Privacy Policy

Last updated: August 21, 2026

GymSets ("we", "our", "the app") is a fitness tracking application developed by GainCircle Labs. This policy describes how we collect, use, and protect your information.

1. Information We Collect

Account Information

When you sign in with Google or Apple, we receive your name, email address, and profile photo URL. This is used to identify your account and enable cloud sync.

Workout Data

The app stores your training sessions, exercises, sets, reps, weights, body weight entries, and progress photos. This data is stored locally on your device using SwiftData and optionally synced to Firebase Firestore when you sign in.

Device Information

When you submit feedback or use the app, we may collect device model, iOS version, app version, and locale for diagnostic purposes.

Analytics

We use Firebase Analytics to collect anonymized usage data such as session frequency and feature usage. This data is not linked to your personal identity.

Product Analytics (Ours)

We also collect our own usage statistics, so we can see where people drop off during onboarding and which screens actually get used. They are tied to a random installation identifier that is generated on your device: it does not come from Apple or Google, and it disappears when you delete the app. While you are not signed in, that identifier is all we have and it is not connected to any account. If you do sign in, we link it to your account, so that we can tell the person who installed the app and the person who created the account are the same one. Turning analytics off in Settings deletes that link too.

Through this we do not collect your IP address, your User-Agent, your email address, or anything about the content of your workouts. The data goes to our own server (Cloudflare). We do not sell it and we do not share it with anyone.

You can turn it off at any time in Settings. When you turn it off, the identifier is discarded and the statistics already sent from your device are deleted. Raw events are kept for a maximum of 35 days; after that only aggregated totals remain, and those cannot be traced back to any installation.

Advertising

For free users, we display ads via Google AdMob. AdMob may collect device identifiers and usage data to serve personalized or non-personalized ads, according to your device settings. You can opt out of personalized advertising in your device's privacy settings.

Product Improvement

We may use in-app experiments to test different features and improve the user experience. Participation is automatic and anonymous — no personal data is collected or shared as part of these tests.

2. How We Use Your Information

• To provide and improve the app's functionality
• To sync your data across devices when signed in
• To respond to feedback and bug reports
• To see where people get stuck in the app, using anonymous usage statistics
• To display relevant advertisements (free tier)
• To process subscription purchases

3. Data Storage and Security

Your data is stored locally on your device and, if you choose to sign in, on Google Firebase servers (Firestore). Firebase infrastructure is hosted in secure data centers with encryption at rest and in transit. We do not sell your personal data to third parties.

4. Third-Party Services

The app integrates with the following third-party services, each with their own privacy policies:

• Firebase (Google) - Authentication, database, analytics — Privacy
• Google AdMob - Advertising for free users — Privacy
• Google Sign-In - Account authentication
• Apple Sign-In - Account authentication — Privacy
• StoreKit (Apple) - Subscription processing
• Brevo (Sendinblue SAS) - Email delivery — Privacy
• Cloudflare - Email routing, storage, product analytics and website hosting — Privacy

5. Data Retention

Your data is retained as long as your account is active. You can delete your account and all associated cloud data from Settings > Account > Delete account. You can also delete specific data (workouts, photos, weight logs) individually from Settings. Some purchase-related data may be retained on-device to restore your purchases.

Raw product analytics events are deleted after 35 days, or immediately if you turn analytics off in Settings. Only aggregated totals are kept beyond that.

6. Children's Privacy

GymSets is not intended for children under 13. We do not knowingly collect personal information from children under 13.

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR), including:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your personal data
• Data portability — Request your data in a structured, machine-readable format
• Objection — Object to processing of your personal data

You can exercise these rights by deleting your data through the app's Settings, or by emailing privacy@appgymsets.com. We process your data based on your consent (account creation) and legitimate interest (app functionality). We will respond to any request within 30 days.

8. Marketing Communications

If you opt in to email communications from GymSets — either by confirming your subscription on our pre-launch waitlist (double opt-in via confirmation email) or by enabling the marketing toggle inside the app — we may send you product updates, launch announcements, and educational content related to training. We send a maximum of 2 marketing emails per week.

Email delivery is operated by Brevo (Sendinblue SAS, 106 Boulevard Haussmann, 75008 Paris, France). Subscriber data (email address, optional first name, language preference, consent timestamp, and engagement events such as opens or clicks) is stored in Cloudflare D1 (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), separate from your in-app workout data.

You can unsubscribe at any time via the link included in every marketing email, by toggling the preference inside the app's Settings, or by emailing us at support@appgymsets.com. Operational emails (purchase receipts, account changes, payment failures) are not affected by marketing preferences and continue to be sent when relevant.

9. Email You Send Us

When you write to any @appgymsets.com address, we store your message so we can keep track of it and answer it: your name and email address, the subject, the text of the message, and any attachments. It is stored in Cloudflare D1, the same place and provider named in section 8. Only the people responsible for that particular address can read it.

Attachments are deleted 30 days after the conversation is closed. The conversation itself is deleted after three years, or earlier if you ask us to.

Data protection requests go to privacy@appgymsets.com, which is read only by GainCircle Labs. Our marketing team has no access to it.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

11. Contact Us

For questions about the app or your account: support@appgymsets.com
For questions about this privacy policy, or to exercise any of the rights in section 7: privacy@appgymsets.com