Privacy Policy

Overview

GYMPRESS ("we", "our", "the app") is a workout progress tracker. This policy explains what information the app processes, where it is stored, and your choices.

Most data stays on your device. When you use AI Coach, parts of your conversation are sent to our server (if configured) and then to Groq, a third-party AI provider, to generate responses.

AI Coach is an artificial intelligence feature. When using AI Coach, you are interacting with an AI system and not a human coach.

Data controller

For questions about this policy or your data, contact us at gympress.support@gmail.com.

If you distribute this app under your own developer account, you may independently act as the data controller for data processing activities associated with your distribution of the app and should ensure your contact details are accurately reflected.

Legal Bases for Processing

We process personal data on one or more of the following legal bases:

• Performance of a contract, to provide the app's functionality and workout tracking features.
• Consent, where you choose to connect Apple Health or Health Connect, allow Physical activity (Android step sensor), or where consent is otherwise required by law.
• Compliance with legal obligations, where applicable.

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing undertaken before withdrawal.

Data stored on your device

The app stores the following locally in your browser or app storage (localStorage):

• Profile names and per-profile workout plans
• Workout session logs (sets, reps, weight, duration, dates)
• Body weight entries and goals
• Rest timer preference
• AI Coach chat memory for the current day (per profile)
• App preferences such as health disclaimer acknowledgment and Health sync toggles
• On Android, a local step-sensor baseline used only to calculate today’s steps when Health Connect is empty

This information is generally stored locally on your device and is not transmitted to our servers unless specifically required to provide a feature that you choose to use, such as AI Coach.

Apple Health & Health Connect (optional)

On the native Android and iOS apps, you may optionally connect Apple Health (iOS) or Health Connect (Android).

If you enable Health sync, GYMPRESS reads selected fitness data from the system health store and displays it on the Health page. That can include steps, distance, active and total calories, floors climbed, heart rate, resting heart rate, heart-rate variability, sleep, body weight, height, body fat, VO₂ max, water intake, exercise minutes and stand hours (iOS), and workouts already stored by other apps or wearables. On Android, if Health Connect has no step data, GYMPRESS may also read today’s steps from this phone’s motion sensor. That count stays on the device.

GYMPRESS does not write workouts or exercise minutes back to Apple Health or Health Connect.

Wearables (for example Apple Watch or Wear OS) supply data only if they already sync into Apple Health or Health Connect. GYMPRESS does not talk to watches directly in this version.

You can turn sync off in Settings. To fully revoke Health Connect or Apple Health access, use those system permission screens. To revoke the Android step sensor, turn off Physical activity for GYMPRESS in the phone’s app permissions.

AI Coach & third parties

When you send a message to AI Coach, the app may transmit your message text together with selected workout information necessary to generate a relevant response, such as your profile name (if used), workout plans, exercises, sets, repetitions, weights, workout dates, recent workout history, and similar training context to our backend API over HTTPS.

Our server forwards that content to Groq (groq.com) to generate a reply. Groq processes data according to their terms and privacy policy. We do not sell your data. Groq processes this information on our behalf in accordance with applicable contractual and legal obligations, including its own privacy commitments where applicable.

Please do not submit special category personal data, including medical conditions, diagnoses, genetic information, biometric information, or other sensitive personal information unless strictly necessary.

AI Coach conversation memory for the current day is stored locally on your device. Messages and training context are transmitted to our backend and to Groq only to generate a reply for that request; our backend does not keep a long-lived copy of the conversation after the response is returned (aside from short-lived operational and security logs described under Retention).

Users may delete AI Coach conversations at any time using the Clear Chat feature, after which the stored conversation memory will be removed from the device. Conversation memory is also cleared automatically when the calendar day changes.

AI Coach is intended only to provide general fitness and wellness information. It is not used to make decisions that produce legal or similarly significant effects on individuals.

AI transparency (EU AI Act)

AI Coach is an AI system that interacts directly with users. Before you use it, the app informs you that you are interacting with artificial intelligence and not a human coach.

AI Coach provides general fitness and wellness suggestions only. It is not used for medical diagnosis or treatment, and it is not used to make decisions that produce legal or similarly significant effects concerning you.

Service Providers

We may engage third-party service providers to support the operation, security, and performance of the app, including:

• Groq, for AI processing services
• Cloud hosting providers used to operate backend services
• Content delivery providers
• Analytics and diagnostic providers, used to monitor app stability, troubleshoot crashes, and improve overall performance (collecting only basic, technical diagnostic logs).

These providers process information only as necessary to provide their services and subject to their respective contractual and legal obligations.

International Data Transfers

Some service providers used by the app may process information outside the European Economic Area ("EEA"), including in jurisdictions that may not provide the same level of data protection as your country.

Where personal data is transferred internationally, we will rely on appropriate safeguards as required by applicable law, including adequacy decisions adopted by the European Commission, the EU-U.S. Data Privacy Framework where applicable, Standard Contractual Clauses, the UK International Data Transfer Addendum, or other legally recognised transfer mechanisms.

What we do not collect by default

The app does not require an account. By default we do not collect:

• Your name, email, or phone number (unless you contact support)
• Precise location or GPS (not used in the current version)
• Apple Health, Health Connect, or phone step-sensor data unless you choose to enable Health sync.
• Advertising identifiers or cross-app tracking

Third-party content & services

The app loads some resources from external providers when you are online. Those services may receive your IP address and basic request metadata when content is fetched:

• Bundled fonts (Oswald, Inter) — typography works offline in the mobile app
• jsDelivr CDN (cdn.jsdelivr.net) — exercise demonstration GIFs when online
• YouTube (youtube.com) — optional embedded exercise videos when online
• Groq (groq.com) — AI Coach replies when you use that feature online
• Your configured GYMPRESS coach backend (HTTPS) — forwards AI Coach requests when online
• Apple Health / Health Connect (on device) — only when you enable Health sync; processed by Apple or Google on your device according to their policies

Device permissions

Android: INTERNET — required for AI Coach when a backend API URL is configured.

Android: Health Connect read permissions for the fitness types listed under Apple Health & Health Connect — only requested when you enable Health sync.

Android: ACTIVITY_RECOGNITION (Physical activity) — only requested when you enable Health sync, so the app can count steps from this phone if Health Connect is empty.

iOS: HealthKit read access for those same fitness types — only requested when you enable Health sync.

The app does not currently request camera, microphone, contacts, or location permissions.

Security

We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

• Encryption in Transit: Data transmitted between the app, our backend services, and authorized third-party service providers (such as Groq) is strictly encrypted using industry-standard HTTPS protocols.
• Data Minimization: Most of your workout data, profile details, and preferences remain stored locally on your device, minimizing exposure risks.

While we strive to use commercially acceptable means to protect your information, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Retention

On-device data remains until you delete it using in-app tools (profile delete, clear all data) or uninstall the app.

On-device AI Coach conversation memory is retained for up to one calendar day to support conversational continuity. Users may delete this information at any time using the Clear Chat feature. Conversation memory is automatically removed when the calendar day changes.

Backend service logs are retained only for as long as reasonably necessary for security, fraud prevention, troubleshooting and operational purposes and are generally deleted within 30 days, unless a longer retention period is required by law.

Your rights (GDPR / UK GDPR / similar laws)

Depending on your location and applicable law, you may have the right to:

• Access your personal data
• Correct inaccurate personal data
• Delete personal data
• Restrict processing
• Object to processing
• Receive a copy of your data in a portable format
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with your local supervisory authority

You may exercise available rights by contacting us using the contact details provided above.

Children

GYMPRESS is not intended for children.

Where local law requires parental or guardian consent for the processing of a minor's personal data, individuals who have not reached the applicable age of consent should not use the app without such consent.

We do not knowingly collect personal data from children in violation of applicable law.

Changes

We may update this Privacy Policy from time to time to reflect legal, technical, or operational developments.

Where required by law, we will provide notice of material changes through the app or by other appropriate means.

The "Last Updated" date at the top of this policy indicates when the most recent changes were made.

Health Disclaimer

GYMPRESS and AI Coach are intended solely for general fitness and wellness purposes and are not medical devices. Information provided through the app does not constitute medical advice, diagnosis, treatment, or healthcare services. Users should consult qualified healthcare professionals before making health-related decisions. For information regarding exercise risks and fitness-related safety considerations, please refer to the Health & Safety Disclaimer.