Privacy Policy
This page explains what data the Gymie app collects, why, who we share it with, how long we keep it, and how to have it removed.
Last updated: 2026-10-19
Who is the data controller
The controller of your personal data is Hubert Jaruzal ASGARD, Poland, VAT ID (NIP) PL7642677506. For anything about your personal data, write to hubertjaruzal@gmail.com.
This policy covers the Gymie mobile app (iOS and Android), the getgymie.com and gymie.pl websites, and the connection between Gymie and AI assistants.
What data we process and why
You don't need an account. Without one, the app works on your phone and your data stays there. Once you sign in, your data goes to our server so it survives a reinstall, works on another device, and makes the friends features possible.
When you sign out, the app first sends every change from your phone to your account. Only once the server confirms it has all of them does the app delete the account's data from your phone. Without that confirmation, for example with no internet, the app doesn't sign you out and deletes nothing. When you sign in again, your data comes back from your account.
With an account, we process:
- Account: email address and password (stored only as a cryptographic hash), or a phone number or Google account if your account signs in that way. So you can sign in and see the same data on every device.
- Profile: name, gender, height, date of birth, experience level, units, time zone, your chosen coach voice and how often it talks. So the coach speaks correctly and to the point, and your goal is calculated for you.
- App settings: for example language, coach tone, warm-up, "Tell my friends" and the look of the share card. So they come back on every phone you sign in on.
- Profile photo (optional): the photo you set in Profile. So friends and the people you work out with recognise you in the app. Details are in the profile photo section.
- Workouts: exercises, sets (weight, reps, difficulty, time), training plans, workout history, and which coach lines you've already heard, so they don't repeat.
- Workout photos: photos taken during a workout and how you edit them. Details are in the workout photos section.
- Body and goal: weight and its history, goal (cut, bulk or maintain), target weight, target date, calorie and macro targets.
- Diet: meals, calories and macros, meal photos, saved meals, your own ingredients and eating windows.
- Friends: your friends and invites, the fact that you're working out right now, voice messages and captioned photos you send to friends, meals you send to friends, joint workouts.
- Notifications: your device's push token and platform, so we can tell you when a friend is working out, invites you to a joint workout or sends you a meal.
- AI assistants: which assistants are connected, when they got access and when they lost it, daily limit counters.
- Rewards (only if you claim a challenge reward): your full name, address, phone number for the courier, size and your consent to processing them. Details are in the rewards section.
- Technical data: IP address, time and address of requests in server logs, meal analysis usage counters. So the service runs securely and limits stay fair.
Weight, height, goal, diet and workouts can say something about your health, so we treat them as health data (Art. 9 GDPR).
Kilograms moved in bodyweight exercises are counted from your weight.
A meal sent to a friend is health data too: it reaches the people you pick only when you choose to send it, one meal at a time.
These stay on your phone only: the originals of workout photos, share cards (unless you share them), Apple Health and Health Connect data, technical settings of the phone itself, and meal photos taken while signed out.
We don't use analytics, ads or cross-app tracking. We don't sell data.
Apple Health and Health Connect
With your permission, given in the system dialog, Gymie reads your daily step count and the active calories recorded by a watch or other wearable from Apple Health (iPhone) or Health Connect (Android), together with which app and device recorded them. We show them on the Diet and Goal screens.
This data is read and calculated on your phone only. We don't store it on our server, don't send it to any provider or AI assistant, and don't write anything to Apple Health or Health Connect.
Data from Apple Health and Health Connect is not used for advertising, not sold and not passed on, and is used only to show your activity in the app. You can withdraw access at any time: on iPhone in Settings, under Health, and on Android in the Health Connect app.
Apart from the system dialog, Gymie asks for your explicit consent to health data on a dedicated screen in the app (see Legal bases). The app does not work without that consent.
Friends and joint workouts
You add friends with an invite code, which you can pass on through any app. A code is valid for at most 8 days, and a friendship starts only once the invite is accepted. You can remove a friend at any time.
Your friends see:
- Your name and your profile photo, if you have one (see Profile photo).
- That you are working out right now (and get a notification about it) when "Tell my friends" is on. It is on by default and you can turn it off in the app.
- Workouts you finish the same day and tell friends about with "Tell my friends": the exercises, the sets (reps and weight, and for bodyweight exercises only the added weight or the assistance), how long the workout took and how many sets it had. They don't see photos, notes or your body weight. Only people with Gymie Pro see the details. A workout leaves their view at midnight, their time, and you aren't told who looked at it.
- Voice messages (up to 60 seconds) and captioned photos you send them during their workout. Only the sender and the recipient see a message, and the recipient later finds it in that workout's history.
- A meal you send them from your diary: its name, ingredients with their weights, calories, macros and its photo if it has one. They don't see your goal, the rest of your diary or when you ate it. A meal the recipient neither adds nor dismisses is gone after 7 days. Once added, it becomes part of the recipient's diary and stays there even if you delete your account.
- In a joint workout (up to 4 people), live: the current exercise, set number, last set (weight and reps), finished exercises and rest. This is deleted 24 hours after the joint workout ends.
With a private profile, friends see only your name and photo; a joint workout you join works as described above.
Friends don't see your weight, diet (except meals you send them), goal, plans, older workout history or workout photos.
Diet challenges of the week are counted on the server from your meals, goal and eating windows. Friends see only that a challenge is completed.
Profile photo
A profile photo is voluntary. Without one, the app shows a circle with the first letter of your name. You can add, change or remove the photo in Profile at any time.
On our server we store two JPEG files (a larger and a small one), without metadata or location. They sit in private storage that no app reads from directly. A server function shows them through short-lived signed addresses.
Any signed-in Gymie user can be shown your photo when they have your account's identifier; in practice the app shows it wherever your account appears, for example:
- friends,
- joint workout partners,
- people you invite and people who invite you.
People who are not signed in do not see it. The photo never goes to AI assistants (MCP) or into notifications.
When you remove the photo, we delete both files from our server. When you delete your account, we delete it along with the account. When you sign out, the app removes the copies of photos from your phone. Other people's phones may keep showing the photo from memory for a short time, until the app next checks.
You can report a photo that breaks the law or the terms to hubertjaruzal@gmail.com. We may remove it.
Workout photos
We store workout photos in your account with the workout, so they come back when you sign in on another phone. Your account gets a smaller JPEG copy, at most 1 MiB, with its edit settings. The original never leaves your phone.
Before the upload, the app strips metadata (EXIF, XMP and IPTC) from the copy, including location. One account holds at most 200 photos.
The photos sit in private storage and are never public. They can be seen only when signed in to your own account. Friends don't see them unless you send them a photo in a message. AI assistants (MCP) have no access to them.
The photos are deleted from your account along with the workout they belong to, and along with your account.
Photos taken at the gym may show other people. Please respect their privacy.
AI meal analysis
When you ask for an estimate of calories, 1 to 5 photos of a meal with an optional description, or a description of the meal alone, go through our server to Anthropic (the Claude model), which estimates calories and macros. We don't send your name, email address, weight, goal or any other account data with them. The result is an estimate, not a measurement.
Anthropic keeps the photos, descriptions and answers for at most 30 days and then deletes them. Analysis has a daily limit per person.
Monthly reports
On the first day of every month the Gymie server prepares a report on the previous month from the data stored in your account: workouts, sets, meals, goal and weigh-ins. The report is health data. Only you can see it, signed in to your own account. Friends and connected AI assistants can't see it.
The suggestions in the report are prepared by Anthropic (the Claude model). We send only monthly totals and averages (such as the number of workouts, average calories or the pace of weight change), the names of the main exercises and muscle groups those numbers refer to, the kind of goal and its planned pace, the daily calorie and protein targets and whether they are your own, the safe calorie minimum, the experience level from your profile and a check of whether your eating fits the weight change. We don't send your name, email address, date of birth, weight, meals, notes or photos. AI suggestions are made only after you agree to the version of the health data consent that includes the AI point; without it, and when the AI doesn't answer, Gymie writes the suggestions from fixed rules.
You can turn off the notification about a ready report in the app: Settings, Notifications.
The PDF of a report is made on your phone and never reaches our server. What happens to it next depends on who you share it with.
AI comments on a day of eating and a week of training
With Gymie Pro you can open a summary of a day of eating or a week of training. Your phone works out the numbers. A short comment on them is prepared by Anthropic (the Claude model).
For a comment on a day we send the date, that day's meal names with their times, quantities, calories and macros, the kind of goal, the daily calorie and macro targets and the safe calorie minimum and, while the day is still going, the current time. For a comment on a week we send the date the week starts, how many of its days have passed, the number of workouts, training days and sets, and the sets per muscle group, including how many were direct. We don't send your name, email address, date of birth, body weight, photos, notes or any account identifier. A comment is made only after you agree to the version of the health data consent that includes this point.
We store the comment in your account so it shows on another phone too. Only you can see it, signed in to your own account. Friends and connected AI assistants can't see it. At most three comments on a day and one on a week are made per day. A comment is not medical advice.
Challenge rewards
Completing a chosen set of challenges in a set time can win a physical reward, for example a T-shirt. Gymie's server works out from the completed challenges whether a reward is due. Friends don't see rewards or claims, whatever your profile settings.
To ship the reward, the app asks for your full name, street and number, postal code, city, country, phone number for the courier and size. The form works only online and only once you tick the consent, and your phone never stores your name, address or phone number; it keeps only the size, the status of the claim and the tracking number, which leaves the phone at the first sync after we delete it on the server. With the address we record the version of the consent text (rewards-2026-10) and when you gave it.
The address is kept on your account in a separate, closed table. Your phone doesn't store it: the app shows it only when you ask, straight from the server. Only you and the Gymie team members who ship the rewards can see it. Friends and connected AI assistants can't. We don't write it to logs.
We delete your name, address, phone number and the tracking number 30 days after the reward ships, at once if the claim is cancelled (plainly or for good), and at once when account deletion starts. The claim itself (which reward, size, status and dates) stays in your account until you delete it. You can withdraw consent at any time by writing to hubertjaruzal@gmail.com: before shipping we then cancel the claim and delete the address at once, and after shipping we delete the address, phone number and tracking number at once on request.
For delivery we pass your name, address and phone number to the courier or postal operator carrying the parcel. We ship to every country except countries that Gymie excludes under EU sanctions; that list can change. Outside the European Union, customs charges may be due on delivery.
AI assistants (Claude, ChatGPT and others)
You can connect Gymie to an AI assistant of your choice. You start the connection in the assistant, then sign in to Gymie and approve access on a screen that shows what the assistant can and cannot do.
A connected assistant can read: meals, goal, daily and weekly summaries, saved meals and ingredients, workouts with sets, height, date of birth, gender, units and weigh-ins from the last 90 days. It can add meals and weight, and change or delete meals it added itself. It doesn't see friends, messages, monthly reports, AI comments on days and weeks, rewards or photos, including the profile photo, and doesn't change meals added in the app. It can make at most 200 changes a day.
What the assistant reads goes to its provider (for example Anthropic or OpenAI) and is covered by that provider's privacy policy. Assistant sign-in is handled by WorkOS, which receives only a pseudonymous account identifier, never your email or phone number.
You can withdraw access at any time in the app: Settings, AI assistants, Disconnect. It takes effect immediately.
Beta sign-ups
On gymie.pl and getgymie.com you can sign up to test Gymie. We then process your first name, email address, chosen platform (iPhone or Android), the language of the page, the dates of signing up, confirming and being invited, and the version of this policy you consented under. We do this only to confirm your address, invite you to the beta and reply to your messages about it. We send one email with a confirmation link; we send no advertising.
An invite means entering your first name and email address on the TestFlight testers list (Apple), or your email address on the Google Play testers list (Google). From then on Apple or Google processes this data under its own terms.
A sign-up is not linked to an account in the app: deleting your account doesn't delete your sign-up, and deleting your sign-up doesn't delete your account.
You can withdraw your consent at any time with the "Delete my sign-up" link in our email or by writing to hubertjaruzal@gmail.com. The link in the email works for 180 days; after that, just write to hubertjaruzal@gmail.com. We then delete the sign-up at once, and if you were already invited, we also remove your address from the testers list at Apple or Google.
If an invite had already gone out, a short record stays on a removal list after your sign-up is deleted or after you change platform: your email address, the platform the invite was for, and the dates of the invite and of the deletion or the change. After a change of platform the sign-up itself stays, with the new platform. The record serves only to remove your address from TestFlight or Google Play, and it is deleted as soon as the address is gone at Apple or Google.
Legal bases
- Contract (Art. 6(1)(b) GDPR): your account, sync, app settings, workouts and workout photos, plans, diet, friends, profile photo, joint workouts, notifications and account deletion. We can't provide these features without this data.
- Explicit consent (Art. 9(2)(a) GDPR): health data, that is weight and body measurements, height, goal, diet and workouts, AI meal analysis, monthly reports and their suggestions, AI comments on days and weeks, reading from Apple Health and Health Connect, and sharing data with a connected AI assistant. You give consent to health data on a dedicated screen in the app, at the first launch, with the "I agree" button. The screen says what data we use and why. We record your consent with the version of its text and the date you gave it on your phone and, once you sign in, on your account too. When the consent text changes (for example when AI comments on a day of eating and a week of training were added), the app asks again. For reading from Apple Health and Health Connect the system also asks in its own dialog, and you approve an assistant connection separately.
- Consent (Art. 6(1)(a) GDPR): the details to ship a challenge reward (name, address, phone number and size), given in the reward claim form. We record the consent with the version of its text and when you gave it, and you can withdraw it at any time. Without it the reward cannot be shipped.
- Legitimate interest (Art. 6(1)(f) GDPR): keeping the service secure, preventing abuse, daily limits and server logs, and replying to messages.
- Legal obligation (Art. 6(1)(c) GDPR): handling requests about your personal data.
- Consent (Art. 6(1)(a) GDPR): beta sign-ups. You give it by ticking the box at the form and confirming your address with the link in our email.
You can withdraw your consent to health data at any time in the app: Settings, Health data consent. Gymie can't work without this data, so withdrawing your consent leads to deleting your account with all its data. You can also turn off access to Apple Health and Health Connect in the system settings, and disconnect an assistant in the app. Withdrawing consent doesn't affect what happened before. Providing data is voluntary, but some features need it; for example, your goal can't be calculated without your height, weight and date of birth.
We don't make decisions based solely on automated processing that have legal effects. Calorie and goal estimates are suggestions.
Who we entrust data to
We use providers that process data on our behalf and only as far as Gymie needs to work:
- Supabase: database, sign-in, file storage (meal photos, workout photos, messages and profile photos) and server functions. Its servers are in the European Union, in Ireland.
- Vercel: hosting for getgymie.com, gymie.pl and the server for AI assistants.
- Anthropic: meal analysis, the suggestions in the monthly report and the comments on days and weeks.
- Expo, and through it Apple and Google: delivering push notifications.
- WorkOS: sign-in for AI assistants.
- A courier or postal operator: the name, address and phone number when we ship a challenge reward.
- An SMS provider: sign-in codes, if your account uses a phone number.
- Resend: sending the email that confirms a beta sign-up. The emails go out from its EU region (Ireland). Resend is based in the US, so data may also reach the US: under the EU-US Data Privacy Framework, and should that basis fail, under the standard contractual clauses in Resend's data processing agreement.
If your account signs in with Google, Google passes us your account details under its own privacy policy. Data also goes to people you show it to (friends and AI assistants, as described above) and to apps you share something through, for example a workout card on Instagram. When you are invited to the beta, your first name and email address go to Apple (TestFlight) or Google (Google Play).
Transfers outside the European Economic Area
Your account, workouts, diet and uploaded files are stored in the European Union (Supabase, Ireland). Some providers (Anthropic, Expo, WorkOS, Vercel, Resend) are based in the United States, so data may be processed there. This relies on the European Commission's adequacy decision (the EU-US Data Privacy Framework) for providers certified under it, and otherwise on the standard contractual clauses approved by the Commission. You can get a copy of the safeguards by writing to hubertjaruzal@gmail.com. We also ship rewards outside the European Economic Area. Your name, address and phone number then go to the carrier in the recipient's country, because the parcel cannot be delivered without them (Art. 49(1)(b) GDPR). We don't ship to countries under EU sanctions that restrict sending goods.
How long we keep data
We keep your account data until the account is deleted. Exceptions:
- You can delete a single workout or a single meal earlier in the app.
- A profile photo stays until you remove it or delete your account. Then we delete both files from our server.
- Monthly reports stay in your account until you delete it and are deleted with it.
- AI comments on days and weeks stay in your account until you delete it and are deleted with it.
- We delete reward shipping details (name, address and phone number) and the tracking number 30 days after shipping, at once if the claim is cancelled, at once when account deletion starts, and at once on request. The claim itself (which reward, size, status and dates) stays in your account until you delete it.
- Workout photos stay until you delete the workout they belong to, or your account.
- App settings stay in your account until you delete it and are deleted with it.
- Messages to friends stay until the recipient deletes the workout they arrived in, or until the sender or the recipient deletes their account.
- A meal sent to a friend stays on the server until the recipient adds or dismisses it, at most 7 days. Its photo, a copy without metadata, is deleted with it.
- The live state of a joint workout is deleted 24 hours after it ends.
- Anthropic deletes what it receives from us (meal photos and descriptions, meal names and the data for suggestions) and its answers within 30 days.
- Server logs are kept for the period set by the hosting providers.
- After an account is deleted, its pseudonymous identifier at WorkOS is removed in a periodic clean-up.
- An unconfirmed beta sign-up is deleted 7 days after the last sign-up request for its address, and its confirmation link works for 48 hours. A confirmed sign-up is kept until the beta ends and deleted at the latest 30 days after that, or sooner, at once, when you withdraw your consent.
- The removal list entry (email address, platform, dates of the invite and of the deletion or the change of platform) stays until the address has been removed at Apple or Google, and is then deleted.
- We don't make database backups, so deleted data doesn't come back from a backup.
Your rights
You have the right to:
- access your data and get a copy of it,
- have your data corrected,
- have your data erased,
- restrict processing,
- data portability for the data you give us,
- object to processing based on legitimate interest,
- withdraw consent at any time, without affecting earlier processing,
- lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
How to exercise your rights
You can do most things yourself in the app: correct your profile, weight and goal, delete a workout or a meal, disconnect an assistant, turn off notifications and delete your account. For anything else, write to hubertjaruzal@gmail.com from the email address on your account. We reply without undue delay, and within one month at the latest.
Deleting your account
You can delete your account and all its data on our server in the app (Settings, Account, Delete account) or on the account deletion page. Deletion happens immediately and can't be undone. Deleting the account in the app also clears the data stored on your phone.
If you can't sign in, write to hubertjaruzal@gmail.com from your account's email address. The account will be deleted within 7 days.
Children
Gymie is for people aged 16 and over. We don't knowingly collect data from younger people. If an account belongs to someone under 16, please write to hubertjaruzal@gmail.com and we will delete it.
Security
Connections are encrypted (HTTPS). In the database every account sees only its own data, and friends only what is described above. Meal photos, workout photos, messages and profile photos are kept in private storage. AI assistants can reach only the data listed above and have a daily limit on changes. Our logs record hashed identifiers instead of email addresses. The links in our beta sign-up emails work once and expire; our database keeps only their hashes.
Changes to this policy
When the way we process data changes, we will update this page and the date at the top. We will tell you about significant changes in the app before they take effect.
Contact
Hubert Jaruzal ASGARD, Poland, VAT ID (NIP) PL7642677506. Email: hubertjaruzal@gmail.com.