GymTracker Privacy Policy

Last updated: 4 August 2026

This policy explains what data GymTracker collects, what it is used for, and where it is kept. We wrote it to be read by anyone, not just lawyers — if anything is unclear, get in touch using the address at the bottom of this page.

In one sentence: GymTracker keeps your training and health data on your own device; we never send it to our servers, because we do not have a server — the only copy that leaves your phone is the one you choose to make to your own personal Google Drive account.

1. Who we are

GymTracker is an independently developed training and health app. We are not part of any advertising or data analytics company, and the app has no ad-based business model.

2. What data we collect and why

Local · Google Health Connect

Health and physical activity data

If you turn on Health Connect in Settings, the app reads — only reads, never writes — heart rate, sleep, active calories, steps, distance, weight and body fat percentage that your watch, fitness band or smart scale has already sent to Health Connect. We use this to calculate sleep and recovery scores and to show trends across your workouts. Health Connect is optional and can be turned off at any time in Settings.

The results we calculate from this data (workout summaries and sleep sessions) are stored in the local database on your phone, so we do not have to read them again every time you open the app. Like the rest of your local data, they are included in the Google Drive backup if you enable it — and only in that case do they leave the device. We never send Health Connect data to us or to any third party.

Local

Training data

Exercises, sets, reps, weights, workout plans, body measurements and history — everything you enter manually in the app. It is stored in a local database on your phone.

Processed on device

Photos

The camera is used to (a) set a profile picture and (b) recognise text (OCR) so you can import exercises from a photo. Text recognition runs entirely on your phone (Google ML Kit on-device) — no image is ever sent to us or to any external server.

Optional · Google account

Google Drive backup

If you choose to connect your Google account, you can back up your data to your own account on Google Drive. We only ask for access to the files the app itself creates there (the drive.file permission) — we never see or access the rest of your Drive. This backup is yours alone; we have no access to it.

So that you can be identified on your Google account, the app receives your name and email address (the profile and email permissions). These are used only to show which account is connected in Settings — we do not send them anywhere.

The backup includes almost everything the app stores about you: your profile, workouts and history, body measurements, food and water logs, menstrual cycle records, sleep sessions and workout summaries derived from Health Connect, and your achievement progress. It does not include your app lock PIN (not even encrypted) or your photos — only the path to them on your phone. The file is sent over an encrypted connection (HTTPS) and lives in your Drive account, subject to your Google account's own security settings. You can delete your backups at any time from your Google Drive.

Optional

Spotify connection

If you connect your Spotify account, the app can show and control music playback during a workout (pause, skip, see the current track). We do not collect or store your listening history.

Optional · Sensitive

Menstrual cycle

If you use cycle tracking, the records (dates, symptoms, flow) are stored locally in the same way as the rest of your training data — they never leave the device unless you actively include them in the Drive backup.

Local · Never in plain text

App lock PIN

If you set a PIN to lock the app, we store only an encrypted (hashed) version of it — never the number itself — and it is excluded from backups.

3. What we do NOT do

4. Notifications

Reminders (drinking water, logging weight, rest, workouts) are generated and scheduled entirely on your phone — they do not pass through any external notification server.

5. Your rights and control

6. Children

GymTracker is not specifically directed at children, and we do not knowingly collect data from anyone under 13 years of age.

7. Changes to this policy

If this policy changes in any meaningful way, the "last updated" date at the top of this page will be updated.

8. Contact

For privacy questions or requests relating to your data, write to f.s.a.t96@gmail.com.