Privacy policy

Who processes your data

The gym you belong to decides which member records it keeps and for how long. We run the software and the infrastructure for it.

Your personal diary, meaning the weight, meals and workouts you enter yourself, does not involve the gym at all. Only you see it.

You do not create the account

A Gymara account cannot be opened from the app. The gym signs you up and sends an invitation to your email, and all you do is set a password. That means your first name, last name, email and phone number came from the gym, at the front desk, before you ever opened the app.

Which data we process

Nothing is collected in the background and nothing is pulled off your device.

• Account: first name, last name, email address, phone number, gender, and a photo if the gym takes one so the front desk can recognise you.
• Membership: which memberships you have had, when they start and expire, at what price, whether they are paused or cancelled, and a card number if the gym uses cards.
• Check-ins: the date and time of every entry and the location you entered.
• Diary: weight entries, meals with their items, workouts with exercises and sets. You enter all of it yourself, and all of it counts as health and fitness data.
• Device: a push notification token, the device type and a device identifier, so we can send you a notification and so signing out on one phone does not drop your session on another.
• Support: suggestions and problem reports you send from the app.

Why we process it

Your name, email, membership and check-ins exist so the gym knows who may come in and can keep its own records. Without them the app does not do the one thing it exists for.

The diary exists because you decided to keep one. We do not use it for anything else, we do not analyse it and we do not show it to the gym.

We send push notifications only if you allowed them. If you decline, the app works normally, just without notifications.

Who sees it

Gym staff see your name, contact details and photo, and beyond that only the memberships and check-ins that happened at that gym. What you did at another gym they do not see, not before you join and not after.

Nobody but you sees your diary. Not the staff, not the gym owner.

We do not sell your data, do not trade it and do not use it for advertising. There are no ad networks and no analytics following you around the app.

Who we pass it to

We sell your data to nobody and hand it to nobody. But the app does not run on our desk, so some of your data is unavoidably touched by the companies whose services keep it running. The law asks us to tell you what kinds of services those are.

• Servers and the database, where your account and the gym records actually sit.
• Photo storage. A member photo is kept apart from the rest, and opens only through a link that expires quickly.
• Sending email, and only for the invitation and the password reset.
• Push notifications. Apple and Google carry them to the phone, there is no other way for one to arrive.

How long we keep it

We keep the account and its data for as long as the account exists. The gym keeps check-ins and memberships sold beyond that, because those are its business records, but after the account is deleted your name is no longer on those rows.

We keep the diary until you delete it, or until you delete the account.

Deleting your account

You delete the account yourself, from the app, under Profile and then Delete account. You do not need to write to us and you do not need to call the gym.

Deletion is permanent and there is no grace period. It takes one tap.

• Gone for good: the entire diary, first name, last name, email, phone number, photo, notifications, saved products, suggestions you sent and every device registration.
• Kept by the gym, but without your name on it: check-ins and memberships sold. The card number is released and the next member can get it right away.
• An account that also works at a gym, meaning staff or a trainer, cannot be deleted from the app. For that one you contact the gym.

Your rights

You have the right to access your data, correct what is wrong, have it deleted, restrict how it is processed, receive it in a portable form and object to the processing.

For any of that write to [email protected]. If you believe we handled it badly, you have the right to complain to the Commissioner for Information of Public Importance and Personal Data Protection.

Children

The app is not meant for anyone under 16 without the consent of a parent or guardian. A minor gets an account from the gym, with that consent in place.

Security

We do not keep your password. Only a fingerprint of it is stored, one the password cannot be recovered from, so we do not know it either. Everything between the app and the server travels encrypted, and a member photo is not on a public address.

No system is unbreakable. If someone does get to your data, we will tell you and the supervisory authority, within the deadlines the law sets.

Changes

The date at the top of the page says when this policy was last changed. A big change we tell you about in the app, we do not wait for you to notice it yourself.

Contact

[email protected]