camera) before it is stored.
• Cloud sync and backup. If you sign in, your templates, equipment, gyms, profile and settings are kept in your account, and — with "Sync across devices" on — your workouts and workout photos too, so a reinstall or a second device restores them. This copy is private to you: other users cannot read it. Anything an AI assistant you connect adds or changes is stored in your account the same way (Section 3a).
• Recently deleted. A workout you delete stays in Recently deleted on your device for 30 days so you can restore it. It is then erased the next time GymLog runs. If you sync, the copy in your account is replaced by a marker with the workout's ID and when it was deleted, so your other devices remove it too. Our server keeps the last copy for 30 days, where no other user can see it, so a mistaken delete can be recovered; then it is erased. Restoring the workout uploads it again from your device.

Account and profile

• Sign-in — your email address and a sign-in identifier from Sign in with Apple, Google, or email and password. Your email is never shown to other users.
• Profile — the display name and @handle you choose when you create your account, and optionally a bio, goals and an avatar (an emoji or a photo). Your home gym appears on your profile only if you turn that on.
• Profile counts. Other people see counts worked out by our server from only what they can already see: how many workout summaries you share (in total and per month), the gyms in those summaries and the gyms you rated (with your rating), and summary stats (total, this year, week streak, favourite day) from those shared workouts. Workouts you don't share are never counted for anyone else, so no one can tell they exist. Your friend count is shown to you and, only if you show your friends list to your friends (see Friends below), to your friends. Your own profile always shows all of your workouts.
• Who can see your profile. Your profile can be seen by anyone signed in to GymLog, not only your friends. Signed-in users can find you in people search by your display name or @handle. Your plan (free or Pro) is stored privately in your account, readable only by you. Until everyone has updated from GymLog 1.0, a copy also stays on your profile record, which the app does not show to other people; we remove that copy once older versions are no longer in use.

Accounts created on our website

• You can create a GymLog account on our connect page without installing the app, so an AI assistant you connect can keep your training log. You sign up with Google, Apple or an email and password. We receive what "Sign-in" above describes; if you use Google or Apple, we also save the name it shares with us, if any, as the private display name of your GymLog account.
• We ask what the app asks when you sign up: the display name and @handle you choose, and whether you lift in kg or lb, and you confirm that you're 18 or older and agree to our Terms and this policy. We keep your units, which version of the Terms you accepted and when, that the account was made on the website, and when the GymLog app first opened it.
• A website account is the same account the app makes: your display name and @handle are your profile (Section 2), so anyone signed in to GymLog can see them and find you by them. If you install the app later and sign in the same way, everything is there, and your training is then on your phone too.
• To limit fake sign-ups, our server counts new accounts made from your network (at most 10 a day) using your IP address. It keeps only a coded form of the address (a hash made with a secret key, so it can't be turned back into the address), not linked to your account, for 2 days.
• The connect page uses Google Firebase to sign you in. It keeps your sign-in only in that browser tab, and signs you out of the page once you have answered the connect request.

Sharing and social features

• "Who can see this?" — every workout and every template has one setting: Private, Friends or Public link. Every workout and template has its own link; the setting decides who can open it. Private is the default: only you can open the link, and making something Private takes it away from everyone else straight away. New workouts start from your "Feed & Sharing" setting (Private unless you chose to share); you can change any workout or template at any time.
  • Private — only you.
  • Friends — a summary card appears in your friends' feeds and on your profile: the title, date, duration, gym, PR count, exercise names, tagged friends and caption. Only you and your friends can see the card, its comments and its reactions, including on that gym's page. Someone you have blocked, or who has blocked you, never can. Your friends (people you accepted) can also open the whole workout: its exercises, sets, reps, weights, effort (RPE) and PRs. Sets, reps and weights are shared only after you agree once to a separate sharing notice; before that, friends see the summary card only.
  • Public link — everything Friends shows, plus anyone with the workout's or template's link can open it, on our website too, without a GymLog account. A Public workout needs the same one-time agreement.
  • Templates (your saved routines) can be shared the same way: their exercises, sets, target reps, rest and progression. Templates hold no weights and no gym. Anyone who opens a shared template can copy it into their own GymLog.
  • Never in a link, at any level (the website and the in-app link view): your gym, any location, the time of day you trained, who you trained with, sets logged for someone else, body weight or measurements, photos, notes, or anything from Apple Health or Health Connect. A workout copied from Apple Health or Health Connect can't be shared at all.
  • Links are long random addresses that can't be guessed or listed. Shared pages are marked so search engines don't index them, and our website keeps no copy once you make the item Private.
• Comments, reactions, and gym ratings and reviews you post, shown with your display name. Gym ratings and reviews are shown to anyone signed in. You can rate any gym, including one you haven't trained at. A rating from an account that is less than 3 days old and whose sign-in isn't verified appears to others after 3 days; you see your own at once. A comment or reaction is shown to whoever can see the workout it is on.
• Gym equipment you say is there. If you say which equipment a gym has, or that a piece isn't there, others see how many people said so, never who. Only equipment from GymLog's built-in catalog can be added, so there is no text of yours in it. We keep your answers with your account so each person counts once and to stop spam, and we delete them when you delete your account. Equipment you add to your own gym setup is never shared this way.
• Friends — friend requests, your friend list and your block list. Your block list is seen only by you. Your friends list (each friend's name, @handle and profile picture or emoji) and how many friends you have: By default, your friends can see your friends list and your friend count. Your friends are the people you have accepted as friends. You can turn this off at any time with "Show my friends list to friends" in Edit profile. While it is off, your list and its count are seen only by you. People who aren't your friends can never see your list. Someone you have blocked, or who has blocked you, can never see your list, and is left out when anyone else's friends list is shown to you or to them.
• "Log for me". If you let a friend log workouts for you, that friend can read your templates, equipment, exercise settings and, for each exercise, the sets, reps and weights from your last three sessions — so they can log the right numbers. Each time they do, your account keeps a record of who looked and when. The sets a friend logs for you are sent to your account. If you log for a friend, the sets you log are sent to theirs. You can remove the permission at any time.
• Reports. If you report content or a person, we receive your account ID, what you reported, its owner, the reason and any note you add.

Apple Health and Health Connect (optional, never stored)

• With your permission, GymLog reads other apps' workouts, walking/running/cycling distance, daily steps and body weight only to show them on your Stats page. The data stays in memory while you look at it. It is not saved on your device, not uploaded, not in backups and not shared.
• GymLog never reads heart rate or routes, and never reads health data in the background.
• When you finish a GymLog workout, it can save that workout (its type and start and end times) to Apple Health or Health Connect.

Location (optional — "Auto-tag my gym")

• Off unless you turn it on. When on, GymLog uses your precise location only while a workout is running, to tag the gym you're at. Location readings stay in memory. One spot per workout is kept on your device only and erased once the gym is tagged, or 30 days later, the next time GymLog runs. It is never uploaded, synced or backed up, and no route is kept. GymLog does not use location in the background between workouts.
• What location is used for — the complete list: tagging the gym for a workout (with Auto-tag on), and listing gyms near you when you tap "Show gyms near me" or have Auto-tag on. For that list, your location is sent once through our server to Google Places. We do not store or log it.
• Location is never used for advertising and never sold. (Google AdMob works out a coarse, city-level location from your IP address on its own — see Section 3.)

Gyms

• A gym linked to a place is identified by Google's place ID; its name, address and map come from Google and are public. A gym that is not linked is just the name you gave it — no address or location.
• Gym pages are shared. We store only the place ID (linked) or the name (not linked). Details from Google are cached on our server for at most 30 days.
• Any gym, linked or not, can show which equipment people say it has. For a gym that is not linked, only people who use the same gym entry share one list.
• Limiting spam. To limit spam in ratings and equipment answers, we consider your account's age, whether your sign-in is verified, and whether you've logged workouts. This only changes how much an answer counts or when a new account's rating appears. It never stops you from answering, and it is never shown to anyone.

AI features (optional)

• AI suggestions (Pro). Nothing is sent until you agree on first use, and then only when you tap a suggestion. Each one sends our server only what it needs, and our server passes it to Anthropic's Claude for a reply:
  • "Why did this stall?": that exercise's last 8 sessions (the date, and each working set's weight, reps and unit), its rep range, how often you train it, how long it has stalled, days since your last lighter session, how many months you have trained, how the app shows its weight (for example per side), and your goals if you set them.
  • Swap "More ideas": the exercise, its muscles and your gym's equipment, with no weights.
  • Coach (plans and questions): your goals, your gym's equipment, your movement groups, your question and the conversation, and a weekly summary of the last 21 days (sessions per week, sets per muscle group, and your top set of each main lift).
  Never sets you logged for someone else. It does not send your name, email or location unless you type them into a question.
• Fill missing muscles (Pro). The app explains what is sent the first time you use it. Then the names of your exercises that aren't in GymLog's built-in library are sent through our server to Anthropic, so it can suggest the muscles each one works. The exercise names and their suggested muscles are kept in a shared cache, not linked to you, so the same name isn't sent twice.
• AI usage counters. Our server records how many AI requests you made each day and what they cost each month, and app-wide counts of AI requests, errors and response times by feature (not linked to you). This never includes what you asked or what the AI answered. It is used only to apply fair-use limits and to keep the features working.

Identifiers and technical data

• Account ID — a Firebase user ID created when you sign in.
• Push token — a Firebase Cloud Messaging token, if you allow notifications, used to deliver friend, comment, reaction, tag and "log for me" notifications.
• Advertising identifier — on the free plan only, Google AdMob uses your device advertising ID (on iPhone the IDFA, only if you allow tracking when iOS asks). GymLog Pro makes no ad requests.
• Purchase state — whether you have GymLog Pro. Payment is handled entirely by the App Store or Google Play; we never receive your card details. We receive your subscription status and the store's purchase identifier, and record which account a purchase belongs to so it can't be used on two accounts (see Section 7).
• Diagnostics — crash reports via Firebase Crashlytics: what went wrong, device model, OS and app version, linked to your account ID (not your name, email or workout content).
• Server logs — records our backend writes while handling your requests (for example errors, purchase checks and usage-limit events), which can include your account ID.

Content GymLog loads from other services

• Maps are drawn with map tiles from OpenFreeMap, and exercise how-to images are loaded from the jsDelivr CDN. Like any website, these services receive your IP address and which map area or image was requested — nothing else from GymLog.

Where the data comes from

• You — everything you type, choose, import or upload.
• Your device — location (only with Auto-tag on or when you tap "Show gyms near me"), identifiers, and crash and device information, collected automatically as described above.
• Apple or Google, when you sign in with them — your name, email address and a provider user ID.
• The App Store or Google Play — your subscription status and purchase identifier.
• Other GymLog users — for example when someone sends you a friend request, comments on or reacts to your workout, tags you, logs a workout for you, or reports you.
• AI assistants you connect: what they add or change in your account at your request (Section 3a).

Automatic content filter

Display names, @handles, bios, goals, shared workout and template titles, captions and exercise names, comments and gym reviews are checked against a list of clearly objectionable words (for example slurs). A matching @handle or display name is refused; in other text, matching words are masked before it is published. No person reviews this first. If you think the filter got it wrong, email armgardtj@outlook.com and a person will review it. We make no other decisions about you based solely on automated processing, and we do not profile you.

3. Who receives data

To make features work, some data goes to the services below. Each gets only what that feature needs.

We do not sell your personal information for money. Showing personalised ads through Google AdMob may count as "sharing" personal information for cross-context behavioural advertising under California and some other US state laws; you can opt out at any time (Section 8). Your workouts, health data and precise location are never given to advertisers. Data sent to Anthropic through GymLog's own AI features is used only to answer your request. Each provider processes data under its own terms.

Anthropic and AI processing

Anthropic processes AI requests on our behalf, as our service provider, only to answer that request. Anthropic's API terms state that data sent through the API is not used to train its models. Anthropic keeps API inputs and outputs only for a limited period set out in its terms, for abuse and safety monitoring, and longer only where a request is flagged under its usage policies or the law requires it. We do not store your AI questions or the AI's replies on our server. See Anthropic's commercial terms and privacy center. This covers GymLog's own AI features. If you connect Claude as your own assistant, Anthropic receives your data from that connection as the company running your assistant, under its own privacy policy (Section 3a).

Other disclosures

• Other GymLog users — your profile, and what you choose to share or post, as described in Section 2.
• Anyone you give a Public link to — only the workouts and templates you set to Public link, and only what Section 2 lists for them, until you make them Private.
• When the law requires it — we may disclose data if required by valid legal process (such as a court order or subpoena), or where needed to protect someone's safety, enforce our Terms, or defend legal claims.
• If GymLog changes hands — if the app is sold or transferred, your data may pass to the new operator, who must keep treating it as this policy describes.

We do not disclose personal information to third parties for their own direct marketing. (California residents may ask about this under California Civil Code §1798.83; there is nothing to report.)

3a. AI assistants you connect

You can connect GymLog to an AI assistant you use, such as Claude, ChatGPT or Grok, to ask it about your training or have it plan and log workouts for you. This is off unless you turn it on. Nothing is shared until you start connecting from the assistant, sign in on our connect page, and tap Allow. That page names the assistant and the website it will send you back to, and warns you when GymLog can't confirm the assistant's name. You choose what it may do: seeing your training is always part of connecting, each kind of change can be switched off, and Read only switches off all of them.

What a connected assistant can see. Your workouts: the date, start time and duration, the template or plan it came from, each exercise's sets, reps, weights and units, effort (RPE), set types, which sets you ticked and your personal records, and cardio type, minutes and distance. Also the history, records and summaries worked out from them, your templates, your exercise settings (weight steps, rep ranges, warm-ups, automatic progression), your custom exercises, your custom equipment, your home gym's plate set (plate weights and counts only), your Up next plans, your units, how many workouts you have, and when your phone last synced. It reads only what is in your account on our servers, so workouts kept only on your phone (Sync across devices off) are not included. It never receives: your notes, your gyms or any location, photos, sharing settings, your feed, friends, comments, reactions or reviews, your name, @handle or email (other than what it gave us itself when it created your account, and your email shown partly hidden when it asks for a deletion link), your purchases, anything from Apple Health or Health Connect, or workouts and sets you logged for someone else.

An account an assistant creates for you. If you don't have a GymLog account, an assistant can create one for you. It asks you what the app asks at sign-up (your email address, the display name and @handle you choose, kg or lb) and whether you're 18 or older and agree to our Terms and this policy, and it sends us those answers only after your yes. We create the same account the app and our website make (above), record that an assistant made it and the assistant's name, and email you a link to confirm your address; tapping it is the only step for you. Until you do, the assistant gets no access. Then the assistant receives, once, a key for your account that has every permission listed below; it appears in Settings › Connected apps as that assistant "(created at sign-up)", and you can disconnect it there. The key lasts 90 days and we keep it only in hashed form. The sign-up itself is kept on our server without your email or IP address: a one-time code the assistant uses to collect the key, in hashed form, for 24 hours, and the sign-up record for up to 8 days, then deleted. If nobody confirms the email within 3 days, we delete the account the next day. To limit abuse we count sign-ups per network (10 a day), per email address (3 a day) and in total, using a hash of your IP address and of your email address made with a secret key, kept for 2 days and not linked to your account.

What it can do, if you allowed it.

• "Create and change your templates and plans, and set targets for your next sessions": create, change and remove templates; change an exercise's settings; add sessions to your Up next list, with target weights and reps and a short note from the assistant, and remove them.
• "Log workouts for you, and edit or remove your workouts": log finished workouts; change a workout's date, time, duration, title, exercises and sets; remove workouts; and import past workouts it already holds, adding custom exercises for names GymLog doesn't know. On the free plan it can log or import workouts from the last 30 days only; older ones need GymLog Pro, so GymLog checks your plan when it does this.

Workouts it logs or imports are private and are never posted to your feed. It can't see or change your notes, gyms, photos or sharing settings; they stay as they are when it edits a workout, unless it removes the exercise or set a note belongs to. It can't change sets you logged for someone else, and it can't remove a workout that holds them. It can't share anything or change your friends, profile or account. It can't delete your account: it can only ask us to email you a link to a page on our website, and nothing is deleted unless you open that link and tap Delete account there. What it adds or changes is marked with its name in the app.

Who receives it. What the assistant reads goes to the company that runs it (for example Anthropic for Claude, OpenAI for ChatGPT, xAI for Grok). That company decides how to use it, under its own privacy policy, and not on our behalf. It may keep it after you disconnect, for example in your chat history or the assistant's memory; use that assistant's own settings to delete it there. We send it only because you asked us to. We are not paid for it, and we don't use what an assistant sends us for advertising, profiling or AI training.

What we keep.

• The connection: the assistant's name and website, what you allowed, when you connected it and when it last used GymLog. The keys we give the assistant are stored only in scrambled (hashed) form. An access key works for 1 hour; the assistant renews it with a renewal key.
• A record of each request: which assistant, which action, whether it worked, how long it took and when, with your account ID. It holds nothing from your training and nothing you or the assistant wrote. Kept 90 days.
• For Undo, for 30 days: a copy of each record as it was before the assistant changed or removed it (the whole record, including parts the assistant can't see, such as notes), and for each import, how many workouts it added and their dates. This stays for the 30 days even after you disconnect, so you can still undo.
• Counters of how many requests each assistant made in the current hour and day, for the limits below.

Limits. Each assistant you connect can make up to 60 requests an hour (20 of them changes) and 600 a day on your account, plus up to 120 import requests and 2 new imports a day, with at most 3,000 workouts in one import.

Undo and disconnect. In the app, Settings › Connected apps lists each assistant, what it may do, when you connected it and when it last used GymLog.

• Undo its changes puts back what that assistant added, changed or removed in the last 30 days, except anything you changed yourself since. Undo import removes one import in one step, except workouts you changed since.
• Disconnect stops its access at once and deletes our request records for it. It does not delete your GymLog account.
• Removing GymLog inside the assistant may not tell us, so disconnect in GymLog to be sure. A connection the assistant hasn't renewed for 60 days ends on its own.
• If you don't use the app, email us to disconnect an assistant. Deleting your account, in the app or on our website, disconnects every assistant (Section 7).

4. Where your data lives

On your device only: your full workout history if you don't sign in or don't turn on sync, the one location spot per workout (Section 2), health data while you view it, and your "Do not sell or share" setting.

In your account (Firebase), private to you: your synced workouts, templates, equipment, gyms, settings, backups and workout photos; if you created your account on our website, your training log; and if you connect an AI assistant, the connection, its request records and the Undo history (Section 3a).

Visible to other signed-in users: your profile, the summary cards of workouts you share with a Public link and the profile counts made from them (Section 2), comments and reactions on those workouts, gym ratings and reviews, and how many people said a gym has a piece of equipment (never who). Visible to your friends only: the summary cards of workouts you share with Friends, with their comments and reactions, the sets, reps and weights of workouts you share with Friends (once you have agreed to share them), templates you share with Friends, and your friends list and friend count, unless you turn that off (Section 2). Friends you let "log for me" also see the plan details listed in Section 2. Nothing is visible to people without a GymLog account, except the workouts and templates you share with a Public link, which anyone with the link can open on our website (without your gym, location, time of day, partners, notes, photos or health data). Otherwise the website shows only these legal pages.

5. How we protect your data

All traffic between the app and our backend, and between our backend and the services above, uses HTTPS/TLS. Data stored in Firebase is encrypted at rest by Google. Server-side security rules let only you read your private data; workout photos are readable only by your own account. API keys are held on our server and never ship inside the app. Keys we give AI assistants you connect are stored only in hashed form, expire, and work only for your GymLog account and only for what you allowed. GymLog's data is excluded from Google's device backup (Android) and iCloud backup (iPhone).

No system is perfectly secure, and we cannot guarantee that data will never be accessed without permission. If a security breach affects your personal information, we will notify you and the relevant authorities as the law requires.

6. How long we keep it

• Workout location spot (device only) — erased when the gym is tagged, or 30 days later, the next time GymLog runs.
• Health data — not stored.
• Recently deleted workouts — 30 days, then erased the next time GymLog runs. Our server's last copy of a deleted synced workout: 30 days.
• Account data — your profile, synced workouts, templates, backups, photos, posts, comments, reactions, reviews and friends: until you delete them or your account.
• Sharing settings and shared copies — each item's "Who can see this?" setting, caption and link address are kept with your account until you delete your account; if you use Sync across devices, a deleted workout's are erased 30 days after the delete unless you restore it. The shared copy behind a Friends or Public item exists only while the item is shared: making it Private, deleting it or deleting your account removes it at once, and its link stops working for anyone but you (after deletion, for everyone). Your one-time agreement to share sets (and when you gave it) is kept until you delete your account.
• Google place details — up to 30 days on our server; the copy on your device is refreshed or dropped 30 days later, the next time GymLog runs (only the place ID is kept longer).
• AI usage counters — daily counts 7 days, monthly totals up to 41 days; deleted with your account. App-wide daily AI totals (not linked to anyone) are kept for about 400 days. Exercise names in the AI label cache (not linked to anyone) are kept for up to 365 days.
• Sync history (for "Sync across devices": a log of which workout or setting changed and when) — up to 90 days. Each synced item also carries version numbers and change times, kept with the item until you delete it or your account. When two of your devices change the same set at the same time, the older change is kept in a private log for up to 90 days to diagnose sync problems; it is never shown to anyone. Both are deleted with your account.
• AI assistant connections: until you disconnect, delete your account, or the assistant goes 60 days without renewing its access. Access keys last 1 hour. Keys are stored only in hashed form.
• AI assistant request records (no training content): 90 days, deleted earlier when you disconnect that assistant or delete your account.
• AI assistant Undo history (copies of records as they were before an assistant changed them, and import summaries): 30 days, including after you disconnect; deleted with your account.
• AI assistant request counters: only the current hour's and day's counts, kept with your account until you delete it.
• Steps of a connection in progress (the request waiting on our connect page, and the one-time code the assistant swaps for its keys): 10 minutes and 60 seconds, then removed by a daily cleanup.
• Website sign-up record (your units, which Terms version you accepted and when): until you delete your account.
• Website sign-up limit (a hash of the IP address made with a secret key, not linked to you): 2 days.
• Sign-up by an AI assistant: the one-time collection code (hashed) 24 hours; the sign-up record (no email or IP address) up to 8 days; the assistant's key 90 days, or until you disconnect it or delete your account; the assistant's connection without an account (a hashed session ID and the assistant's name) 24 hours, or 7 days once it is signed in to your account; the sign-up limits (hashes of IP and email addresses made with a secret key, not linked to you) 2 days; an account whose email nobody confirmed, 3 to 4 days. All of these are removed by a daily cleanup.
• Account deletion marker (your account ID only, so a deletion finishes cleanly) — 30 days after deletion.
• Notification rate counters (how many notifications you received in the last hour, to prevent spam) — 2 days.
• Reports you file or that are filed about you — 365 days, including after account deletion, for safety and appeals.
• Server logs — up to 30 days. Crash reports — up to 90 days. Both are kept for that time even after account deletion.
• Purchase record (Section 7) — kept after account deletion, released from the deleted account, because a store purchase can be presented again at any time.
• Push tokens — until your device replaces them or you delete your account.
• Copies held by providers — data you delete may remain for a limited time in our hosting provider's internal backups until they are overwritten. Data held by Google AdMob and Anthropic is kept under their own terms (Section 3).

We keep nothing else about you once these periods end.

7. Deleting your account and data

Delete your account in the app at any time in Settings → Account → Delete account, on iPhone and Android — or see how to delete your account. Deletion runs straight away on our server and removes your profile and @handle, synced workouts and backups, shared summaries with their comments and reactions, shared workout and template links and their shared copies, comments and reactions you left on others' workouts, your gym ratings and reviews, your answers about gym equipment, friends and friend requests, "log for me" permissions and invites, uploaded photos, push tokens, AI usage counters, your AI assistant connections (every assistant is disconnected) with their request records, counters and Undo history, your website sign-up record, and your sign-in account. Then the app erases its data on that device.

What stays: gyms you added stay (they are shared places) but no longer say who added them; a workout you logged for a friend stays in their account without your name; reports, logs and crash reports for the periods in Section 6; and the purchase record below. If you want a copy first, use Settings → Export my data (CSV).

An AI assistant's company keeps what it already received under its own privacy policy (Section 3a). You can also delete your account on our website: open the connect page's "Delete your account" link (or the link on our account deletion page), sign in again, and type DELETE. It runs the same deletion as the app, so it is the way to delete an account you created on our website if you don't use the app. A connected AI assistant can ask us to email you a link instead: the link signs you in on that page, which shows what will be deleted, and nothing is deleted until you tap Delete account there. Deletion also removes any key and sign-up record an assistant got when it created your account.

Purchase record. So one subscription can't be used on two accounts at once, we keep a record of each purchase: a one-way fingerprint of the store's purchase identifier, the platform, the product, whether it is active, the dates, and the account ID it belongs to — never your name, email or payment details. When you delete your account, the record is released from it: it keeps the deleted account's ID only so that, if you sign up again, you can restore the same subscription on your new account. Deleting your account does not cancel a subscription: cancel it in the App Store or Google Play.

If you can't access the app, email armgardtj@outlook.com from the email address on your account.

8. Your choices

• Sharing — every workout and template is Private unless you choose Friends or Public link for it ("Who can see this?", on the workout or the template). "Feed & Sharing" sets what new workouts start with, and turning sharing off there makes all your workouts and templates Private. You can hide your home gym at any time.
• Location — "Auto-tag my gym" is off until you turn it on in Settings. You can also revoke location permission in your device settings.
• Health — disconnect Apple Health or Health Connect in your device settings.
• Notifications — revoke the notification permission in your device settings.
• Ads — turn on "Do not sell or share my personal information" in Settings (on iPhone under Data & Privacy; signed in or not; the setting is saved on that device) so ads are no longer personalised using your data. You may still see ads on the free plan. Where Google shows a privacy message for your region, "Privacy choices" in the same place reopens it. On iPhone you can also change tracking in iOS Settings → Privacy & Security → Tracking. GymLog Pro removes all ads and ad requests.
• Friends list — "Show my friends list to friends" in Edit profile; turn it off at any time and no one else can see your list or its count.
• "Log for me" — remove a friend's permission at any time.
• AI — nothing is sent unless you use an AI feature. Turn off AI suggestions in Settings → Data & Privacy to withdraw your consent; nothing is sent to the AI while it is off.
• AI assistants: nothing is shared until you connect one. On the connect page, choose Read only or switch off any kind of change. See, undo and disconnect your assistants in Settings › Connected apps.
• Export — Settings → Export my data (CSV).
• Correct your data — edit your profile, workouts, posts and reviews in the app, or email us.
• Browser signals. The app has no web browser, so it does not receive Do Not Track or Global Privacy Control signals; use the in-app setting above or email us. Our website runs no analytics or ads. The connect page keeps your sign-in only in that browser tab.

9. Age requirement

GymLog is intended for adults. You must be at least 18 years old to create an account and use GymLog, as set out in our Terms; the app, or our website if you sign up there, asks you to confirm this when you sign up, and it is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, email armgardtj@outlook.com and we will delete it.

10. Your rights, legal bases and international transfers

Your rights

Depending on where you live, you may have the right to:

• know whether we process your personal information and access it (including the categories of data, its sources, why we use it, and the categories of third parties — or, where your law requires, the specific third parties — we disclose it to);
• correct inaccurate data;
• delete your data;
• receive a portable copy of the data you gave us;
• opt out of "sharing" for cross-context behavioural advertising (targeted advertising), of any sale (we do not sell), and of profiling (we do not profile you);
• object to or restrict processing, and withdraw consent where we rely on it (for example Auto-tag, sharing, AI features, a connected AI assistant) — withdrawing does not affect processing that happened before, and the only consequence is that the feature that needed it stops working;
• be told about, and ask a person to review, a decision made solely by automated processing (see "Automatic content filter" in Section 2);
• not be discriminated against for using any of these rights — you will not be denied the service or charged a different price.

How to use them. Many rights work directly in the app: Export my data, Delete account, "Do not sell or share my personal information", and editing your profile and workouts. For anything else, email armgardtj@outlook.com.

Verification. We verify requests before acting on them — normally by asking you to write from the email address on your account, or to confirm in the signed-in app. We use what you give us for verification only for that purpose. If we can't verify you, we'll tell you why.

Authorised agents. Where your law allows, someone you authorise may make a request for you. We may ask for your signed permission and to verify your identity directly with you, unless the agent holds a valid power of attorney.

Response time. We respond within the time your law requires — generally within 30 days, or 45 days under most US state laws. Where the law allows an extension, we'll tell you within the original period and explain why.

Appeals (US states). If we decline to act on your request, you can appeal by replying to our decision or emailing armgardtj@outlook.com with "Appeal" in the subject. We will reply in writing within the time your state's law requires (at most 60 days) and explain our decision. If you disagree, you can contact your state attorney general.

California and other US states

This table describes the personal information we have collected in the past 12 months, in the categories California law uses. Sources are in Section 2 ("Where the data comes from"); retention is in Section 6.

We do not collect protected-classification characteristics, biometric information, professional or employment information, or education information, and we do not create inferences or profiles about you.

Selling and sharing. We do not sell personal information and have not sold it in the past 12 months. On the free plan, Google AdMob may use your advertising ID and IP-based coarse location to show personalised ads, which California and some other US state laws may treat as "sharing" for cross-context behavioural advertising (or "targeted advertising"). You can opt out at any time in Settings → "Do not sell or share my personal information": when it is on, every ad request tells Google to apply restricted data processing, so your data is not used to personalise ads. We do not knowingly sell or share the personal information of anyone under 16 (and GymLog is for adults only — Section 9). Sending data to an AI assistant you connect is something you direct us to do, so it is not a sale and not sharing for advertising.

Sensitive personal information. We treat precise geolocation and your workout logs as sensitive personal information. We use them only to provide the features you asked for, do not sell them, do not share them for advertising, and do not use them to infer characteristics about you. Because we use sensitive personal information only for these permitted purposes, the right to limit its use does not apply, and we do not offer a separate "Limit the use of my sensitive personal information" link.

Consumer Health Data Privacy Policy

This is our consumer health data policy under Washington's My Health My Data Act, Nevada SB 370, Connecticut law and similar laws.

• What we collect: the workouts you log (exercises, sets, reps, weights, durations, cardio, notes, captions). We do not collect or store data from Apple Health or Health Connect, heart rate, routes, or body measurements, and location is never used to identify health-related visits.
• Why: only to provide the logging, stats, sync, backup, coaching and sharing features you use.
• Sources: you, friends who log a workout for you, and AI assistants you connect.
• Who receives it: our service providers (Google Firebase; Anthropic for AI suggestions, if you use them); friends you let "log for me" (sets, reps and weights from your last three sessions per exercise); and, only for the workouts you choose to share: other signed-in GymLog users (the summary card: title, date, duration, gym, PR count, exercise names, tagged friends, caption), your friends (also its sets, reps, weights, effort and PRs), and anyone you give a Public link to (the same, without your gym); and an AI assistant you connect and the company that runs it, only after you approve it on our connect page (Section 3a). Notes are never shared. We never sell it and never use it for advertising.
• Your consent to share: sharing a workout's sets, reps and weights needs your separate consent, which the app asks for once, with its own notice, before your first such share. You withdraw it for any workout by setting it to Private (or for everything by turning sharing off in "Feed & Sharing"); the shared copy is then deleted. Connecting an AI assistant is your separate consent for it to receive your workout logs. You withdraw it by disconnecting; what that company already received stays with it under its own policy.
• Your rights: confirm, access, delete, and withdraw consent as described above, including the list of third parties that received it.

Canada (including Quebec)

We collect and use your personal information only for the purposes in this policy, with your consent. Using the app with an account is consent to the processing needed to provide it; for optional uses (sharing, Auto-tag, health access, notifications, AI features, connecting an AI assistant, personalised ads) we ask separately, and you can withdraw consent at any time (Section 8). You can access and correct your personal information and withdraw consent by contacting our privacy officer (Section 1). Your data is stored and processed outside Canada, mainly in the United States, where it may be accessible to courts and authorities under local law. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information (or your provincial privacy commissioner where one applies).

Australia and New Zealand

Your personal information is disclosed to and stored by overseas recipients — our providers in the United States and other countries where they operate (Section 3). You can ask to access or correct it at any time. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner or New Zealand's Office of the Privacy Commissioner.

South Africa

You can ask to access or correct your personal information, and object to its processing. If you are not satisfied with our response, you can complain to the Information Regulator (inforegulator.org.za).

Brazil

Under the LGPD you have the rights listed above, including confirmation that we process your data, access, correction, anonymisation, blocking or deletion of unnecessary data, portability, information about who we share it with and about the consequences of not giving consent, and withdrawal of consent. You can also complain to the Autoridade Nacional de Proteção de Dados (ANPD). Our legal bases are below.

EU/EEA, United Kingdom and Switzerland

GymLog is not offered in these places. If you installed it there before it was withdrawn, you have the rights listed above under the GDPR (or UK GDPR / Swiss law), on the legal bases below, and you can complain to your local data protection authority.

Legal bases

Where the law requires a legal basis (for example Brazil's LGPD, or the GDPR for anyone who installed GymLog in the EU/EEA, UK or Switzerland before it was withdrawn), we rely on:

International transfers

GymLog is operated from the United States, and your data is stored in the United States. Our providers — including Google (Firebase, Places, AdMob) and Anthropic — process data in the United States and other countries, so wherever you live your data is transferred to countries whose data protection laws may differ from yours. We send each provider only what the feature you use needs (Section 3). For anyone who installed GymLog in the EU/EEA, UK or Switzerland before it was withdrawn, transfers from there rely on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, and otherwise on Standard Contractual Clauses in the provider's data processing terms. An AI assistant you connect may process your data wherever its company operates, under that company's own policy.

Anywhere else

If you live somewhere not listed above, you have the rights your local law gives you, which you can use as described in this section, and you can complain to your local data protection authority.

11. Changes to this policy

We may update this policy. Every change is reflected by a new "Last updated" date at the top of this page. If a change would let us use data we have already collected in a materially different way, we will ask for your consent first where the law requires it. When a change is material, GymLog also tells you in the app with a short notice and a link to this page, and asks for your choice there if the change needs your consent. Which version you last saw is stored only on your device; the app sends that number to our server to work out what to show, and the server does not keep it.

12. Contact

John Armgardt (GymLog) — armgardtj@outlook.com