This policy explains what data GymTracker collects, what it is used for, and where it is kept. We wrote it to be read by anyone, not just lawyers — if anything is unclear, get in touch using the address at the bottom of this page.
In one sentence: GymTracker keeps your training and health data on your own device; we never send it to our servers, because we do not have a server — the only copy that leaves your phone is the one you choose to make to your own personal Google Drive account.
GymTracker is an independently developed training and health app. We are not part of any advertising or data analytics company, and the app has no ad-based business model.
If you turn on Health Connect in Settings, the app reads — only reads, never writes — heart rate, sleep, active calories, steps, distance, weight and body fat percentage that your watch, fitness band or smart scale has already sent to Health Connect. We use this to calculate sleep and recovery scores and to show trends across your workouts. Health Connect is optional and can be turned off at any time in Settings.
The results we calculate from this data (workout summaries and sleep sessions) are stored in the local database on your phone, so we do not have to read them again every time you open the app. Like the rest of your local data, they are included in the Google Drive backup if you enable it — and only in that case do they leave the device. We never send Health Connect data to us or to any third party.
Exercises, sets, reps, weights, workout plans, body measurements and history — everything you enter manually in the app. It is stored in a local database on your phone.
The camera is used to (a) set a profile picture and (b) recognise text (OCR) so you can import exercises from a photo. Text recognition runs entirely on your phone (Google ML Kit on-device) — no image is ever sent to us or to any external server.
If you choose to connect your Google account, you can back up your data to
your own account on Google Drive. We only ask for access to the files the app
itself creates there (the drive.file permission) — we never see or access the rest
of your Drive. This backup is yours alone; we have no access to it.
So that you can be identified on your Google account, the app receives your name and
email address (the profile and email permissions). These are
used only to show which account is connected in Settings — we do not send them anywhere.
The backup includes almost everything the app stores about you: your profile, workouts and history, body measurements, food and water logs, menstrual cycle records, sleep sessions and workout summaries derived from Health Connect, and your achievement progress. It does not include your app lock PIN (not even encrypted) or your photos — only the path to them on your phone. The file is sent over an encrypted connection (HTTPS) and lives in your Drive account, subject to your Google account's own security settings. You can delete your backups at any time from your Google Drive.
If you connect your Spotify account, the app can show and control music playback during a workout (pause, skip, see the current track). We do not collect or store your listening history.
If you use cycle tracking, the records (dates, symptoms, flow) are stored locally in the same way as the rest of your training data — they never leave the device unless you actively include them in the Drive backup.
If you set a PIN to lock the app, we store only an encrypted (hashed) version of it — never the number itself — and it is excluded from backups.
Reminders (drinking water, logging weight, rest, workouts) are generated and scheduled entirely on your phone — they do not pass through any external notification server.
GymTracker is not specifically directed at children, and we do not knowingly collect data from anyone under 13 years of age.
If this policy changes in any meaningful way, the "last updated" date at the top of this page will be updated.
For privacy questions or requests relating to your data, write to f.s.a.t96@gmail.com.