Effective June 19, 2026
Privacy Policy
Gym Progress is a local-first workout tracking app. An account is optional. You can log workouts without signing in, and cloud backup starts only if you choose to sign in with Google or Apple.
Data we collect or store
Gym Progress may store the following information on your device:
- Workout logs, including exercise, weight, reps, date and time, creation time, update time, and deletion markers.
- Custom exercises, including name, equipment, primary muscle group, and related timestamps.
- App preferences, including language, weight unit, rest timer settings, recommendation settings, and local app state.
If you sign in, Gym Progress also processes the following account and backup data:
- Google or Apple account identifier, email address, and name or profile image when the provider supplies it.
- A generated device identifier used only to make backup and restore more reliable.
- Cloud copies of workout logs and custom exercises in Supabase, linked to your authenticated user ID.
Google user data
Gym Progress uses Google Sign-In only for authentication. The requested scopes are limited to OpenID Connect, email, and profile. Gym Progress does not request access to Gmail, Google Drive, Calendar, Contacts, or any other Google service data. Google account information is used to create your Gym Progress session, show your account in the profile screen, and attach cloud backup records to your account.
Apple Sign in data
Gym Progress uses native Sign in with Apple on iOS. Apple may provide your Apple user identifier, email address, and full name, depending on your choices and whether this is your first sign-in. Apple private relay email addresses are supported.
How we use data
- To save and display your workout history.
- To calculate training progress, previous sets, recommendations, and estimated strength metrics.
- To provide optional automatic cloud backup and restore after you sign in.
- To maintain account security and prevent duplicate backup records.
- To answer support and privacy requests.
Sharing and service providers
Gym Progress does not sell personal data, does not show ads, and does not use third-party advertising or third-party analytics SDKs. Data may be processed by these service providers only as needed to run the app:
- Supabase, for authentication sessions, database storage, row-level security, and cloud backup.
- Google, when you choose Google Sign-In.
- Apple, when you choose Sign in with Apple.
- Vercel, to host this public website and legal policy pages.
Device permissions
Gym Progress may ask for notification permission to deliver local rest timer reminders. Rest notifications are generated on the device. The app does not access the microphone, camera, contacts, location, HealthKit, or Health Connect.
Retention and deletion
Local workout data remains on your device until you delete it in the app or uninstall the app. If you signed in, you can delete your account and cloud backup directly in the app from Profile, Settings, Account preferences, Delete account. The direct account deletion page is gymprogress.peet.bet/delete-account, and the app link is gymprogress:///settings/account. Signing out keeps local data on your device and stops cloud backup until you sign in again.
Security
Account sessions are stored using secure device storage. Cloud data is protected with authenticated access and database row-level security so users can only access their own records. No service-role keys are embedded in the mobile app.
International processing
Service providers may process data in countries other than your own. By using optional cloud backup, you consent to this processing for the purposes described in this policy.
Children
Gym Progress is not directed to children under 13.
Changes
If this policy changes, the updated version will be posted on this page. If Gym Progress materially changes how Google or Apple user data is used, the app will ask signed-in users to accept the updated policy before using that data in the new way.
Contact
For privacy questions or support, email brunomembrado10@gmail.com.