What data we collect
Last Updated: October 12, 2026
Every piece of data Gym Journal collects, in plain language. The three groups below match the categories Apple uses on the App Store, so you can hold this page and our store listing side by side and check that they agree. For the legal detail, read the Privacy Policy.
Data used to track you
Tracking means linking your data to third-party data for advertising, or sharing it with data brokers.
None. Gym Journal has no ads, no ad SDKs, no advertising identifiers, and no data brokers.
Data linked to you
Tied to your account so the app can sync your training across devices and show you your own history.
| Category | What exactly | Why we need it | Optional? |
|---|---|---|---|
| Contact Info | Email address, plus the name (and, with Google, profile picture) your provider shares if you use Sign in with Apple or Google | Creating your account, signing you in, password resets, support replies, and comeback emails if you switch them on. | Required for an account. Solo Mode works with no account at all. |
| Health & Fitness | Workouts (exercises, sets, reps, weight, RPE, duration, notes), bodyweight history, body measurements | The core purpose of the app — logging training and showing your progress over time. | Body measurements are optional. Workout logs are the product. |
| User Content | Progress photos, community posts, post photos and videos, comments, reactions, reports | Storing your progress photos and powering the community feed you choose to use. | Entirely optional. Solo Mode users post nothing. |
| Apple Health (iOS) | Weight, height, body-fat percentage, dietary energy; workouts written back to Apple Health | Keeping your profile and bodyweight history current without re-typing, and putting your Gym Journal workouts in Apple Health. | Off until you turn it on and grant iOS permission. Revoke any time in iOS Settings → Privacy & Security → Health. We never read medical records. |
| Identifiers | User ID (account UUID) | Tying your data to your account and syncing it across your devices. | Created with your account. Not an advertising identifier. |
| Purchases | Subscription status and purchase history, tied to your account ID | Verifying that Pro is active on your account, on every device. | Only if you buy Pro. We never see your card details. |
| Profile | Display name, avatar, gender, height, weight, experience level, app preferences | Personalizing suggestions, units, and how you appear to friends. | All optional except a display name. |
| Usage Data | Screens and features you use, a summary of each finished workout (routine name, duration, sets, total volume, PRs), platform, language, plan, sign-up date, email domain | Understanding which features get used so we know what to improve. | Tied to your account ID, never your name or full email address. Never includes individual sets, body data or photos. |
| Diagnostics | Crash reports, error stack traces, device model, OS version, app version | Finding and fixing the bugs that break the app for real people. | Tied to your account ID so we can match a crash to a support request. Never includes workout data, photos, or personal content. |
Data not linked to you
Collected to deliver the service and block abuse. Not tied to your identity and never joined back to your account.
| Category | What exactly | Why we need it | Optional? |
|---|---|---|---|
| Technical Logs | IP address, request timestamp, app version | Delivering requests and blocking abuse. Logged transiently by our host. | Standard for any internet service; not used to profile you. |
What we never collect
These are not switched off by default — the app has no code that reads them at all.
- Precise or coarse location
- Microphone or camera roll access beyond photos you pick
- Google Fit data
- Apple Health categories other than those listed above
- Medical records or clinical health data
- Advertising identifiers (IDFA)
- Browsing history outside the app
- Search history outside the app
- Payment card numbers
- Biometric identifiers (face or fingerprint templates)
- Race, ethnicity, religion, sexual orientation, or political views
Read on your phone, never collected: contacts. If you open Connect with Contacts and allow access, the app reads your contacts on the device so you can text someone an invite. The list is never uploaded, hashed or matched against other users, and we never see it.
AI features and your data
Your data is never used to train AI models. Not ours, not Google's, not Anthropic's. We use the Gemini API, and the Claude API as a backup for AI Coach, under terms that exclude your prompts and photos from model training.
AI Coach has a backup provider. If Google's service is unavailable when you ask for a routine, the same request is sent to Anthropic's Claude API instead, so you still get one. Body photos are never sent to Anthropic.
AI Body Projection photos have zero server-side retention. Your photo is sent to Google LLC's Gemini API, processed transiently in memory to generate the visualization, and discarded. There is zero server-side retention — it is never written to our database, our file storage, or our logs. The generated image comes back to your phone and lives only locally on your device (deleted with the app). Under its API terms, Google may log the request for a limited period solely to detect abuse of its service.
No human reads your AI inputs. We keep a usage counter (your user ID and the calendar month) purely to enforce rate limits. Nobody at Gym Journal reviews your prompts or photos.
AI features are optional, and for adults only (18+). Never open AI Coach or AI Body Projection and none of this applies to you. Every other part of the app works without them.
How long we keep it
- Workouts, routines, body data
- Kept while your account exists. Erased on account deletion.
- Progress photos & community content
- Kept until you delete the item or your account.
- AI Body Projection photo & results
- Zero retention on our servers. Processed transiently in memory and discarded; results live only on your device and are deleted with the app. Google may log the request for a limited period solely to detect abuse.
- AI Coach prompts
- Not retained by us beyond returning your routine. Only a usage counter is kept. Google, or Anthropic when the backup is used, may keep the request for a limited period as described above.
- Backups
- Roll off within 30 days of deletion.
- Safety records (blocks & reports)
- May be retained in anonymized form to keep the community safe.
- Analytics, crash & subscription records
- Held by PostHog, Sentry and RevenueCat under your account ID, not your name. Not erased automatically when you delete your account; they expire on each provider’s schedule. Email us and we will delete them sooner.
Who else processes your data
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, authentication, file storage | European Union (Frankfurt, eu-central-1) |
| Google LLC (Gemini API) | AI Coach generation and AI Body Projection processing | May process outside EEA (United States; SCCs & Google DPA). Google may log requests for a limited period solely to detect abuse |
| Anthropic (Claude API) | Backup for AI Coach generation when Google’s service is unavailable. Never receives AI Body Projection photos | May process outside EEA (United States; SCCs & Anthropic DPA). Anthropic deletes requests within 30 days unless its usage policy or the law requires longer |
| RevenueCat | Subscription status, tied to your account ID | United States (SCCs in place) |
| Apple / Google | In-app purchases, Sign in with Apple, Sign in with Google | Per their own privacy policies |
| PostHog | Product analytics, tied to your account ID | European Union |
| Sentry | Crash and error monitoring | European Union |
| Resend | Email delivery: the comeback emails you switch on, and feedback you send from the app | United States (SCCs in place) |
| Cloudflare | Bot check (Turnstile) on sign-up, sign-in and password reset | Global network, including the United States (SCCs in place) |
| Vercel | Website hosting, plus cookieless page-view and page-speed analytics for gymjournal-app.com (not the app) | United States (SCCs in place) |
Want all of it gone?
Settings → Account & Data → Delete Account erases your workouts, body data, photos, posts, profile, and login record. It is permanent, it takes one tap, and we do not ask you to email anyone to do it. Questions: contact@gymjournal-app.com.