Privacy Policy

1. Overview

Gym Journal ("we," "us," or "our") is a mobile application for personal strength training logging. This Privacy Policy explains what information we collect when you use Gym Journal, how we use it, who we share it with, and what choices and rights you have regarding your data.

By using Gym Journal, you agree to the practices described in this policy. If you do not agree, please do not use the app.

2. Information We Collect

We collect only what is necessary to provide the app's core functionality:

Account Information

When you sign in with Google, we receive your name and email address from Google's authentication service. This information is used solely to identify your account and associate your workout data with it. We do not receive your Google password, and we do not access any other Google services (such as Gmail, Google Drive, or Google Contacts) on your behalf.

Workout and Fitness Data

All content you create within the app — including exercises, sets, reps, weights, workout dates, routine names and structures, and any notes — is stored as your workout data. This data is private to your account and is never visible to other users.

Information We Do Not Collect

• We do not collect your precise or approximate location.
• We do not access your device's contacts, camera, microphone, or photo library.
• We do not collect payment or financial information.
• We do not collect health data from Apple Health, Google Fit, or any other health platform.
• We do not use advertising SDKs or collect data for advertising purposes.
• We do not collect biometric data.

3. How We Use Your Information

We use the information we collect to:

• Authenticate your identity and maintain your account session.
• Store and display your workout logs, routines, and exercise history within the app.
• Generate progress charts and statistics from your logged workout data.
• Respond to support requests or feedback you send us directly.

We do not use your data for advertising, profiling, behavioral analytics, or any purpose beyond operating the app as described above.

4. Third-Party Services

Gym Journal uses a limited number of third-party services to operate. These services may process some of your data as part of their function:

Google Sign-In (Authentication)

We use Google Sign-In to handle account authentication. When you sign in, Google shares your name and email address with us. Google's handling of your information during sign-in is governed by the Google Privacy Policy. We do not use Google Sign-In to access any other Google account data.

Cloud Infrastructure

Your workout data is stored on cloud servers used to operate the app. These servers are located in the United States. Data is transmitted over encrypted connections (HTTPS/TLS).

We do not sell, rent, or share your personal information with third parties for their own marketing or advertising purposes. We do not use analytics platforms that track individual user behavior across apps or websites.

5. Data Sharing and Disclosure

We do not sell your personal information. We do not share your personal information with third parties except in the following limited circumstances:

• Service providers: We may share data with vendors who help us operate the app (e.g., cloud hosting), strictly to perform services on our behalf and subject to confidentiality obligations.
• Legal requirements: We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights or the safety of users.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent in-app notice before your data is transferred and becomes subject to a different privacy policy.

6. Data Security

We take reasonable technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS/HTTPS) and access controls on our backend systems.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your account information and workout data for as long as your account remains active. If you delete your account, all associated data — including your workout history, routines, and exercise library — is permanently deleted from our systems.

Deletion is permanent and irreversible. We do not maintain backups of deleted account data after deletion is processed.

8. Account and Data Deletion

You can delete your account and all associated data at any time from within the app:

1. Open Gym Journal
2. Go to Settings
3. Select Delete Account
4. Confirm the deletion

This action immediately and permanently removes your account, all workout logs, all routines, and all exercise history from our systems. It cannot be undone.

If you are unable to access the app, you may also request account deletion by emailing gymjournalusa@gmail.com from the email address associated with your account.

9. Children's Privacy

Gym Journal is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at gymjournalusa@gmail.com and we will delete that information promptly.

If you are between 13 and 18, please review this policy with a parent or guardian before using the app.

10. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal data. These may include:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request that we correct inaccurate or incomplete information.
• Right to deletion: Request that we delete your personal data (see Section 8).
• Right to data portability: Request your data in a portable format.
• Right to object: Object to certain uses of your data.

California residents (CCPA): You have the right to know what personal information we collect, to request deletion, and to opt out of sale of personal information. We do not sell personal information.

EEA/UK residents (GDPR): Our legal basis for processing your personal data is the performance of a contract (providing the app you signed up for) and, where applicable, your consent. You have the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at gymjournalusa@gmail.com. We will respond within 30 days.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top of this page. If we make material changes — such as collecting new types of data or sharing data in new ways — we will notify you through the app or by email before the changes take effect.

Your continued use of Gym Journal after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We take privacy concerns seriously and will respond to all inquiries within 30 days.