Consumer Health Data Privacy Policy

• Bodyweight, body fat and how you measured it, tape measurements, and your goals for them.
• Height and birth year (the year only).
• The change you chose at the start of a session, if any, such as “15% lighter”, “5% heavier” or “1 set fewer”, kept with that session. The 1–10 “how do you feel” rating itself stays on your phone: it’s used there only to pick what to offer you, and it’s never sent to us or saved.
• Your max heart rate, if you enter your own.
• From earlier versions of the app only: one daily total each of heart-rate variability, resting heart rate, sleep and active energy from Apple Health, and a daily check-in. We no longer collect them.

We use it only to run your training plan: to draw your body trends, run the session you chose and set your next weights from it, and set your heart-rate zones. Never for ads, analytics or anything else.

From you, typed into the app. Body logs and measurements are stored once you agree to it; height, birth year and your own max heart rate are saved when you enter them in Settings; the change you choose at the start of a session is saved with that session. Gymento doesn’t read your health data from Apple Health.

No one. We don’t sell it or share it. These processors store and handle it for us, only for the purposes above, and may not use it for their own:

• Vercel runs the app’s server.
• Neon runs the app’s database, in the US.
• Apple (iCloud Mail) and Google (Gmail) carry and hold it only if you email it to us.

If you allow it, the app also writes your body logs to Apple Health on your phone. That’s your own Health store; Gymento sends nothing to Apple.

No third party collects your health data over time or across other websites or apps through Gymento. The app carries no advertising or tracking code, and usage analytics, when you turn them on, never include health data.

It’s stored on our servers in the US, and a copy is kept on your phone so the app works offline. It’s used only by the app, to show it back to you and to run your plan. We keep it until you delete it, delete your account, or ask us to erase it.

• See it. Ask what health data we hold about you, and the list of everyone it has gone to.
• Delete it. Delete account in Settings deletes it all at once. Or ask us to erase it and keep your account.
• Withdraw consent. Settings › Privacy stops new body entries. To keep a session’s change off your record, skip the check-in or start the session as planned.
• Appeal. If we turn a request down, reply “appeal” and we’ll answer within 45 days. If you’re still unhappy, you can complain to Washington’s attorney general.

Email privacy@gymento.com. We answer within 30 days, and never take more than 45. To check it’s you, we write back to the email address on your account.

A deletion reaches everywhere: our database at once, its restore history within 6 hours, and our processors with it.

We announce material changes in the app, and by email to everyone with an account, before they apply. The date at the top is when this version took effect.