Privacy Policy

GymTrack ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. What data we collect

When you use GymTrack, we collect the following information:

• Account information — your email address and encrypted password when you sign up
• Workout data — exercises, sets, reps, weights, and workout notes you log in the app
• Personal bests — lift records you manually enter
• Creatine tracking — the dates you mark as taken, stored locally on your device
• Workout templates — the templates you create, stored locally on your device

We do not collect your name, phone number, location, health metrics, payment card details, or any other personal information beyond what is listed above.

2. How we use your data

Your data is used solely to provide the GymTrack service:

• To store and sync your workout history across your devices
• To display your progress charts and personal records
• To authenticate you when you sign in

We do not sell your data to third parties. We do not use your data for advertising. We do not share your data with anyone except as described below.

3. Third-party services

GymTrack uses the following trusted third-party services to operate:

• Supabase — database and authentication provider. Your workout data and account credentials are stored securely on Supabase servers. Supabase is SOC 2 compliant. Supabase Privacy Policy
• Cloudflare — used to host and deliver the app. Cloudflare may log basic request data (IP address, browser type) for security purposes. Cloudflare Privacy Policy

4. Data storage and security

Your workout data is stored in a secure database provided by Supabase. We use Row Level Security (RLS) which means your data is completely isolated — no other user can ever access your workouts, exercises, or personal records.

Passwords are never stored in plain text. Authentication is handled by Supabase Auth which uses industry-standard encryption.

Creatine tracking data and workout templates are stored locally on your device and never sent to our servers.

5. Data retention

Your data is retained for as long as your account is active. If you delete your account, all your data is permanently deleted from our servers within 30 days.

6. Your rights

You have the right to:

• Access all data we hold about you
• Request deletion of your account and all associated data
• Export your workout data
• Correct any inaccurate information

To exercise any of these rights, contact us at the email address below.

7. Children's privacy

GymTrack is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: