Privacy Policy

Last updated: November 2026

GymGeek ("we", "us", "our") provides a mobile fitness tracking application. This policy explains what information we collect, why we collect it, and how you can control it.

Information we collect

• Account information: your email address and password, used to create and secure your account.
• Profile information: a display name and your training preferences (deload frequency, weight unit).
• Workout data: the routines, exercises, sets, reps, weights, and RPE values you log. This is the core data the app is built to store, so you can track your training history and progress.
• Device and advertising information: if you're on our free tier, we show ads through Google AdMob, which may collect a device advertising identifier to serve and measure ads. See Google's own privacy policy for how they handle this data.
• Push notification token: a device identifier used solely to deliver training reminders (inactivity, rest day, and deload notifications) through Firebase Cloud Messaging.
• Purchase information: if you subscribe to Pro, your subscription status is recorded. Payments are handled by Google Play; we never see your card details.

What we don't collect

• We do not access your device's location.
• We do not collect contacts, photos, or files from your device.
• We do not sell your personal data to third parties.

How we use your information

• To provide the core functionality of the app — storing and displaying your routines, workouts, and progress.
• To generate training suggestions based on your own logged history.
• To send you training reminder notifications, based on preferences you control in Settings.
• To serve ads to free-tier users, through Google AdMob.

Third-party services

We use the following third-party services to operate the app:

• Supabase — hosts our database and handles authentication.
• Google AdMob — serves ads to free-tier users.
• Firebase Cloud Messaging — delivers push notifications.
• RevenueCat — manages Pro subscriptions and purchase status, linked to your account ID.
• Resend — sends account emails such as confirmation and password reset.

Each of these providers processes data under their own privacy policies, in addition to this one.

Your data, your control

You can delete your logged workout history at any time from Settings, without deleting your account. You can permanently delete your account and all associated data — profile, routines, and workout history — at any time from Settings. This action is immediate and cannot be undone.

Children's privacy

GymGeek is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has created an account, contact us at hello@gymgeek.co.za and we will delete it.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with an updated revision date.

Contact us

Questions about this policy or your data can be sent to hello@gymgeek.co.za.