Privacy Policy

What we collect

• Account and sign-in data: When you sign in, we receive account data such as your provider account identifier, name, email address, and, when available, your profile photo. Depending on platform and availability, sign-in may be provided by Google or Apple.
• Profile and fitness data: We store the profile details you enter to personalize your plan, including body metrics, target weight, gender, target and avoided body areas, avoided exercise types, workout time, rest days, experience level, and optional AI notes.
• Workout and progress data: We store generated plans, plan history, completed workout days, exercise-level progress, attendance summaries, and related training history so your progress can sync across sessions and devices.
• Technical and usage data: We store local session and app state on your device or browser and may collect basic usage analytics such as page paths, event names, and timestamps to understand product usage and reliability.
• Optional share media: On iOS and Android, if you choose to use the share-media tools, you may capture or pick a photo or video for a progress post. GymCosmos renders those exports locally on your device and does not upload that media to our backend.

How we use your data

• Authenticate you and keep you signed in on your devices.
• Create, save, restore, and sync workout profiles, plans, and logs.
• Generate personalized plans using the profile and preference data you provide.
• Measure product usage, diagnose reliability issues, and improve the service.
• Respond to support, security, legal, or data-rights requests.

When we share data

• Identity providers: When you choose Google Sign-In or Sign in with Apple, those providers process the sign-in request under their own privacy terms.
• AI plan generation: When you ask GymCosmos to generate a workout plan, the relevant profile and preference fields needed to generate that plan are sent to Google's Gemini API.
• Hosting and analytics providers: GymCosmos uses Cloudflare-hosted services for site delivery, backend APIs, data storage, and, when enabled, analytics tooling such as Cloudflare Web Analytics or Analytics Engine.
• Legal or security disclosures: We may disclose data when reasonably necessary to comply with law, protect users, investigate abuse, or enforce our terms.

What we do not do

• We do not sell personal data.
• We do not use your data for third-party advertising or cross-app tracking.
• GymCosmos does not automatically upload your optional mobile share photos or videos to our backend.

Retention and local storage

• Account, profile, workout, and plan data are retained while your account remains active unless you delete them sooner.
• Local browser or app storage may keep session state, settings, and cached workout data on your device to improve continuity.
• Analytics and operational data are retained only for as long as reasonably needed for product operations, security, and improvement.

Manage your data

• You can review and update your profile information inside GymCosmos.
• You can sign out at any time. Local session data on that device may remain until cleared or overwritten.
• You can delete your profile and associated workout data from the profile/settings screen. A recent sign-in session may be required before deletion is completed.
• If you clear browser or app storage, local-only settings and cached session data on that device may be removed.

You can also use our Privacy Choices page if you want a shorter account-management summary for App Store or support requests.

Contact

For privacy or data requests, contact GymCosmos through our support page.