Privacy Policy

1. Information We Collect

Personal Information:

• Name, email address, age, gender, weight, and height
• Account credentials and profile information
• User preferences and settings

Account, Device, and App Usage Data:

• How you signed up (email, Apple, Google, or Facebook)
• App version, device type, operating system, country, timezone, and language preferences
• Sign-in activity such as your latest connection time
• Engagement metrics such as first and last workout dates, total workouts completed, workout streaks, and whether onboarding was completed or skipped
• Subscription funnel data such as paywall views, trial start dates, conversion from trial to paid, and subscription cancellation requests

Billing and Financial Information:

• Subscription status, free trial usage, and purchase history
• Secure payment details (processed by Stripe or Apple); we do not store full credit card numbers

Health and Fitness Data:

• Steps, distance, and activity levels
• Heart rate and cardiovascular data
• Workout sessions and exercise history
• Weight and body composition tracking
• Calories burned and nutrition information
• Sleep patterns and recovery metrics
• Mood and wellness indicators

Usage Data:

• App interaction and feature usage
• Device information and operating system
• IP address and general location data
• Crash reports and performance data

2. How We Use Your Information

We use your information to:

• Provide personalized fitness recommendations and coaching
• Track your progress and display health metrics
• Generate workout plans tailored to your goals
• Send notifications about your fitness activities
• Improve our AI algorithms and service quality
• Understand product usage, retention, and subscription conversion
• Communicate with you about updates and new features
• Ensure the security and integrity of our services
• Comply with legal obligations

3. HealthKit Integration

Gymbora integrates with Apple HealthKit to access and store health data:

• We request your explicit permission before accessing HealthKit data
• Data read from HealthKit is used solely within the App
• We write workout data, heart rate, and activity information to HealthKit
• You can revoke HealthKit permissions at any time through iOS Settings
• We do NOT transfer HealthKit data to third parties or use it for advertising
• HealthKit data is NOT uploaded to our servers without your explicit consent

4. Data Storage and Security

• Your data is stored securely using industry-standard encryption
• We use Firebase and secure cloud infrastructure
• Authentication is handled through Apple Sign-In and secure protocols
• We implement regular security audits and updates
• Health data is encrypted both in transit and at rest
• Access to your data is restricted to authorized personnel only

5. Data Sharing and Disclosure

We do NOT sell your personal or health data. We may share data only in these circumstances:

Service Providers:

• Cloud hosting services (Firebase, Google Cloud)
• Analytics providers for app improvement
• AI processing services for coaching features

Legal Requirements:

• When required by law or legal process
• To protect our rights or safety
• In connection with a merger or acquisition (with notice)

With Your Consent:

• When you explicitly authorize sharing
• When sharing data with integrated third-party apps

6. Third-Party Services

Gymbora uses the following third-party services:

• Firebase (Google) - Authentication and data storage
• Apple HealthKit - Health data integration
• Google Gemini AI - Fitness coaching and recommendations
• News API - Fitness news and articles
• Stripe - Secure payment processing for web subscriptions
• Apple App Store - Payment processing for iOS in-app purchases

Each service has its own privacy policy, which we encourage you to review.

7. Your Privacy Rights

You have the right to:

• Access your personal data stored in the App
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Export your data in a readable format
• Opt-out of promotional communications
• Withdraw consent for data processing
• Revoke HealthKit access permissions

To exercise these rights, contact us at support@gymbora.com

8. Children's Privacy

Gymbora is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.

9. Data Retention

• We retain your data for as long as your account is active
• You can request deletion of your data at any time
• After account deletion, data is removed within 30 days
• Some data may be retained for legal or security purposes
• Aggregated, anonymized data may be retained for analytics

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the App and updating the "Last Updated" date. Your continued use constitutes acceptance of changes.

12. Contact Us

For questions or concerns about this Privacy Policy: Email: support@gymbora.com