Privacy Policy

Last updated: October 28, 2026

This Privacy Policy explains what information the GymGrind app (the "App"), run by [Your Legal Name] ("we", "us"), collects, how we use it, who we share it with, and the choices you have.

1. Information We Collect

Information you give us

• Account: when you sign in with Google or Apple, we receive your account ID and the email address and name that provider shares (Apple may give a private relay address). You also choose a username.
• Profile: optional profile picture and bio, and the color theme you choose.
• Schedule: the gym days, usual time, and weekly goal you set.
• Check-ins: the date and time of each check-in, the photo you take, and an optional short note (a Premium feature).
• Messages: short messages friends send you when you miss a day, and ones you send.
• Friends and groups: who you're connected with, friend requests, groups you create or join, and group challenge activity.
• Blocks and reports: the people you block, and any report you send (who you reported, the reason, any details you add, and, for a reported photo, a copy of that photo so it can be reviewed).
• Vacation mode and streak freezes: the days you mark as vacation (Premium) or cover with a streak freeze.
• Reviews: whether friends accepted or rejected a check-in photo. We store which friends reviewed a photo so nobody can vote twice. Reviewers are not shown to the person being reviewed.

Information collected automatically

• Streak summary: a small record of your check-in dates, freeze and vacation days, rejected days, and schedule (no photos), used to work out your streak and level, and which your friends can read.
• Device and notification data: a push notification token for your device, and your time zone offset, so notifications and reminders arrive correctly.
• Subscription information: whether you have Premium and when it ends. When you buy, we send your purchase token to Google Play to confirm it. We never see your payment card details.
• Advertising data (free accounts): our ad partner Google AdMob may collect device information, such as your advertising ID, IP address, and ad interactions, to show and measure ads. See section 4.
• Technical data: basic logs and diagnostics from our servers and Firebase.

We do not collect your precise location. We do not access your contacts. We use your camera only when you check in, and your photos only when you choose to add a profile picture.

2. How We Use Your Information

• To run the App: sign you in, show your streak, level, schedule, and history, and share your check-ins with your friends.
• To notify you and your friends: check-in alerts, late check-in and missed-day alerts, messages, review results, and your own gym reminders (which are set on your phone).
• To confirm Premium purchases and keep subscription status accurate.
• To show ads to free accounts, and to keep the App secure, review reports, prevent abuse, and fix problems.
• To answer your support emails and meet legal obligations.

We do not sell your personal information, and we do not use your check-in photos to train artificial intelligence or for advertising.

3. Check-In Photos and How Long We Keep Things

• Photos: a check-in photo is stored with the check-in and automatically deleted about 12 hours after you take it. Our cleanup runs hourly, so a photo can remain for up to about an hour after the 12 hours. Deleted photos can't be recovered. Friends can see your photo only while it exists.
• Check-in records: that you checked in, and when, along with any note, are kept so your streak, level, and history stay accurate, until you delete your account.
• Messages and reviews: kept for a short time to run those features, and deleted with your account.
• Blocks: kept until you unblock the person or delete your account.
• Reports: kept for up to 12 months to deal with repeat problems and keep people safe, even if the reporter or the reported person deletes their account. Only we can see them.
• Account data: kept until you delete your account.
• If you delete your account, we delete your profile, check-ins, schedule, streak summary, friend connections, messages, group membership, and subscription record. Some data held by Google, Apple, and our service providers, or kept briefly in backups, may take longer to disappear. Purchase records held by Google Play or Apple stay under their policies.

4. Who We Share Information With

• Your friends: they can see your username, picture, bio, check-in photo and note while it exists, whether you checked in, your streak and level, your scheduled gym days, Vacation mode days, and when you are late or miss a day. People in a group you join can see your check-in activity in that group.
• Other users: your username, and your profile theme, can be found by other signed-in users so they can send you a friend request. You can decline.
• Service providers who help us run the App:
  • Google Firebase (sign-in, database, cloud functions, push notifications) and Google Cloud, in the United States and possibly other countries.
  • Google Play and the Apple App Store, for purchases and subscriptions.
  • Google AdMob, to show ads to free accounts. Premium accounts don't see ads. These providers process data under their own terms and privacy policies.
• Reports are seen only by us. We don't tell the person you reported that it was you.
• Legal reasons: we may share information if required by law or to protect people's safety, our rights, or the App's security.
• If our business changes hands, information may be transferred to the new owner, who must honor this policy.

We do not sell your personal information or share it with data brokers.

5. Advertising Choices

Free accounts see ads. Where the law requires it (such as the EU, UK, and EEA), we ask for your consent before showing ads, and you can change your choice later in Settings > Ad privacy choices. You can also reset your advertising ID or opt out of personalized ads in your phone's settings (Google: Settings > Privacy > Ads on Android; Apple: Settings > Privacy & Security > Tracking). Premium removes ads.

6. Your Choices and Rights

In the App you can edit your profile, schedule, and settings, remove friends, turn off kinds of notifications, end Vacation mode, and delete your account (Settings > Delete account). Depending on where you live (such as the EU/UK under the GDPR, or California), you may also have the right to access, correct, delete, or get a copy of your information, to object to or limit some uses, and to withdraw consent. Email GymGrindAdmin@proton.me to use these rights; we'll answer within the time the law requires. You can also complain to your local data protection authority. We won't treat you differently for using your privacy rights. Where the GDPR applies, we use your information to provide the App you asked for (contract), for our legitimate interests in keeping it secure and improving it, to comply with the law, and with your consent where needed (such as notifications and ads).

7. Children

GymGrind is not for children under 13 (or the higher age required where you live). We don't knowingly collect information from them. If you think a child has an account, email us and we'll delete it.

8. Security

We use reasonable safeguards, including access rules and encryption in transit provided by Firebase and Google Cloud. No system is completely secure, so we can't promise absolute security. Please keep your Google or Apple account secure.

9. International Transfers

We and our providers process information in the United States and other countries, which may have different privacy laws from where you live. Where required, we rely on approved safeguards for these transfers.

10. Changes to This Policy

We may update this policy. If we make an important change, we'll tell you in the App. The date at the top shows when it was last updated.

11. Contact

Questions or requests about privacy? Email GymGrindAdmin@proton.me.