Privacy Policy

1. Introduction

Welcome to Generation Gym ("GenGym", "we", "our", or "us"). We are committed to protecting your personal information and your right to privacy.

This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

Account Information

When you create an account, we collect:

• Full name and email address
• Password (stored as a one-way hash — never in plain text)
• Profile information you choose to provide (age, weight, height, fitness goals)
• If you sign in with Google: your Google account name, email, and profile picture, as provided by Google Sign-In

Fitness & Workout Data

As you use the app, we collect:

• Workout logs (exercises performed, sets, reps, weights, duration)
• Custom exercise library entries you create
• AI-generated workout plans and your feedback on them
• Body measurement records you enter (weight, body fat %, measurements)

Nutrition Data

• Food logs and meals you track manually or via food scanning
• Photos you submit for food analysis (processed by our AI service; not retained beyond analysis)
• Calorie and macronutrient targets

Health Data (from Apple Health / Google Fit)

Only if you grant permission, we may read and write:

• Steps, active energy, workout sessions
• Heart rate data
• Body mass and body fat percentage

See Section 5 for full details on health data handling.

Usage & Device Data

• App interaction events (screens visited, features used) — anonymized
• Device type, operating system version, app version
• Crash reports and performance diagnostics
• IP address (for fraud prevention and security)

Subscription & Payment Data

Purchases are processed through Apple App Store or Google Play. We use RevenueCat to manage subscription status. We do not receive or store your full payment card details — those remain with Apple, Google, or your payment provider.

3. How We Use Your Information

We use the information we collect to:

• Provide the Service — create and manage your account, deliver features, sync data across your devices
• Personalize your experience — generate AI workout and nutrition plans tailored to your goals and fitness level
• Process AI analysis — analyze food photos and exercise form videos to provide real-time feedback
• Manage subscriptions — verify your purchase entitlements and process renewals via RevenueCat
• Sync with health platforms — read and write data to Apple Health or Google Fit as you authorize
• Improve the Service — analyze aggregated, anonymized usage patterns to enhance features and fix bugs
• Communicate with you — send transactional emails (account confirmation, password reset) and, with your consent, product updates
• Ensure security — detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations — respond to lawful requests and enforce our terms

We do not use your data to serve third-party advertisements, nor do we sell your personal data.

4. Third-Party Services

We integrate with the following third-party services. Each has its own privacy policy:

We choose partners who are committed to data privacy and security. We require them to protect your data and prohibit them from using it for their own marketing purposes.

5. Health Data

Generation Gym may request access to health and fitness data stored in Apple Health (HealthKit) or Google Fit. This access is entirely optional and governed by the following principles:

• Permission-first: We request health permissions only when you initiate a feature that requires it. You may deny or revoke access at any time in your device's Settings.
• Minimal scope: We request only the specific data types needed for the feature you are using.
• No third-party sharing: Health data from Apple HealthKit or Google Fit is never shared with third parties for advertising, marketing, or any purpose unrelated to providing the Service to you.
• No selling: We do not sell health data under any circumstances.
• On-device processing where possible: Sensitive health calculations are performed on-device to minimize data transmission.

If you use food scanning, photos you submit are sent to our AI service for nutritional analysis and are not retained after the analysis is complete. They are not used to train AI models.

6. Data Storage & Security

Your data is stored on secure servers. We implement industry-standard safeguards including:

• Encryption in transit (TLS/HTTPS for all API communication)
• Encryption at rest for sensitive data fields
• Access controls limiting which employees can access personal data
• Regular security reviews

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

Data Retention

We retain your personal data for as long as your account is active, or as necessary to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention records).

7. Children's Privacy

Generation Gym is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages.

If we learn that we have collected personal data from a child under the applicable minimum age without verifiable parental consent, we will delete that data promptly. If you believe we may have any information from or about a child, please contact us at the address below.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Ask us to limit how we process your data in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

How to Exercise Your Rights

You can manage most data directly within the app (edit profile, delete workout logs, revoke health permissions). To submit a formal data request or account deletion, contact us through the app.

We will respond to all requests within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Effective Date" at the top of this page and, where appropriate, through an in-app notification or email.

Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the app.

We take privacy concerns seriously and will respond promptly.