Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, update your profile, book a session, log your progress, or communicate with us. This includes:

• Name, email address, and phone number;
• Profile information including fitness goals, experience level, and preferences;
• Location data — with your permission, your device's precise location, used only to show nearby trainers and gyms on the map and sort search results by distance. You can deny or revoke this at any time in your device settings; the app still works without it, just without distance-based sorting;
• Photos — profile pictures and progress photos you choose to upload, stored securely and visible only to you (and, if you use the AI Coach, sent to our AI provider for analysis as described below);
• Health and fitness data — workouts, exercises, sets/reps/weight, body weight, height, and any notes you log. This is data you choose to enter;
• Apple Health data (iPhone app) — only if you connect Apple Health and allow each type on Apple's permission screen: daily steps, sleep, active energy, resting heart rate, body weight, walking and running distance, and flights climbed. We use it to fill in your daily log and recovery score. It is stored in your account and is visible to you and, if you choose to share your progress with a trainer, to that trainer. It is never sold, used for advertising, or sent to the AI providers described in Section 4. You can disconnect at any time in Profile → Settings → Apple Health or in the iOS Settings app. We do not access Google Fit or other wearable devices;
• Messages — communications with trainers and with our AI Coach, including any text or photos you send it;
• Payment information (processed securely by our third-party payment processor — see Section 3);

2. How We Use Your Information

We use the information we collect to:

• Facilitate bookings and communication between clients and trainers;
• Show nearby trainers and gyms on the map, sorted by your distance to them;
• Power the AI Coach — with your permission, your messages, profile, and logged progress (including a recent progress photo, if you have one) are sent to our AI providers to generate a personalized reply. See Section 4 for exactly what is sent and to whom;
• Personalize trainer recommendations;
• Process subscription and credit purchases and manage your billing status;
• Send transaction notifications and administrative messages;
• Improve and optimize our platform services;
• Comply with legal obligations.

3. Information Sharing & Third-Party Services

We do not sell your personal information. We share it only in these circumstances:

• With trainers or clients to facilitate bookings you have initiated;
• Supabase — our database, authentication, and file storage provider, which hosts your account data, messages, photos, and logged progress;
• Stripe — our payment processor, which handles all subscription and credit-card payment details. We never see or store your full card number;
• Google (Gemini) and OpenAI — the AI providers behind the AI Coach. They receive the data listed in Section 4, only after you give permission in the app, and only to produce your reply;
• Google Sign-In — if you choose to sign in with Google, we receive your name, email, and profile picture from Google to create your account;
• To comply with a legal request or prevent harm;
• With your explicit consent.

4. AI Coach, Health Information & Your Permission

The AI Coach is powered by third-party AI services. When you use it, we send them the following so they can write a reply for you:

• The messages you type and any photos you attach;
• Profile details you entered: your name, age, biological sex, goals, experience level, preferred training style, workout days per week, activity level, equipment access, dietary preferences and notes, injuries or limitations, and target weight;
• Your recent logged weight, height, body-fat percentage and notes, and your recent workouts;
• Your most recent progress photo, when your question is about your physique or progress.

Who receives it: Google (Gemini API) and OpenAI (API). We send this data to no other AI service. We only use providers whose terms commit them to protect this data to a standard equal to what this policy describes; they use it to provide your reply, and we do not sell it or allow it to be used for advertising. Apple Health data is never sent to them.

Your permission: the app asks for your permission the first time you use the AI Coach, and again if this list or the providers change. You can withdraw it at any time in Profile → Settings → AI Coach data sharing, after which nothing further is sent until you agree again. Conversations are saved in your account so you can come back to them, and are removed when you delete your account.

Health information: the AI Coach gives general fitness and nutrition information, not medical advice, diagnosis, or treatment, and it can make mistakes. Its replies link to public sources such as the CDC's Physical Activity Guidelines, the Dietary Guidelines for Americans, the American College of Sports Medicine, and the World Health Organization. Talk to a doctor or other qualified professional before changing your training or diet, especially if you have a medical condition, an injury, or are pregnant.

5. Data Security

We take reasonable measures to protect your personal information from loss, theft, misuse, and unauthorized access, including encryption in transit and row-level access controls on our database. However, no internet transmission is ever 100% secure or error-free.

6. Your Choices & Account Deletion

You may update or correct your account information at any time in the app or website under Profile → Settings. You can revoke location or photo-library permissions at any time in your device settings.

You can permanently delete your account and associated personal data at any time, directly in the app, under Profile → Settings → Delete Account. This removes your profile, logged progress, photos, and messages from our systems. You can also request this by emailing us (see Contact section below).

7. Children's Privacy

GymovaFlow is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

8. Changes to this Policy

We may update this Privacy Policy from time to time. If we make changes, we will notify you by revising the date at the top of the policy and, in some cases, providing additional notice.