How Generation Gym collects, uses, and protects your information
Welcome to Generation Gym ("GenGym", "we", "our", or "us"). We are committed to protecting your personal information and your right to privacy.
This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.
Summary: We collect only the data necessary to provide you with a personalized fitness experience. We do not sell your personal data to third parties.
When you create an account, we collect:
To generate a personalized AI workout plan, we collect information you enter directly:
This data is provided voluntarily by you and is used only to personalize your plan. We do not integrate with Apple HealthKit, Google Fit, or any other health platform API.
As you use the app, we collect:
We use Google Analytics for Firebase to understand how the app is used and to improve it. Firebase Analytics automatically collects:
Analytics data is aggregated and used only to understand feature usage and improve the app. It is not used for advertising, and we do not link analytics identifiers to your account profile.
Purchases are processed through the Apple App Store or Google Play. We use RevenueCat to manage subscription status. We receive a RevenueCat customer ID and purchase receipt tokens to verify your entitlements. We do not receive or store your payment card details — those remain with Apple or Google.
We use the information we collect to:
We do not use your data to serve third-party advertisements or sell personal data to any third party. Analytics data is used solely for app improvement, never for ad targeting.
We integrate with the following third-party services. Each has its own privacy policy:
| Service | Purpose | Data Shared |
|---|---|---|
| Google Sign-In (Google LLC) | OAuth authentication | Name, email address |
| Sign in with Apple (Apple Inc.) | OAuth authentication | Name, email address (or Apple private relay address) |
| RevenueCat | Subscription management | RevenueCat customer ID, purchase receipt tokens, product IDs |
| AI Backend Service | Workout plan generation, food scanning | Body metrics, fitness goals, health restrictions, food photos |
| Cloudflare CDN | Country detection for default language | IP address (country code only; not stored) |
| Google Analytics for Firebase (Google LLC) | App usage analytics | Usage events, device model, OS version, app version, coarse location, app instance ID |
We choose partners who are committed to data privacy and security. We require them to protect your data and prohibit them from using it for their own marketing purposes.
Health data is treated as sensitive. We apply stricter standards to any information classified as health or fitness data.
Generation Gym collects health and body metrics directly from you when you create an AI workout plan. This includes age, biological sex, weight, height, and any health restrictions or injuries you choose to disclose.
When you use the food scanner, photos are sent to our backend AI service for nutritional analysis and are not retained after the analysis is complete. Food photos are not linked to your identity and are not used to train AI models.
Generation Gym does not request GPS or precise location access. On first launch, we use your IP address to detect your country (via a Cloudflare CDN endpoint) for the sole purpose of setting the app's default language. The country code is used in memory only and is not stored on our servers.
Your data is stored on secure servers. We implement industry-standard safeguards including:
While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
We retain your personal data for as long as your account is active, or as necessary to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention records).
Generation Gym is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages.
If we learn that we have collected personal data from a child under the applicable minimum age without verifiable parental consent, we will delete that data promptly. If you believe we may have any information from or about a child, please contact us at the address below.
Depending on your location, you may have the following rights regarding your personal data:
You can manage most data directly within the app (edit profile, delete workout logs, update body metrics). To submit a formal data request or account deletion, email us at gengym@app.com.
We will respond to all requests within 30 days.
California residents may have additional rights under the CCPA. EU/EEA residents have rights under the GDPR. Contact us to exercise any applicable rights.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Effective Date" at the top of this page and, where appropriate, through an in-app notification or email.
Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We take privacy concerns seriously and will respond promptly.