GymPlanPrivacy Policy
GymPlan is a training app that builds and adapts a workout plan for you. This policy explains what information GymPlan collects, why, who it is shared with, and the choices you have. GymPlan is provided by 9434-2334 Quebec Inc., Québec, Canada ("we", "us"). Questions: privacy@getgymplan.com.
In short: we use your information to run your training plan and nothing else. We do not sell it, we do not use it for advertising, and the app contains no advertising or tracking SDKs. Progress photos are saved inside the app and only uploaded if you turn on cloud backup. You can export or permanently delete everything from inside the app.
1. What we collect
| Information | Examples | Why |
|---|---|---|
| Account | E-mail address, password (stored only as a secure hash), or your Apple / Google sign-in identifier; first name; public handle if you choose one | To create and secure your account and sign you in |
| Training profile | Goal, experience, training days, session length, equipment, age, sex, height, weight, and any limitations or injuries you enter | To build a plan that suits you |
| Training history | Workouts, sets, reps, weights, personal records, recovery check-ins, notes | To adjust your plan, show your progress and award XP and achievements |
| Body tracking | Weight entries and body measurements you log | To show your progress over time |
| Progress photos | Photos you take in the app's check-ins | Kept on your device; see section 3 |
| Photo analysis results | Body-position points (landmarks) and the observations computed from them, only if you turn on photo analysis | To compare check-ins over time |
| AI coach | Messages you send the coach and its replies | To answer your questions; see section 4 |
| Machine scans | A photo of a gym machine you choose to scan | To identify the machine; sent once, not stored (section 4) |
| Subscription | Whether you have GymPlan Pro, its status and renewal date. We never see your payment card details. | To unlock Pro features |
| Privacy choices | A dated record each time you change a privacy setting or accept a policy | To respect and prove your choices |
| Technical | IP address and request details in server logs | Security, abuse prevention and fixing errors |
Some of this, such as weight, measurements, injuries and photos, is health-related information. We process it only to provide the features you use, and we ask for your consent where the law requires it.
2. How we use it
- To create your training plan and adapt it as you train.
- To run the features you choose: the AI coach, machine scans, photo check-ins, friends and leaderboards.
- To manage your GymPlan Pro subscription.
- To keep the service secure, prevent abuse, and fix problems.
We do not sell your information, share it for advertising, or use it to track you across other apps and websites.
3. Progress photos
- Photos are saved inside GymPlan on your device, not in your photo library, and are excluded from device backups. Location and other metadata are removed.
- Photo analysis (off by default) runs on your device. Only the computed body-position points and results are sent to our servers, never the photo itself.
- Cloud backup (off by default) uploads your photos to private storage that only your account can reach.
- Improving our models (off by default): if you opt in, photos you have backed up may be used to improve GymPlan's photo-analysis models. They are never made public, and you can withdraw at any time.
- Progress photos are never sent to the AI coach or to any AI provider.
4. AI features (Anthropic)
The AI coach and machine scans use Claude, an AI model provided by Anthropic, PBC.
- Coach: to answer you, Anthropic receives your message and a minimal summary of your training: your first name, training answers, your plan and working weights, recent workouts and personal records. It does not receive your e-mail address, photos, body measurements, notes or anyone else's data.
- Machine scan: the photo of the machine is resized on your phone, sent once to identify it, and not stored by GymPlan. Please avoid photographing other people.
- Anthropic processes this data to provide the service to us and, under its commercial terms, does not use it to train its models.
- AI answers can be wrong. They are not medical advice.
5. Who we share it with
Only with service providers that run GymPlan for us, under terms that limit them to that purpose:
- Hosting and database: Hostinger (a private server in Boston, United States)
- Photo storage (cloud backup only): Cloudflare R2 (Eastern North America)
- AI: Anthropic (section 4)
- Subscriptions: RevenueCat, which receives a pseudonymous account identifier (no name or e-mail) and your purchase records from Apple or Google; and Apple or Google, which handle payment
- Sign-in: Apple or Google, if you sign in with them
Friends: if you add friends, they see your handle, first name and level. Leaderboards are off by default; if you join, your friends also see your ranking in the chosen metric. Nothing is ever public.
We may also disclose information if the law requires it, or to protect the rights and safety of users or others.
6. How long we keep it
- Your data is kept while you have an account.
- When you delete your account, everything is permanently deleted from our database and photo storage at once. Copies inside database backups disappear when those backups expire, within 14 days.
- Server logs are kept in rotating files with a fixed size limit, so older entries are overwritten automatically.
7. Your choices and rights
- See and correct: edit your profile and training details in Settings.
- Export: Settings → Account and data → Export lets you download all your data.
- Delete: delete single photos, all photos, or your whole account in Settings. Deleting your account does not cancel an App Store or Google Play subscription; cancel it in your store account settings.
- Withdraw consent: turn photo analysis, cloud backup, model improvement or leaderboards off at any time in Settings → Privacy.
- Depending on where you live (for example Québec, the rest of Canada, the EU, the UK or California), you may have further rights, such as access, correction, portability, objecting to processing or complaining to a data-protection authority. Write to us to use them.
8. Security
Connections are encrypted (HTTPS). Passwords are stored as one-way hashes, sign-in tokens are kept in your device's secure keychain, and backed-up photos sit in private storage reachable only through short-lived links issued to your account. No system is perfectly secure, but we work to protect your information.
9. Where your data is processed
Our server is in the United States, and our providers (Cloudflare, Anthropic, RevenueCat, Apple, Google) process data mainly in the United States. This means your information is processed outside Québec and Canada. We choose providers that protect it with contractual and technical safeguards appropriate to its sensitivity.
10. Children
GymPlan is for people aged 16 and over. We do not knowingly collect information from younger children. If you believe a child has an account, contact us and we will delete it.
11. Changes
If we change this policy in a meaningful way, we will tell you in the app before the change applies. The date at the top shows when it last changed.
12. Contact
9434-2334 Quebec Inc., Québec, Canada
privacy@getgymplan.com
The person in charge of the protection of personal information at 9434-2334 Quebec Inc. can be reached at the same address.