Privacy Policy

Information we collect

We only collect what we need to run the app:

• Account details — your email address and display name, plus a username if you choose one. Passwords are stored only as salted hashes; we never see your plaintext password. If you sign in with Google, we receive your basic profile and email.
• Workout data — the routines, exercises, sets, reps, weights, RPE, and notes you log, along with personal records we calculate from them.
• Body measurements — any bodyweight or measurement entries you add to track progress.
• Social graph — who you follow, who follows you, and the visibility settings you choose for your activity.
• Billing data — if you subscribe to Gainzz Pro: your subscription status, plan, billing period, and payment provider identifiers (such as a Stripe customer and subscription id, or an Apple transaction id). Full card numbers never touch Gainzz servers — payment details are collected and processed by Stripe (web) or Apple (iOS).
• Technical data — basic logs and security signals (such as IP address and device type) needed to operate the service, prevent abuse, and keep accounts secure.

How we use your data

Your data powers the features you came for — saving and syncing your workouts, calculating personal records and progress charts, and showing your activity to the people you've chosen to share it with. We also use it to keep your account secure, prevent abuse, and fix bugs. We do not sell your personal data, and we do not show third-party advertising.

Cookies and authentication

We use a small number of strictly necessary cookies to keep you signed in and to protect your session. These are essential to the service — without them you couldn't log in. We don't use advertising or cross-site tracking cookies.

Sharing and visibility

Workouts and profile activity are private by default. What others can see is controlled entirely by the visibility settings on your account and on individual items. We share data with the service providers listed below only as needed to operate Gainzz, and we may disclose information if required by law.

Service providers (sub-processors)

These are the providers that process data on our behalf, and what they receive:

• Stripe — payment processing for web subscriptions. Receives your email and the payment details you enter at checkout.
• Apple — payment processing for iOS in-app purchases, under Apple's own privacy policy. We receive signed transaction records, never your payment details.
• Resend — sends our transactional email (verification codes, billing notices). Receives your email address and message content.
• Hetzner — hosts our servers and database (Hillsboro, Oregon, USA). Service data is processed and stored there.
• Cloudflare — CDN and security in front of the app. Sees request traffic to gainzz.app.
• Google — optional sign-in. If you use it, we receive your basic profile and email.

Your rights and controls

You stay in control of your data. From your in-app Settings you can update your profile, change your privacy and visibility preferences, export a copy of your data (subscription records included), and permanently delete your account. Deleting your account removes your workouts, measurements, and social graph from active systems; residual copies may persist briefly in backups before they age out.

Data retention and security

We keep your data for as long as your account is active. Billing and transaction records are the exception: we and our payment providers keep them for as long as tax and accounting rules require (typically up to 7 years), even after account deletion — held by Stripe and Apple, and in minimal form by Gainzz. We protect your data with encryption in transit, hashed credentials, and access controls. No system is perfectly secure, but we work to safeguard your information and to notify you if something goes wrong.

Children

Gainzz is not intended for anyone under 16. We don't knowingly collect data from children, and we'll delete it if we learn we have.

Changes to this policy

We may update this policy as the product evolves. When we make material changes, we'll update the date above and, where appropriate, let you know in the app.

Contact

Questions about your privacy? Reach us at [email protected].