Privacy Policy

Last updated: November 25, 2025

1. Introduction

Welcome to GymWin ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

2. Information We Collect

2.1 Information You Provide

  • Account information (email address, username)
  • Workout preferences and muscle group selections
  • Custom workout plans and modifications
  • Feedback and support communications

2.2 Automatically Collected Information

  • Workout session data (duration, intervals completed, exercises performed)
  • App usage analytics (features used, session frequency, completion rates)
  • Device information (device type, operating system, app version)
  • Performance data (app crashes, errors, loading times)

2.3 AI-Generated Content

We process your muscle group selections and workout preferences through AI services to generate personalized workout plans and micro-rewards (tips, jokes, philosophy). This data is processed securely and not stored permanently by our AI providers.

3. How We Use Your Information

We use the collected information for the following purposes:

  • Provide and maintain the GymWin app and services
  • Generate personalized AI-powered workout plans based on your muscle selections
  • Track your workout progress, streaks, and achievements
  • Deliver micro-rewards (tips, jokes, philosophy) during workout intervals
  • Process subscription payments and manage your premium account
  • Send important updates about the app, features, and your account
  • Analyze app usage to improve features and user experience
  • Detect and prevent technical issues, fraud, and abuse
  • Respond to your support requests and communications

4. Data Storage and Security

We use Firebase (Google Cloud Platform) for secure data storage and authentication. Your data is encrypted in transit and at rest. We implement industry-standard security measures including:

  • SSL/TLS encryption for all data transmission
  • Secure authentication and authorization protocols
  • Regular security audits and updates
  • Access controls and monitoring
  • Server-side receipt verification for payment security

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

5.1 Service Providers

  • Firebase/Google Cloud Platform (hosting, authentication, database)
  • OpenAI/Anthropic (AI workout planning and content generation)
  • Apple App Store and Google Play (payment processing)
  • Firebase Analytics and Crashlytics (analytics and crash reporting)

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

6. Your Privacy Rights

You have the following rights regarding your personal information:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Export: Download your workout history and data
  • Opt-out: Disable analytics or marketing communications
  • Withdraw consent: Revoke permissions at any time

To exercise these rights, contact us at privacy@gymwin.app

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Workout history and progress data are retained to maintain your training records. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, financial records).

8. Children's Privacy

GymWin is not intended for users under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete it.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws, including GDPR for European users.

10. Cookies and Tracking

The GymWin mobile app uses local storage and analytics tools to improve your experience. We use Firebase Analytics to understand app usage patterns. You can disable analytics in the app settings, though this may limit some functionality.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy in the app and updating the "Last updated" date. Your continued use of GymWin after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: