Privacy policy
Effective 13 November 2026. This policy covers the Gym Coach app for Android and iOS (package eu.gymcoach.app) and this website.
In short: we store your training, weight and coaching data so the app can work and sync across devices. When you use AI features, the relevant parts are sent to AI model providers to generate replies. We do not sell your data or use it for advertising. You can delete everything at any time.
Who we are and how to reach us
Gym Coach ("we") is responsible for the data described here. Contact us through the in-app delete option or the request form. To exercise any other right listed below, use the request form and describe your request in the note.
Data we store
| Data | Why |
|---|---|
| Account: email address, name if you give one, sign-in identifiers | To sign you in and keep your data separate from other users |
| Workouts: sessions, exercises, sets, weights and reps | To log training, show history and progress |
| Body weight entries and your weight goal | To show your trend and plan towards your goal |
| Training plans, AI plan drafts and coach proposals | To show and change your plan, only after you approve a change |
| Coaching profile: goal and current weight, target date, training days, injuries, food preferences, allergies | To personalise coaching and apply safety limits (for example, allergies are treated as hard constraints) |
| Coach chat messages | To hold the conversation and its context |
| AI consent record, chosen AI models, monthly AI usage and spend cap | To block AI features until you consent, and to cap AI costs |
| Technical data: app version, device model and operating system, crash reports | To find and fix errors |
Injuries, weight and other fitness data can be health data. We process it only because you choose to enter it and, for AI features, only after you give explicit consent in the app. Logging works without AI.
Your workouts and weight entries are also stored on your phone, so the app works offline. That copy is erased when you delete your account in the app.
Who processes your data
We use these service providers. They process data on our behalf, and some are based in or transfer data to the United States under appropriate safeguards (such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework).
- Clerk, Inc.: sign-in and account management (email address, sign-in identifiers, session data).
- Convex, Inc.: our backend and database. It stores all the app data listed above.
- OpenRouter, Inc.: routes AI requests to model providers. When you use the coach, plan generation or other AI features, it receives the messages and the relevant parts of your profile, plan, workouts and weight.
- AI model providers reached through OpenRouter (for example OpenAI, Anthropic, Google or other providers, depending on the model chosen in Settings): they generate the AI replies from the data in each request.
- Crash reporting provider (Sentry or Expo EAS Observe, whichever the current app build uses): receives crash and error reports with technical data. We do not include your health data in these reports.
- Cloudflare, Inc.: hosts this website and stores deletion requests sent through the form.
AI replies are suggestions, not medical advice. Diets in the app are food-pattern preferences. If you feel pain or have a medical condition, see a doctor.
How long we keep data
- Account and app data: for as long as your account exists.
- When you delete your account, we remove it from our database within minutes (in the app) or within 30 days (by request).
- Service providers may keep short-lived logs and routine backups that expire on their own schedules before the data is gone everywhere.
- Deletion requests sent through the form: up to 180 days.
Deleting your data
Delete your account in the app under Settings → Account → Delete account, or follow the steps on gymcoach.kubok.dev/delete-account. This deletes all the data listed above.
Your rights
Depending on where you live (including under the EU GDPR), you have the right to access, correct, export or delete your data, to object to or restrict processing, and to withdraw consent at any time. Withdrawing AI consent stops AI features but does not affect processing that already happened. You can also complain to your data protection authority.
Security
Data is encrypted in transit. Each user's data is isolated on the server and on the phone. API keys for AI providers stay on our servers and never ship in the app.
Children
Gym Coach is not meant for children under 16, and we do not knowingly collect their data.
Changes
We will update this page when our practices change and show the new effective date at the top.