GymOptic App | Privacy Policy

1. Data Controller

GymOptic is operated by eHavn in Denmark (EU). eHavn is the data controller for the processing described in this policy.
If you have questions about privacy, data handling, or your rights, contact: [email protected]

2. Data We Process

Local profile and app-choice data: name or display name, 16+ confirmation, preferred rep range, onboarding choices, legal acknowledgements, Explicit Consent choice, and similar app settings stored on your device.
Training and workflow data: workouts, sets, reps, load, timestamps, machine setup details, cardio logs, routines, Hybrid Race stations, Hybrid Race sessions, and related training history.
Account-related data: email address, authentication records, account ID, sync-related identifiers, and supported synced workout or workflow data when you choose to create or link an account.
Pro access data: Pro status, entitlement metadata, administrative beta or complimentary grants, store-purchase status when billing is available, access checks, rate-limit records, related account-security events, and historical redemption records where applicable.
Feedback and support data: feedback type, message, optional reply email, platform, app version, and technical status needed to receive, review, and respond to feedback you choose to send.
Local media and local-only private progress data: custom machine photos, race station photos, optional progress check-in photos, optional bodyweight entries, optional notes, and unfinished draft form data stored on your device.
When you add or replace a normal machine photo, GymOptic processes that image locally on your device with automatic person segmentation and may also process finger-drawn manual blur regions that you add during review.
For Progress Check-In, automatic person segmentation is not used. Each Front, Side, and Back photo has an optional manual Privacy Blur control that is off by default; if you enable it, GymOptic processes only the blur regions you draw and uses the reviewed blurred version for that check-in angle.
Some optional private progress features may involve data that could be sensitive from a privacy perspective, such as progress photos, bodyweight entries, and related training notes. GymOptic only enables these features after a separate Explicit Consent choice.
Device feature data: notification permission status and scheduled local rest-timer alerts, Wear OS companion messages, and optional live heart-rate readings plus local workout pulse summaries if you enable Watch Pulse Summary and grant sensor permission on a compatible watch.
Technical logs: our infrastructure providers may process limited technical logs, such as timestamps, IP address, device or app context, request metadata, or error logs, where needed for security, troubleshooting, abuse prevention, and service reliability.

3. Why We Use The Data

To provide the core app features you request, including onboarding, training logs, cardio logging, Hybrid Race, reports, exports, imports, custom machines, routines, and account-linked sync features.
To generate app features based on your own logged training data, such as Ghost suggestions, progress summaries, volume views, category briefings, session briefings, and other performance-oriented estimates.
To operate server-verified Pro features, including checking entitlement status and returning Pro Ghost recommendations or category briefings when your account has access.
To provide optional private progress and load-insight features on your device when you enable Explicit Consent.
To reduce the chance that bystanders remain identifiable in normal machine photos by applying mandatory on-device automatic Privacy Blur and optional additional manual blur before the selected machine photo is stored.
To receive and handle feedback or support messages you intentionally submit.
To operate account security, prevent abuse, troubleshoot service issues, and maintain the stability of the app and cloud services.

4. Legal Bases

Core app use and account or sync features: performance of the service you request.
Optional private progress and Watch Pulse Summary features: your separate Explicit Consent, including where this is needed for privacy-sensitive progress data such as progress photos, bodyweight entries, related notes, or optional pulse summaries.
Security, abuse prevention, troubleshooting, service reliability, feedback handling, and defending legal claims: legitimate interests.
Legal compliance and dispute handling: legal obligation or legitimate interests where applicable.
Under the GDPR, these may correspond to Article 6 legal bases such as contract or service performance, consent, legitimate interests, or legal obligation. Where optional private progress data is treated as special-category data, GymOptic relies on your separate Explicit Consent under Article 9.

5. Local Storage And Cloud Sync

GymOptic is designed as a local-first app. Without a linked email account, the app stays in local mode.
Cloud sync only applies when you use a linked email account and currently covers supported training and workflow data such as machines, workouts, sets, cardio logs, routines, Hybrid Race sessions, and the preferred rep range setting.
When you use server-side Pro features, relevant account, machine, profile preference, and recent training context may be sent to GymOptic cloud functions so they can verify access and return Ghost recommendations or category briefings.
Machine photos, race station photos, progress check-in photos, optional progress check-in bodyweight and notes, Explicit Consent state, and local drafts stay on your device and are not part of the standard synced workout dataset.
Normal machine-photo Privacy Blur runs on your device. GymOptic does not upload photos to a server for person detection or blur. Automatic detection can miss people, faces, reflections, partial figures, or mask edges, so the review screen lets you add manual blur on top of the automatic result.
The automatic machine-photo privacy pass cannot be disabled or replaced by manual marks. If the required native privacy processing is unavailable or fails, GymOptic blocks that new image from being persisted as the machine photo rather than accepting an unprocessed version.
Automatic Privacy Blur applies to normal machine-photo capture and selection in the supported Add Machine, Edit Machine, and category quick-capture flows. It does not run on Progress Check-In photos. In a new or edited Progress Check-In, you may enable an off-by-default manual Privacy Blur option independently for Front, Side, or Back; after you draw, apply, review, and accept the blur, the reviewed blurred version becomes that angle's local check-in photo.
From a saved progress-photo preview, you may also intentionally create a separate share copy, add manual finger-drawn blur, review it, and save that derivative to your device photo library. This separate share-copy action does not replace the private GymOptic photo.
Local-only private progress check-ins and their photos are not part of the standard cloud export dataset.
When you intentionally create a local device export or full local backup, the export may include private progress check-in data such as bodyweight and notes, and a full local backup may also include local progress photo files when available.
If you delete the app, clear app storage, or lose access to the device without a backup or sync, local data may be permanently lost.

6. Processors, Recipients, And Sharing

We do not sell personal data, share it for cross-context behavioral advertising, or use advertising analytics inside the app.
We currently use Supabase and related infrastructure providers to support authentication, cloud sync, Pro access checks, feedback intake, and server-side app features.
Personal data may be processed by service providers acting on our instructions, such as hosting, authentication, storage, and support infrastructure providers.
Export and sharing features let you intentionally share your own files, such as JSON, CSV, or PDF, through your device sharing options.

7. International Transfers

Depending on the cloud providers, regions, and subprocessors involved, some personal data may be processed outside your country and, in some cases, outside the EU/EEA.
Our current main cloud provider is Supabase, used for authentication, cloud sync, Pro checks, feedback intake, and server-side app features.
Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards where required, such as contractual safeguards, provider data-processing terms, and applicable transfer mechanisms.
If you want more information about the current cloud setup relevant to your account, contact us at [email protected].

8. Retention

Local data remains on your device until you delete it, delete the app, clear app storage, or otherwise remove it from the device.
Local-only private progress data can also be removed separately from the Account screen without deleting the rest of your account or normal training history.
Cloud account data is kept while your account remains active, unless a longer retention period is required for legal, security, or dispute-handling reasons.
If you delete your account in the app, GymOptic will delete or anonymize supported cloud account data and synced workout data, unless limited records need to be kept for legal, security, fraud-prevention, Pro entitlement or payment integrity, historical redemption abuse-prevention, or dispute-handling reasons. These limited records may include pseudonymous identifiers such as hashed email or account identifiers.
Feedback messages are kept for as long as reasonably needed to respond, troubleshoot, and improve the app, and may later be deleted or anonymized.
If we introduce inactivity-based cloud deletion in the future, we intend to describe that policy clearly before relying on it.

9. Your Rights

Subject to applicable law, you may have rights of access, rectification, erasure, restriction, objection, data portability, withdrawal of consent, and other privacy rights that apply where you live.
Inside the app, you can already export local data, export cloud data, import supported files, edit local profile fields, manage Explicit Consent, delete local private progress data, and delete your account and data from the Account screen.
You may also contact us at [email protected] to ask privacy-related questions or exercise rights that are not fully available in-app.
Account deletion can be requested outside the app through GymOptic Account Deletion.

10. Required Vs Optional Data

Some data is required for specific features. For example, a 16+ confirmation and acceptance of the Privacy Policy and Terms are required to use the app, and an email address is required if you want a linked cloud account.
Explicit Consent is optional and is only required for certain private progress, private load-insight, or Watch Pulse Summary features.
Notification permission is optional and is only needed for rest-timer alerts outside the active app screen.
Pro access, feedback submission, cloud sync, and Wear OS companion logging are optional feature paths that require the data needed for those paths to work.
Other profile fields, such as training preferences and linked-account choices, are optional and can be adjusted later.

11. Automated Decision-Making

GymOptic uses formulas and app logic to generate training-related estimates and suggestions from user-entered data, such as Ghost suggestions, training summaries, volume views, and similar product features.
Some Pro outputs may be generated by server-side cloud functions after checking account entitlement.
Normal machine photos use local automated image segmentation to suggest and apply person blur. This is a privacy aid rather than a guarantee: the user is shown the processed image and can add manual blur before accepting it.
These outputs are product features for planning and visualization. They are not solely automated decisions that produce legal effects or similarly significant effects on you.

12. Wear OS Companion

If you use the optional GymOptic Wear OS companion app, it can act as a workout logging remote for the phone app and provide independent watch timers. It may display your active machine, planned set context, simple log controls, and optional live pulse when enabled.
Sets, reps, load, and related workout actions logged from the watch are sent to the GymOptic phone app and become part of your normal workout history.
Watch Pulse Summary is off by default and requires both Explicit Consent in the phone app and heart-rate sensor permission on the watch.
When enabled, the watch may read live heart-rate samples during an active supported workout. Raw samples are not stored, synced, exported, reported, or used for Ghost, calorie estimates, or training calculations.
Only a local workout summary such as average pulse, peak pulse, and measured duration may be sent to and stored on the phone. These summaries stay local and can be deleted with the app's private local data controls.
The Wear OS companion does not access sleep, recovery, GPS, Samsung Health, Health Connect, HealthKit, or other unrelated wearable health data.

13. Children, Safety, And Scope

GymOptic is intended for users aged 16 or older under the product rules of the app.
GymOptic is designed as a training-log and performance-planning app. It is not intended to diagnose health conditions, provide medical treatment, or replace professional medical advice.
Some profile and training data may still be personal and sensitive from a user perspective, which is one reason the app uses a local-first design for key profile fields.

14. Complaints And Contact

If you are located in Denmark, the EU/EEA, or the UK and believe your data rights have been violated, you may contact us first at [email protected].
You may also have the right to lodge a complaint with your local data protection authority. In Denmark, this is the Danish Data Protection Agency, Datatilsynet.