Privacy

• Your account: email address and password (stored scrambled, never readable).
• Your profile: your name, and what you choose to add: date of birth, height, weight, gender, goal, experience, training days and time zone.
• Your training: plans, templates, workouts, sets, notes, body weight and custom exercises.
• If you use them: AI plans and what you entered for them, Coach questions and replies, reminder settings and the devices you turned notifications on for.
• If you're a trainer: your name, gym, city, WhatsApp number and invite links.
• If you run a gym: its name, area, city, phone number, invite links, and who its members, trainers and admins are.
• Fees, if your gym or trainer records them: the amount, how often it's due, and each payment's date, amount and method (cash, UPI and so on). Gym Journal doesn't take payments.

• You. We don't look at your data unless you ask us to help with a problem or the law requires it.
• Your trainer, only after you accept their invite: your plans (and they can plan for you), logged workouts including notes, body weight, and your name, goal, experience and training days. Not your email, date of birth, height, gender, Coach, AI plans or meals. Remove them in Profile and they lose access at once; plans they made stay with you.
• Your gym, only after you join it: your name, how many workouts you log each week, when you last trained, and whether you have a trainer. Not your plans, sets, notes, body weight, email or other profile details. Leave it in Profile and it loses access at once.
• A gym you train at sees your name, how many of its members you train and how many plans you've made them this week. Not your other clients or your own workouts.
• Fees: the gym or trainer who records your fee, and you, in Profile. Nobody else. They keep their record of what you paid if you leave.
• A trainer's details (name, gym, city, WhatsApp) are shown to people who open their invite link and to their clients.

We don't sell your data or show ads.

• Supabase stores the app's data, in Singapore, and handles sign-in.
• Vercel runs the website.
• Resend sends sign-in and confirmation emails.
• Google Gemini writes AI plans and Coach answers, only when you ask for one, and Coach only after you allow it in Profile. Each screen lists what's sent; your name and email never are. Google doesn't use it to improve its products.
• Your browser's push service (Google, Apple or Mozilla) delivers notifications; what we send it is encrypted.

Only what the app needs: keeping you signed in, remembering you've finished setting up, and, for a day, an invite you opened (or that you chose “I'm a trainer”) before signing up. No tracking or advertising cookies. Your browser also keeps a few settings and unsaved workouts on your device.

• Change or remove your profile details in Profile at any time; most are optional.
• Turn notifications or Coach off, or remove your trainer, in Profile.
• Delete your account in Profile: your account and everything in it are deleted for good. A copy can stay in our database host's backups for a short while, until they're replaced.
• For a copy of your data, a correction, or a complaint, email privacy@gymjourno.fit. We'll reply within 30 days. If you're not satisfied, you can complain to the Data Protection Board of India.

Gym Journal is for people 18 or older.

If this changes in a way that matters, we'll say so in the app first.