Privacy Policy

This Privacy Policy describes how GymStreak Ltd, trading as GymStreak Labs ("we," "us," or "our") collects, uses, and shares information when you use the GymLevels mobile application ("App").

1. Information We Collect

1.1 Information You Provide

• Account information: Email address, display name, and password when you create an account.
• Profile and fitness data: Goals, fitness experience level, available equipment, training schedule, injury history, body weight entries, and workout preferences.
• Workout data: Exercise logs, sets, reps, weights, durations, distances, personal records, streaks, XP, and level progression.

1.2 Information Collected Automatically

• Device information: Device model, operating system version, and unique device identifiers.
• Usage data: Features used, screens viewed, session duration, crash reports, and performance data.
• Purchase information: Subscription status and transaction identifiers. We do not store payment card details.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App and its features.
• Generate personalized workout plans based on your profile and recovery state.
• Track your fitness progression, XP, levels, and muscle rankings.
• Process and manage your subscription via RevenueCat.
• Send notification reminders with your permission.
• Diagnose bugs, improve performance, and comply with legal obligations.

3. Third-Party Services

GymLevels uses third-party services, each with their own privacy practices:

• Firebase / Google for authentication, cloud storage, analytics, and app stability.
• RevenueCat for subscription management and purchase validation.
• Apple App Store for subscription payment processing.
• Meta for measuring our ads: our website plan pages use the Meta Pixel, and when you sign up, start checkout or buy there, we and our attribution provider AppRefer send Meta your IP address, browser details, Meta cookie identifiers, your GymLevels account ID, and a hashed (SHA-256) copy of your email and of the gender you chose in the quiz. We don't send Meta your other quiz answers, fitness, injury or body data.
• OpenAI for measuring our ChatGPT ads: our website plan page uses the OpenAI Measurement Pixel. It uses a click-attribution cookie (__oppref, up to 30 days) and a browser-reference cookie (__obref, up to 365 days). When you buy, we send OpenAI the purchase event identifier, amount, currency, time, page address, those cookie identifiers where available, and a hashed (SHA-256) copy of your normalized email address. The browser pixel also sends connection and browser information needed to deliver its measurement requests. We do not send OpenAI your gender, quiz answers, fitness, injury or body data. Our purchase events opt out of future user-level personalization, and our integration respects supported browser privacy signals and the pixel's stored measurement-consent choice.

4. Subscription Data

GymLevels is a subscription-based app. All features require an active trial or paid subscription. Subscription status is managed through RevenueCat and validated against the applicable app store. We retain entitlement status to control access to premium features.

5. Data Storage and Security

Your data is stored in Google Firebase (Firestore). We use encrypted data transmission and Firebase Security Rules to restrict unauthorized access. No security system is impenetrable, so use a strong password and keep your credentials private.

6. Data Retention

We retain your account and fitness data while your account is active. If you delete your account, your data will be permanently deleted within 30 days, except where retention is required by law.

7. Children's Privacy

GymLevels is not directed at children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe we have inadvertently collected such information.

8. Your Rights

Depending on your location, you may have rights to:

• Request access to or a copy of your personal data.
• Correct inaccurate personal data.
• Request deletion of your account and associated data.
• Request your data in a machine-readable format.
• Disable push notifications through your device settings.

To exercise these rights, email support@gymstreaklabs.com.

9. Push Notifications

GymLevels may send streak reminders, weekly progress reports, and check-in alerts. You can disable notifications at any time in your device settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate changes by updating the date above. Continued use of the App after a change constitutes acceptance of the updated policy.

11. Contact Us

Questions about this Privacy Policy can be sent to support@gymstreaklabs.com.