Privacy policy
Last updated: 21 October 2026
This policy explains what personal data the GymComp app (“GymComp”, “the app”) collects, why, who it is shared with and the rights you have. GymComp does not show ads, does not use analytics or tracking tools, and never sells your data.
Who is responsible for your data
GymComp is developed and operated by Gurzu Silviu Andrei, an individual developer based in France, who is the data controller for the personal data described here. Contact: support@gymcomp.fit.
What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account details: email address and name. If you sign in with Google, we also receive the basic profile Google shares (name, email, profile picture). | To create your account, sign you in and contact you about your account. | Contract (Art. 6(1)(b)) |
| Training preferences: your goal, experience level, days per week, session length, the equipment you can use, and weight units. | To build and personalise your training plan. | Contract |
| Workout history: the workouts you finish, with exercises, sets, weights, repetitions, durations and dates, and the personal records and streaks calculated from them. | To show your progress, history and records. | Contract |
| Machine scanner photos: a photo you take or choose of gym equipment, resized on your phone before upload. | To identify the machine and show our guide for it. | Contract |
| Scan results and reports: what the scanner identified, and any “wrong result” report you send with its optional comment. | To show your recent scans and to improve the scanner. | Contract; legitimate interest (improving the service) |
| Subscription status: whether you have an active subscription or trial, its renewal date and an anonymous purchase identifier. We never see your card or payment details — Google Play handles payment. | To unlock the app for subscribers. | Contract |
| Technical data: limited logs created when the app talks to our servers (for example request times and error codes). | To keep the service secure and working, and to prevent abuse (for example fair-use limits on the scanner). | Legitimate interest (Art. 6(1)(f)) |
We do not ask for health or medical information such as conditions, injuries, body weight or measurements. Please don’t include such information in scanner reports or messages.
Kept only on your phone
Your light/dark mode choice, workout reminder settings, and a workout you haven’t finished yet are stored on your device and are not sent to us until you finish the workout. Workout reminders are local notifications scheduled by your phone.
Device permissions
The app asks for the camera (to scan a machine), access to photos you choose (to scan from your gallery) and notifications (rest timer and workout reminders). Each is optional, and you can turn it off at any time in your phone’s settings.
How the machine scanner works
When you scan a machine, the photo is uploaded to our database provider and sent to Anthropic’s Claude AI model, which only identifies the type of equipment. The photo is deleted as soon as it has been analysed (and photos that were never analysed are deleted within an hour). We keep only the result, such as “leg press machine”. Please avoid photographing other people. AI identification can be wrong — always check with gym staff if you are unsure how to use a machine.
Who we share data with
We use these service providers (“processors”) to run GymComp. They process data only on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Clerk, Inc. | Sign-in and account security | United States |
| Convex, Inc. | Database and backend that stores your account, preferences, workouts and scan results | European Union (Ireland) |
| RevenueCat, Inc. | Managing subscriptions and checking your subscription status | United States |
| Google (Google Play, Google Sign-In) | Payments for subscriptions; optional sign-in with Google | Worldwide |
| Anthropic, PBC | Identifying equipment in scanner photos | United States |
| Netlify, Inc. | Hosting this website | United States |
When data is transferred outside the European Economic Area, it is protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission’s Standard Contractual Clauses. We may also disclose data if required by law.
How long we keep data
- Account, preferences, workout history and scan results: until you delete your account.
- Scanner photos: deleted immediately after analysis (within an hour at the latest).
- Technical logs: kept only as long as our providers retain them for security and operations (typically a few weeks).
- After you delete your account, your data is removed from our active systems within minutes; copies may remain in providers’ backups for a limited period before being overwritten.
Deleting your account
You can delete your account and all associated data at any time in the app under Profile → Delete account, or by following the steps on our account deletion page. Deleting your account does not cancel a Google Play subscription — cancel it in Google Play first.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy of it;
- correct inaccurate data;
- delete your data;
- restrict or object to processing based on legitimate interest;
- receive your data in a portable format;
- withdraw consent (for example device permissions) at any time.
To exercise these rights, email support@gymcomp.fit from the address linked to your account. We reply within one month. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or with the authority where you live.
Children
GymComp is intended for people aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we will delete it.
Security
Data is encrypted in transit (HTTPS) and stored with providers that apply industry-standard security. No system is perfectly secure, but we limit what we collect and keep it only as long as needed.
Changes to this policy
If we change this policy, we will update the date above and, for significant changes, tell you in the app.