🏋️ GymLog

Privacy Policy

This policy explains what GymLog collects, why, who receives it, how long it is kept, and the choices you have. It covers the GymLog app on iPhone and Android, the services behind it, and our website (gymlog-app-prod.web.app, which hosts these pages). It is also our notice at collection: the categories we collect, why, and how long we keep them are set out below (Sections 2, 6 and 10).

Questions about this policy or your data? Email armgardtj@outlook.com.

1. Who we are

GymLog ("we", "us", "the app") is run by an independent individual developer based in New York, United States. The app uses Google Firebase as its backend.

Controller. The controller of your personal information (the person who decides how it is used) is John Armgardt, who operates GymLog. Contact for every privacy matter, including using your rights: armgardtj@outlook.com. Email is the only contact channel. He is also the person in charge of protecting personal information (privacy officer) for Canadian law, including Quebec's Law 25, and for other laws that ask for one.

Where GymLog is offered. The United States and many other countries, including Canada, Australia, New Zealand, South Africa and Brazil. GymLog is not offered in the EU/EEA, the United Kingdom or Switzerland.

2. What we collect and why

GymLog is local-first: your detailed workout history — every set, rep, weight and note — is stored on your device and works offline. We collect only what a feature you use needs.

Workouts and training data you create

• Workouts — exercises, sets, reps, weights, durations, rest, cardio you enter, and notes. Used to log, show and analyse your training.
• Templates, programs, equipment, exercise settings, exercise groups and gyms you create or edit.
• Imports. If you import a Caliber or MacroFactor export, the file is read on your device; only the resulting sets, reps and weights become workouts. GymLog has no health or location-history importers.
• Workout photos you add. Each photo is re-saved without its hidden details (location, time, camera) before it is stored.
• Cloud sync and backup. If you sign in, your templates, equipment, gyms, profile and settings are kept in your account, and — with "Sync across devices" on — your workouts and workout photos too, so a reinstall or a second device restores them. This copy is private to you: other users cannot read it.
• Recently deleted. A workout you delete stays in Recently deleted on your device for 30 days so you can restore it. It is then erased the next time GymLog runs. If you sync, the copy in your account is removed straight away, leaving only a marker with the workout's ID and when it was deleted, so your other devices remove it too; restoring the workout uploads it again from your device.

Account and profile

• Sign-in — your email address and a sign-in identifier from Sign in with Apple, Google, or email and password. Your email is never shown to other users.
• Profile — the display name and @handle you choose when you create your account, and optionally a bio, goals and an avatar (an emoji or a photo). Your home gym appears on your profile only if you turn that on.
• Profile counts. Other people see counts worked out by our server from only what they can already see: how many workout summaries you share (in total and per month), the gyms in those summaries and the gyms you rated (with your rating), and summary stats (total, this year, week streak, favourite day) from those shared workouts. Workouts you don't share are never counted for anyone else, so no one can tell they exist. Your friend count is shown to you and, only if you show your friends list to your friends (see Friends below), to your friends. Your own profile always shows all of your workouts.
• Who can see your profile. Your profile can be seen by anyone signed in to GymLog, not only your friends. Signed-in users can find you in people search by your display name or @handle. Your plan (free or Pro) is stored privately in your account, readable only by you. Until everyone has updated from GymLog 1.0, a copy also stays on your profile record, which the app does not show to other people; we remove that copy once older versions are no longer in use.

Sharing and social features

• Workout summaries — off unless you turn sharing on. A shared summary includes the title, date, duration, gym, PR count, exercise names, tagged friends and any workout note. Anyone signed in to GymLog can see it, including on that gym's page. Your sets, weights and reps are not included.
• Comments, reactions, and gym ratings and reviews you post, shown with your display name to anyone signed in.
• Friends — friend requests, your friend list and your block list. Your block list is seen only by you. Your friends list (each friend's name, @handle and profile picture or emoji) and how many friends you have are shown to your friends — people you have accepted as friends — once the app has told you about this and you have not chosen to hide them: the notice lets you hide your list in one tap, and you can change "Show my friends list to friends" at any time in Edit profile. Until you have answered that notice, and whenever the setting is off, your list is seen only by you. People who aren't your friends can never see your list. Someone you have blocked, or who has blocked you, can never see your list, and is left out when anyone else's friends list is shown to you or to them.
• "Log for me". If you let a friend log workouts for you, that friend can read your templates, equipment, exercise settings and, for each exercise, the sets, reps and weights from your last three sessions — so they can log the right numbers. Each time they do, your account keeps a record of who looked and when. The sets a friend logs for you are sent to your account. If you log for a friend, the sets you log are sent to theirs. You can remove the permission at any time.
• Reports. If you report content or a person, we receive your account ID, what you reported, its owner, the reason and any note you add.

Apple Health and Health Connect (optional, never stored)

• With your permission, GymLog reads other apps' workouts, walking/running/cycling distance, daily steps and body weight only to show them on your Stats page. The data stays in memory while you look at it. It is not saved on your device, not uploaded, not in backups and not shared.
• GymLog never reads heart rate or routes, and never reads health data in the background.
• When you finish a GymLog workout, it can save that workout (its type and start and end times) to Apple Health or Health Connect.

Location (optional — "Auto-tag my gym")

• Off unless you turn it on. When on, GymLog uses your precise location only while a workout is running, to tag the gym you're at. Location readings stay in memory. One spot per workout is kept on your device only and erased once the gym is tagged, or 30 days later, the next time GymLog runs. It is never uploaded, synced or backed up, and no route is kept. GymLog does not use location in the background between workouts.
• What location is used for — the complete list: tagging the gym for a workout (with Auto-tag on), and listing gyms near you when you tap "Show gyms near me" or have Auto-tag on. For that list, your location is sent once through our server to Google Places. We do not store or log it.
• Location is never used for advertising and never sold. (Google AdMob works out a coarse, city-level location from your IP address on its own — see Section 3.)

Gyms

• A gym linked to a place is identified by Google's place ID; its name, address and map come from Google and are public. A gym that is not linked is just the name you gave it — no address or location.
• Gym pages are shared. We store only the place ID (linked) or the name (not linked). Details from Google are cached on our server for at most 30 days.

AI features (optional)

• AI Coach. Nothing is sent until you agree on first use. Then, each time you ask, GymLog sends our server your goals, your sets, reps and weights from the last 21 days, the exercises you train and their muscle groups, your home gym's equipment, and your conversation with the Coach. It does not send your name, email or location unless you type them into the conversation. Our server passes this to Anthropic's Claude for a reply.
• Fill missing muscles (Pro). The app explains what is sent the first time you use it. Then the names of your exercises that aren't in GymLog's built-in library are sent through our server to Anthropic, so it can suggest the muscles each one works. The exercise names and their suggested muscles are kept in a shared cache, not linked to you, so the same name isn't sent twice.
• AI usage counters. Our server records how many AI requests you made each day and what they cost each month. This never includes what you asked or what the AI answered. It is used only to apply fair-use limits.

Identifiers and technical data

• Account ID — a Firebase user ID created when you sign in.
• Push token — a Firebase Cloud Messaging token, if you allow notifications, used to deliver friend, comment, reaction, tag and "log for me" notifications.
• Advertising identifier — on the free plan only, Google AdMob uses your device advertising ID (on iPhone the IDFA, only if you allow tracking when iOS asks). GymLog Pro makes no ad requests.
• Purchase state — whether you have GymLog Pro. Payment is handled entirely by the App Store or Google Play; we never receive your card details. We receive your subscription status and the store's purchase identifier, and record which account a purchase belongs to so it can't be used on two accounts (see Section 7).
• Diagnostics — crash reports via Firebase Crashlytics: what went wrong, device model, OS and app version, linked to your account ID (not your name, email or workout content).
• Server logs — records our backend writes while handling your requests (for example errors, purchase checks and usage-limit events), which can include your account ID.

Content GymLog loads from other services

• Maps are drawn with map tiles from OpenFreeMap, and exercise how-to images are loaded from the jsDelivr CDN. Like any website, these services receive your IP address and which map area or image was requested — nothing else from GymLog.

Where the data comes from

• You — everything you type, choose, import or upload.
• Your device — location (only with Auto-tag on or when you tap "Show gyms near me"), identifiers, and crash and device information, collected automatically as described above.
• Apple or Google, when you sign in with them — your name, email address and a provider user ID.
• The App Store or Google Play — your subscription status and purchase identifier.
• Other GymLog users — for example when someone sends you a friend request, comments on or reacts to your workout, tags you, logs a workout for you, or reports you.

Automatic content filter

Display names, @handles, bios, goals, shared workout titles and notes, comments and gym reviews are checked against a list of clearly objectionable words (for example slurs). A matching @handle or display name is refused; in other text, matching words are masked before it is published. No person reviews this first. If you think the filter got it wrong, email armgardtj@outlook.com and a person will review it. We make no other decisions about you based solely on automated processing, and we do not profile you.

3. Who receives data

To make features work, some data goes to the services below. Each gets only what that feature needs.

We do not sell your personal information for money. Showing personalised ads through Google AdMob may count as "sharing" personal information for cross-context behavioural advertising under California and some other US state laws; you can opt out at any time (Section 8). Your workouts, health data and precise location are never given to advertisers. Data sent to Anthropic is used only to answer your request. Each provider processes data under its own terms.

Anthropic and AI processing

Anthropic processes AI requests on our behalf, as our service provider, only to answer that request. Anthropic's API terms state that data sent through the API is not used to train its models. Anthropic keeps API inputs and outputs only for a limited period set out in its terms, for abuse and safety monitoring, and longer only where a request is flagged under its usage policies or the law requires it. We do not store your Coach conversation on our server. See Anthropic's commercial terms and privacy center.

Other disclosures

• Other GymLog users — your profile, and what you choose to share or post, as described in Section 2.
• When the law requires it — we may disclose data if required by valid legal process (such as a court order or subpoena), or where needed to protect someone's safety, enforce our Terms, or defend legal claims.
• If GymLog changes hands — if the app is sold or transferred, your data may pass to the new operator, who must keep treating it as this policy describes.

We do not disclose personal information to third parties for their own direct marketing. (California residents may ask about this under California Civil Code §1798.83; there is nothing to report.)

4. Where your data lives

On your device only: your full workout history if you don't sign in or don't turn on sync, the one location spot per workout (Section 2), health data while you view it, and your "Do not sell or share" setting.

In your account (Firebase), private to you: your synced workouts, templates, equipment, gyms, settings, backups and workout photos.

Visible to other signed-in users: your profile, workout summaries you share and the profile counts made from them (Section 2), comments, reactions, and gym ratings and reviews. Visible to your friends only: your friends list and friend count, if you choose to show them (Section 2). Friends you let "log for me" also see the plan details listed in Section 2. Nothing is visible to people without a GymLog account; the website shows only these legal pages.

5. How we protect your data

All traffic between the app and our backend, and between our backend and the services above, uses HTTPS/TLS. Data stored in Firebase is encrypted at rest by Google. Server-side security rules let only you read your private data; workout photos are readable only by your own account. API keys are held on our server and never ship inside the app. GymLog's data is excluded from Google's device backup (Android) and iCloud backup (iPhone).

No system is perfectly secure, and we cannot guarantee that data will never be accessed without permission. If a security breach affects your personal information, we will notify you and the relevant authorities as the law requires.

6. How long we keep it

• Workout location spot (device only) — erased when the gym is tagged, or 30 days later, the next time GymLog runs.
• Health data — not stored.
• Recently deleted workouts — 30 days, then erased the next time GymLog runs.
• Account data — your profile, synced workouts, templates, backups, photos, posts, comments, reactions, reviews and friends: until you delete them or your account.
• Google place details — up to 30 days on our server; the copy on your device is refreshed or dropped 30 days later, the next time GymLog runs (only the place ID is kept longer).
• AI usage counters — daily counts 7 days, monthly totals up to 41 days; deleted with your account. App-wide daily AI totals (not linked to anyone) are kept for about 400 days. Exercise names in the AI label cache (not linked to anyone) are kept for up to 365 days.
• Sync history (for "Sync across devices": a log of which workout or setting changed and when) — up to 90 days. Each synced item also carries version numbers and change times, kept with the item until you delete it or your account. When two of your devices change the same set at the same time, the older change is kept in a private log for up to 90 days to diagnose sync problems; it is never shown to anyone. Both are deleted with your account.
• Account deletion marker (your account ID only, so a deletion finishes cleanly) — 30 days after deletion.
• Notification rate counters (how many notifications you received in the last hour, to prevent spam) — 2 days.
• Reports you file or that are filed about you — 365 days, including after account deletion, for safety and appeals.
• Server logs — up to 30 days. Crash reports — up to 90 days. Both are kept for that time even after account deletion.
• Purchase record (Section 7) — kept after account deletion, released from the deleted account, because a store purchase can be presented again at any time.
• Push tokens — until your device replaces them or you delete your account.
• Copies held by providers — data you delete may remain for a limited time in our hosting provider's internal backups until they are overwritten. Data held by Google AdMob and Anthropic is kept under their own terms (Section 3).

We keep nothing else about you once these periods end.

7. Deleting your account and data

Delete your account in the app at any time in Settings → Account → Delete account, on iPhone and Android — or see how to delete your account. Deletion runs straight away on our server and removes your profile and @handle, synced workouts and backups, shared summaries with their comments and reactions, comments and reactions you left on others' workouts, your gym ratings and reviews, friends and friend requests, "log for me" permissions and invites, uploaded photos, push tokens, AI usage counters, and your sign-in account. Then the app erases its data on that device.

What stays: gyms you added stay (they are shared places) but no longer say who added them; a workout you logged for a friend stays in their account without your name; reports, logs and crash reports for the periods in Section 6; and the purchase record below. If you want a copy first, use Settings → Export my data (CSV).

Purchase record. So one subscription can't be used on two accounts at once, we keep a record of each purchase: a one-way fingerprint of the store's purchase identifier, the platform, the product, whether it is active, the dates, and the account ID it belongs to — never your name, email or payment details. When you delete your account, the record is released from it: it keeps the deleted account's ID only so that, if you sign up again, you can restore the same subscription on your new account. Deleting your account does not cancel a subscription: cancel it in the App Store or Google Play.

If you can't access the app, email armgardtj@outlook.com from the email address on your account.

8. Your choices

• Sharing — workout sharing is off until you turn it on; you can turn it off, and hide your home gym, at any time.
• Location — "Auto-tag my gym" is off until you turn it on in Settings. You can also revoke location permission in your device settings.
• Health — disconnect Apple Health or Health Connect in your device settings.
• Notifications — revoke the notification permission in your device settings.
• Ads — turn on "Do not sell or share my personal information" in Settings (on iPhone under Data & Privacy; signed in or not; the setting is saved on that device) so ads are no longer personalised using your data. You'll still see ads on the free plan. Where Google shows a privacy message for your region, "Privacy choices" in the same place reopens it. On iPhone you can also change tracking in iOS Settings → Privacy & Security → Tracking. GymLog Pro removes all ads and ad requests.
• Friends list — "Show my friends list to friends" in Edit profile; turn it off at any time and no one else can see your list or its count.
• "Log for me" — remove a friend's permission at any time.
• AI — nothing is sent unless you use an AI feature.
• Export — Settings → Export my data (CSV).
• Correct your data — edit your profile, workouts, posts and reviews in the app, or email us.
• Browser signals. The app has no web browser, so it does not receive Do Not Track or Global Privacy Control signals; use the in-app setting above or email us. Our website sets no cookies and runs no analytics or ads.

9. Age requirement

GymLog is intended for adults. You must be at least 18 years old to create an account and use GymLog, as set out in our Terms; the app asks you to confirm this when you sign up, and it is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, email armgardtj@outlook.com and we will delete it.

10. Your rights, legal bases and international transfers

Your rights

Depending on where you live, you may have the right to:

• know whether we process your personal information and access it (including the categories of data, its sources, why we use it, and the categories of third parties — or, where your law requires, the specific third parties — we disclose it to);
• correct inaccurate data;
• delete your data;
• receive a portable copy of the data you gave us;
• opt out of "sharing" for cross-context behavioural advertising (targeted advertising), of any sale (we do not sell), and of profiling (we do not profile you);
• object to or restrict processing, and withdraw consent where we rely on it (for example Auto-tag, sharing, AI features) — withdrawing does not affect processing that happened before, and the only consequence is that the feature that needed it stops working;
• be told about, and ask a person to review, a decision made solely by automated processing (see "Automatic content filter" in Section 2);
• not be discriminated against for using any of these rights — you will not be denied the service or charged a different price.

How to use them. Many rights work directly in the app: Export my data, Delete account, "Do not sell or share my personal information", and editing your profile and workouts. For anything else, email armgardtj@outlook.com.

Verification. We verify requests before acting on them — normally by asking you to write from the email address on your account, or to confirm in the signed-in app. We use what you give us for verification only for that purpose. If we can't verify you, we'll tell you why.

Authorised agents. Where your law allows, someone you authorise may make a request for you. We may ask for your signed permission and to verify your identity directly with you, unless the agent holds a valid power of attorney.

Response time. We respond within the time your law requires — generally within 30 days, or 45 days under most US state laws. Where the law allows an extension, we'll tell you within the original period and explain why.

Appeals (US states). If we decline to act on your request, you can appeal by replying to our decision or emailing armgardtj@outlook.com with "Appeal" in the subject. We will reply in writing within the time your state's law requires (at most 60 days) and explain our decision. If you disagree, you can contact your state attorney general.

California and other US states

This table describes the personal information we have collected in the past 12 months, in the categories California law uses. Sources are in Section 2 ("Where the data comes from"); retention is in Section 6.

We do not collect protected-classification characteristics, biometric information, professional or employment information, or education information, and we do not create inferences or profiles about you.

Selling and sharing. We do not sell personal information and have not sold it in the past 12 months. On the free plan, Google AdMob may use your advertising ID and IP-based coarse location to show personalised ads, which California and some other US state laws may treat as "sharing" for cross-context behavioural advertising (or "targeted advertising"). You can opt out at any time in Settings → "Do not sell or share my personal information": when it is on, every ad request tells Google to apply restricted data processing, so your data is not used to personalise ads. We do not knowingly sell or share the personal information of anyone under 16 (and GymLog is for adults only — Section 9).

Sensitive personal information. We treat precise geolocation and your workout logs as sensitive personal information. We use them only to provide the features you asked for, do not sell them, do not share them for advertising, and do not use them to infer characteristics about you. Because we use sensitive personal information only for these permitted purposes, the right to limit its use does not apply, and we do not offer a separate "Limit the use of my sensitive personal information" link.

Consumer Health Data Privacy Policy

This is our consumer health data policy under Washington's My Health My Data Act, Nevada SB 370, Connecticut law and similar laws.

• What we collect: the workouts you log (exercises, sets, reps, weights, durations, cardio, notes). We do not collect or store data from Apple Health or Health Connect, heart rate, routes, or body measurements, and location is never used to identify health-related visits.
• Why: only to provide the logging, stats, sync, backup, coaching and sharing features you use.
• Sources: you, and friends who log a workout for you.
• Who receives it: our service providers (Google Firebase; Anthropic for the AI Coach, if you use it); friends you let "log for me" (sets, reps and weights from your last three sessions per exercise); and, only if you turn sharing on, other GymLog users (summaries without sets, weights or reps). We never sell it and never use it for advertising.
• Your rights: confirm, access, delete, and withdraw consent as described above, including the list of third parties that received it.

Canada (including Quebec)

We collect and use your personal information only for the purposes in this policy, with your consent. Using the app with an account is consent to the processing needed to provide it; for optional uses (sharing, Auto-tag, health access, notifications, AI features, personalised ads) we ask separately, and you can withdraw consent at any time (Section 8). You can access and correct your personal information and withdraw consent by contacting our privacy officer (Section 1). Your data is stored and processed outside Canada, mainly in the United States, where it may be accessible to courts and authorities under local law. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information (or your provincial privacy commissioner where one applies).

Australia and New Zealand

Your personal information is disclosed to and stored by overseas recipients — our providers in the United States and other countries where they operate (Section 3). You can ask to access or correct it at any time. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner or New Zealand's Office of the Privacy Commissioner.

South Africa

You can ask to access or correct your personal information, and object to its processing. If you are not satisfied with our response, you can complain to the Information Regulator (inforegulator.org.za).

Brazil

Under the LGPD you have the rights listed above, including confirmation that we process your data, access, correction, anonymisation, blocking or deletion of unnecessary data, portability, information about who we share it with and about the consequences of not giving consent, and withdrawal of consent. You can also complain to the Autoridade Nacional de Proteção de Dados (ANPD). Our legal bases are below.

EU/EEA, United Kingdom and Switzerland

GymLog is not offered in these places. If you installed it there before it was withdrawn, you have the rights listed above under the GDPR (or UK GDPR / Swiss law), on the legal bases below, and you can complain to your local data protection authority.

Legal bases

Where the law requires a legal basis (for example Brazil's LGPD, or the GDPR for anyone who installed GymLog in the EU/EEA, UK or Switzerland before it was withdrawn), we rely on:

International transfers

GymLog is operated from the United States, and your data is stored in the United States. Our providers — including Google (Firebase, Places, AdMob) and Anthropic — process data in the United States and other countries, so wherever you live your data is transferred to countries whose data protection laws may differ from yours. We send each provider only what the feature you use needs (Section 3). For anyone who installed GymLog in the EU/EEA, UK or Switzerland before it was withdrawn, transfers from there rely on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, and otherwise on Standard Contractual Clauses in the provider's data processing terms.

Anywhere else

If you live somewhere not listed above, you have the rights your local law gives you, which you can use as described in this section, and you can complain to your local data protection authority.

11. Changes to this policy

We may update this policy. Every change is reflected by a new "Last updated" date at the top of this page. If a change would let us use data we have already collected in a materially different way, we will ask for your consent first where the law requires it.

12. Contact

John Armgardt (GymLog) — armgardtj@outlook.com