GYMGO — Privacy Policy

GYMGO ranks your lifts against a fifteen-tier ladder. To do that it needs an account and the sets you log. That is all it takes, and this policy says so plainly.

What we collect

• Your email address. To create your account, sign you in, and let you recover access. If you use Sign in with Apple and choose Hide My Email, we only ever receive Apple's relay address, never your real one.
• Your name — only if you add one. Added in Settings and shown on your profile. If you use Sign in with Apple, the name Apple shares is used once, on your device, to suggest a starting username, and is not saved as your name.
• Your profile photo — only if you add one. Tap your photo on your profile to choose one from your library. Only the photo you pick leaves your phone, resized to a small square first; the app never gets access to the rest of your library. Remove it at any time the same way.
• Your username. Either chosen at sign-up or derived from your name or email.
• Which standards rank you. Asked when you create your account: whether your lifts are measured against the men's or the women's ladder. The two have different qualifying marks for every exercise, so we cannot rank you correctly without it. Used for that and nothing else.
• Your workouts. For each set: the exercise, the weight, the reps, the hold time, the jump height, and when you logged it. This is what your tier standing is calculated from.
• Who you follow, and who follows you. Kept so the app can show your followers, show whose profiles you have chosen to see, and keep the counts on your profile honest.
• Anyone you block. Kept so the block holds. Only you can see who you have blocked; the person blocked is never told.
• Reports you send us. If you report someone, we keep what you sent, who you reported, and when. Only we can read reports — the person reported cannot.
• An account identifier. A random ID tying your workouts to your account.
• Your subscription and purchase history. If you subscribe to GYMGO Pro, Apple and RevenueCat process the product purchased, transaction and renewal dates, subscription status, and the receipt information needed to validate the purchase and restore access. We do not receive your full payment-card details.

What we do not collect

Being specific, because pages like this usually are not:

• No advertising tracking. No advertising SDK, advertising identifier, cross-app tracking, or data broker. RevenueCat provides subscription reporting from purchase history; GYMGO does not use it to track you across other companies' apps or websites.
• No location. The app never asks and cannot access it.
• No Apple Health data. GYMGO does not connect to HealthKit and cannot read anything from the Health app.
• No contacts, camera, or microphone, and no access to your photo library beyond the single photo you choose for your profile.
• No crash or usage reporting.
• No advertising identifier.

GYMGO does not sell your data, share it for advertising, or use it to build a profile of you. There is no mechanism in the app to do any of those things.

What other people can see

Your profile is public to anyone signed in to GYMGO. Not to the open internet, and not to anyone without an account — but to any other athlete, whether or not they follow you.

Visible to them:

• Your display name, your username, your profile photo, and the month you joined.
• Your badges, your tiers and your medals, including the mark you cleared for each — for example, a 275 lb bench press badge states 275 lb.
• How many people follow you, how many you follow, and who those people are.

Not visible to them:

• Your individual workouts. Your last session and your training log are yours. They are shown on your own profile and nowhere else.
• Your email address. It is never exposed to other athletes, by any screen or any request.
• Your lifetime totals — weight moved, floors climbed, time trained.

Anyone can follow you without your approval, the way a public social account works. You do not have to accept anyone, and following is one way: someone following you does not mean you follow them.

Blocking. Open someone's profile and use the menu in the corner. A block works in both directions — neither of you can see the other's profile, and neither appears in the other's search — and it ends any following between you. The person blocked is not told.

Reporting. The same menu reports a profile. Reports come to us and nowhere else.

How we use it

Only to run the app: to keep you signed in, to store the workouts you log, to calculate which tier you have earned in each exercise, to show your profile — to you and to other athletes, as described above — and to keep blocks and reports working. Nothing else.

Who else sees it

Supabase hosts our database and handles sign-in. Your account, workouts and profile photo are stored on their infrastructure in the United States (AWS, Oregon).

Apple handles Sign in with Apple if you choose it, processes App Store subscription payments, and provides the transaction information needed to confirm and restore your purchase.

RevenueCat validates App Store purchases and tells GYMGO whether GYMGO Pro is active. We send RevenueCat your random GYMGO account identifier and Apple purchase information so access follows your account across devices and reinstalls. RevenueCat also produces subscription reporting from that purchase history. RevenueCat does not receive your workouts, profile photo, followers, or lifting results. See RevenueCat's privacy policy.

That is the complete service-provider list. No advertisers or data brokers.

How it is protected

Everything travels encrypted over HTTPS. On the database, row level security decides what each account can read, row by row, and it is the database that enforces it rather than the app — so a rule cannot be worked around by anyone who takes the app apart.

What that means in practice:

• Your workouts can only ever be read and written by you. No other account can reach them, and we have tested that this holds.
• Your badges, tiers and profile can be read by any signed-in athlete, which is what makes profiles work. Blocked accounts are refused by the database, not merely hidden by the app.
• Your email address is never readable by another account. Profiles are served by something that lists the columns it may return, and that column is not among them.
• Your profile photo is the one thing outside this: so it can be shown on profiles, anyone who has its web address can view it.

How long we keep it

Your GYMGO account data is kept until you delete it. Subscription transaction records held by Apple and RevenueCat are separate from the GYMGO workout database and may be retained as needed to operate, restore and account for subscriptions, prevent fraud, and meet legal obligations.

Deleting your account

Your rights

Wherever you live, you can see what we hold, correct it, or delete it. Deletion is in the app and immediate. For access or correction, contact us at the address above.

If you are in the UK, EU, or EEA: our lawful basis is performance of a contract — we cannot give you an account or a tier standing without this data. You may also lodge a complaint with your local data protection authority.

If you are in California: we do not sell or share personal information as those terms are defined by the CCPA, and we have not in the past twelve months.

Children

GYMGO is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Changes

If this policy changes we will update this page and the effective date above. Material changes will be flagged in the app.