Privacy Policy
Draft. Counsel has not reviewed this text yet.
GymPower is run by PermuteLab LLC ("we", "us"). This policy explains what we collect, why, who sees it and what you can do. We keep it plain on purpose.
The short version
- We never sell your data. We never use health data or photos for advertising.
- Your progress photos are private, encrypted and deleted with your account.
- Raw heart rate, HRV and sleep stay on your phone. Our servers get daily steps and one readiness score a day.
- You can export your data and delete your account in the app: Profile, Settings.
- You must be 16 or older to use GymPower.
1. What we collect
| Data | What it is | Where it comes from |
|---|---|---|
| Account | Email, name, avatar, language, country | You, and the sign-in service |
| Body and training | Sex, birth year, height, weight, goals, workouts, sets, body measurements | You |
| Health check answers | Heart condition, chest pain, pregnancy (women only), medicine, injuries, and an optional note | You |
| Health data | Steps, heart rate, HRV, sleep from Apple Health, Health Connect, a Fitbit tracker or WHOOP | Your phone or tracker, only if you allow it |
| Progress photos | Photos you choose to add | You |
| Contacts | One-way scrambled (hashed) phone numbers or emails, to find friends | Your phone, only if you allow it |
| Purchases | Whether you have a subscription, its plan and dates. No card data | The App Store, Google Play and RevenueCat |
| Device and usage | Device type, app version, push token, product events, crash reports | The app |
| Referrals and codes | The codes you use and share | You |
2. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Create your account, build and adapt your plan, keep your Power Score, sync your workouts | Contract: we need it to provide the service |
| Health data from your phone or tracker, and the health check answers | Your explicit consent, which you can withdraw at any time |
| Challenges and friends | Contract, and your choices in the app |
| Subscriptions, offers and referral rewards | Contract, and legal obligations for accounts and tax |
| Security, fraud checks, fixing bugs, measuring how the product is used | Our legitimate interest in a safe and working product |
| Emails about your account and the weekly report | Contract; the weekly report can be turned off |
3. What we never do
- We never sell your data and never share it for advertising.
- We never use health data or photos for advertising, and we never give them to data brokers.
- Your progress photos are private and encrypted. We delete them with your account.
- Story photos are processed on your phone. They leave your phone only when you choose to share.
- Leaderboards and challenges show only the metric, your name, your avatar and your level.
4. Your health data
Health data needs your clear permission. The app asks for two separate choices:
- Collect: we read steps, heart rate, HRV and sleep to make your plan and your readiness score.
- Share: we show your steps to the members of a challenge you join.
Saying no never blocks training. Without health data, readiness uses your daily check-in only. You can change either choice any time in Settings. When you turn off collection, we delete the health data stored on our servers.
Raw heart rate, HRV and sleep stay on your phone. Our servers keep your daily steps and one readiness score per day.
The full notice is in Health data and safety.
5. AI features
The AI coach runs on Claude through Amazon Bedrock in the EU: Frankfurt first, and other EU regions of Amazon's EU inference service when Frankfurt is busy. Your requests never leave the EU. When it plans your training or answers you, it receives training numbers, your goals and an internal ID. It does not receive your name, email, photos or raw health values. The training engine, your weights and your Power Score are computed by our own code, not by AI.
Before the first AI use, the app asks for your consent: a plan built around a note or an injury, or a chat with the coach. If you say no, you still get training plans from our library, made without AI. You can change your choice any time in Settings. We record the choice, the text version and the time.
6. Who we share data with
We use service providers to run GymPower. They may use your data only for our service.
| Provider | Why | Where |
|---|---|---|
| Amazon Web Services | Hosting, database, file storage, email (SES), push (SNS), AI (Bedrock) | European Union (see section 7) |
| Clerk | Sign-in | United States |
| RevenueCat | Subscription status | United States |
| PostHog | Product analytics (no health data, no photos) | European Union |
| Sentry | App crash reports | European Union |
| Apple and Google | App stores, sign-in with Apple or Google, Apple Health, Health Connect | Your device and their services |
| Google Health API | Steps, heart rate, HRV and sleep from a Fitbit tracker, if you connect it | |
| WHOOP | Recovery HRV, resting heart rate and sleep, if you connect WHOOP | WHOOP (United States) |
| Payoneer | Payouts to affiliates only | Payoneer |
| Meta, WhatsApp and others | Only when you choose to share a story with them | Their services |
We may also share data when the law requires it, or to protect people and our rights. If we are bought or merged, your data moves to the new owner under this policy.
7. Where your data is stored and transfers
We host in the EU for all members. Frankfurt (AWS eu-central-1) is our main region. AI requests stay in Amazon Bedrock's EU regions. Backup copies are kept in Ireland (AWS eu-west-1). Some providers above are in the United States. For transfers out of the EU, UK or Egypt we rely on the legal tools those laws allow, such as the EU Standard Contractual Clauses.
8. How long we keep data
- While you have an account: we keep your data to run the service.
- When you delete your account: we lock it at once, and we delete every row and file, including photos, within 30 days. We also remove you from sign-in and analytics. We keep one log line that an account was deleted, with no personal data.
- Data exports: the download link works for 7 days, then the file is deleted.
- Purchase records: we keep them without your identity for accounting and tax.
- Backups: encrypted backups roll off within 35 days. We do not restore deleted accounts.
- Tracker values: heart rate, HRV and sleep from a Fitbit tracker or WHOOP pass through our server for your device. They wait there encrypted for up to 7 days and are deleted as soon as your device has them.
- Connected services: the sign-in keys for a Fitbit tracker or WHOOP are kept encrypted until you disconnect, withdraw health data or delete your account. Then we delete them and, for WHOOP, also cancel our access at WHOOP.
9. Your rights
Depending on where you live, you can:
- get a copy of your data (export);
- fix data that is wrong;
- delete your data and your account;
- ask us to limit or stop some uses;
- take your data to another service (our export is JSON and CSV);
- withdraw consent at any time, without affecting what happened before;
- complain to your data protection authority.
In the app: Profile, Settings: Export my data, Delete my account and data, and the consent switches. Export and deletion work without a subscription.
By email: write to hello@thegympower.com. We answer within 30 days.
California (CCPA/CPRA): you can know, delete and correct your data, and opt out of sale or sharing. We do not sell or share your data for advertising. We do not discriminate against you for using these rights.
Washington and other US states with health-data laws: you can withdraw consent and ask us to delete your health data. We do not sell it and we do not share it without your separate consent.
Egypt (PDPL No. 151 of 2020): you can know, access, correct, delete and object. You can complain to the Personal Data Protection Center.
10. Children
GymPower is for people 16 and older. We do not knowingly collect data from anyone younger. If you think a younger person has an account, write to us and we will delete it.
11. Security
We encrypt data in transit and at rest. Health data lives in a separate part of the database with restricted access. Progress photos are encrypted with their own key and are never public. No system is perfectly safe. If a breach affects you, we will tell you and the authorities as the law requires.
12. Changes to this policy
When we change this policy in a way that matters, we publish a new version with a date, and the app asks you to accept it on your next launch. You can see the version and date at the top of this page.
13. Contact
PermuteLab LLC. Email: hello@thegympower.com.