Gymmons Privacy Policy
Last updated: 28/09/2026
Gymmons is a workout motivation app that turns physical activity check-ins into progression for collectible creatures (Gymmons), GymEggs, private leagues between friends and a social feed. This policy explains what personal data we collect, why we use it, who we share it with and how you can delete it.
Who is responsible for your data
Gymmons is operated independently. Questions and requests to access, correct or delete data can be sent to marcoasjunior90@gmail.com.
What data we collect
- Account data: name and email. Your password is stored as a cryptographic hash and never in plain text. If you sign in with Google or Apple, we receive the name and email from the account you use to sign in, and your account has no password — Google or Apple confirms your identity in that case.
- Profile photo (avatar): optional and uploaded by you.
- Check-in photos: uploaded by you to record a specific workout. These photos are private and accessible only to authenticated users inside the app — never through a public URL.
- Activity data in the app: check-in history, experience (XP), Gymmons evolution, GymEggs being incubated, league participation, automatic battle results and social interactions inside a league — reactions, comments on check-ins and group workouts, and league chat messages. These interactions are visible only to people in the same league.
- Workout location: optionally, when starting a workout or making a check-in, you can enter a place name or authorize a one-time foreground location capture. In that case, we may store the coordinates, approximate accuracy and capture time with the workout record. If you tap to search for nearby workout locations, we send a rounded position, at a scale of tens of meters, to Geoapify to suggest places. To provide, protect and measure this service, Geoapify also processes technical request metadata; under the provider policy, this retention is normally up to 24 hours. We do not send your name, email, photos, workout content or account identifier. Exact coordinates remain private by default; only the place name may be shown to league members when you choose to share that name.
- Optional workout import: if you choose to connect Apple Health or Health Connect, the app checks in the foreground for one recent exercise session completed on the current day, to prefill your check-in. We use only the exercise type, duration and end time; we do not use or send steps, calories, heart rate, routes, sleep or history. The native session identifier is immediately turned into a hash on your device; we do not store or transmit the original identifier.
- Push notification token: a device identifier used exclusively to send notifications from the app.
- In-app feedback: if you report a problem or suggestion through the app, we keep your message and technical app information at the time of submission (version, build and update channel) to help diagnose the report.
- Technical data: access and diagnostic records (errors and performance) used to keep the service running securely.
We do not collect contacts, browsing history or payment data. We do not track location in the background, use location for advertising, sell this data or receive a continuous trail of your movements.
Closed beta waitlist
People who sign up through the closed beta page do not yet have an app account. In that signup, we collect only your email and which phone will be used for the test (Android, iPhone or both). We also store the date you gave consent and, when the link included that information, the channel through which you arrived (for example, a specific campaign). We do not ask for your name or any workout data at this stage.
- Why we use it: to send the beta invitation to the right store for your phone and update you about the test. Nothing else.
- Legal basis: your consent, given by checking the box in the form. You can withdraw it at any time.
- How long: until the closed beta ends or until you ask to leave the list, whichever comes first.
- How to leave: write to marcoasjunior90@gmail.com with the email you registered. We delete the record and stop sending you messages.
This list is separate from app accounts: if you join the list and later create an account, they are different records, and deleting one does not automatically delete the other.
How we use this data
- Operate app features: progression, leagues, battles, feed and notifications;
- Add context to workout history when you choose to enter or capture a place; location is optional, is not anti-fraud proof and its absence does not block a check-in or reduce progression;
- When you connect Apple Health or Health Connect, suggest one workout completed today to prefill the check-in. Nothing is recorded automatically: you continue to choose, review and confirm the check-in, whose photo remains required;
- Keep your account secure (authentication and abuse prevention);
- Diagnose and fix technical problems.
We do not use your data for advertising, and we do not sell data to third parties.
Who we share data with
Your data may be processed by the following service providers to operate the app, according to the purposes and policies described below:
- Cloudflare R2: storage for avatars and check-in photos;
- Expo (Expo Technologies, Inc.): delivery of push notifications;
- Resend: sending app emails (email verification and welcome messages, password recovery and closed beta notices);
- Geoapify: optional suggestions for nearby workout locations, only after you request that search in the app. It processes the rounded position, at a scale of tens of meters, and technical metadata to provide, protect and measure the service; under the provider policy, retention is normally up to 24 hours;
- Sentry: recording app errors so a problem can be fixed without relying on you to report it. It receives the technical error description and your internal account identifier — not your name, email, photos or workout content.
If you sign in with Google or Apple, the app confirms your identity directly with them before creating or accessing your account — we do not send your data to Google or Apple; we only receive what is needed to confirm who you are.
Exact location is not sent to league members, the feed or sharing cards. If you enter a place name and choose to share it, only that name may appear to the corresponding league. Geoapify receives a rounded position, at a scale of tens of meters, only when you request suggestions for nearby places; advertising and location analytics providers do not receive this data.
Location permission
The app requests foreground location permission only when you tap to record a workout location. Before the system prompt, we explain the purpose inside the app. If you choose to search for a nearby gym, we use your position only for that one suggestion. You can deny or revoke permission in your device settings, or continue without location; this does not prevent check-ins, starting a workout or progression.
Apple Health and Health Connect
This integration is optional and is checked only after you tap to allow it inside the app and in your device system. It reads only exercise sessions completed on the current local day and never requests permission for steps, calories, heart rate, routes, sleep, health history or background delivery. You can ignore the suggestion, stop importing in Gymmons or revoke permission in Apple Health or Health Connect settings at any time.
Raw health records, titles, notes, device source and the native identifier are not sent to Gymmons. If you confirm the check-in, we send only the provider and an opaque session hash to prevent the same session from being recorded twice, along with the normal data you reviewed in the check-in. The import source does not appear to the league, in the feed or in shared images.
Security
All communication between the app and our servers uses HTTPS. Passwords are stored as hashes. Check-in photos are not exposed through public URLs — they are served only through an authenticated route to the user. Location coordinates are stored encrypted and are not returned in public league, feed or sharing resources.
Deleting your account and data
You can delete your Gymmons account at any time directly in the app, under Profile → Delete account (you must confirm by typing your account email). If you prefer, you can also request deletion by email at marcoasjunior90@gmail.com, using the email registered on the account. We process the request within 30 days.
Deleted immediately: your account record (name, email and password), avatar, check-in photos, Gymmons, GymEggs, workout and experience history, workout import hashes, location records and snapshots, participation in every league, and your reactions, comments and league chat messages.
What may remain: events you created in the feed and the collective knockout history of leagues you joined may remain visible to other members while the league exists, but anonymously. The system removes your name, email, direct account identifier, avatar and Gymmon nicknames from snapshots; it preserves only the structure needed to show the result and a generic event description (such as the activity type). Deleting the league removes that history with it.
If you sent feedback through the app, the report itself is kept so we can finish resolving it after deletion, but it is no longer linked to your account.
Removing only location
Even without deleting the workout, you can remove the location associated with a check-in through the app privacy flow. Removal deletes the coordinates, accuracy, capture time and place name for that record.
Your rights
Under Brazil’s General Data Protection Law (LGPD), you may request at any time access to the data we hold about you, correction of inaccurate data, account deletion and data portability. Write to marcoasjunior90@gmail.com.
Children
Gymmons is not directed at children under 13 and does not knowingly collect data from children in that age group.
Changes to this policy
We may update this policy as the app evolves. The date at the top of this page always indicates the most recent version.