Privacy Policy

• We don’t sell your data, personal or health, to anyone.
• We don’t show ads, and we don’t track you for advertising.
• We don’t give or sell data to data brokers.
• We don’t track you across other companies’ apps or websites. That’s why the app never asks for App Tracking Transparency.
• We don’t train AI or large language models on your data, and we don’t let anyone we work with do it. An app you connect yourself follows its own policy; see Apps you connect.

Who we are

Gymento LLC, a Washington limited liability company. Postal address: Gymento LLC, 12345 Lake City Way NE #3294, Seattle, WA 98125. Email privacy@gymento.com about anything on this page. Gymento is available in the US only.

Who handles data for us

These companies store or process data on our behalf, each under its data-processing terms. None of them may use it for its own purposes.

• Vercel hosts gymento.com and the app’s server, and keeps bots off the website.
• Neon runs the app’s database, on Amazon Web Services in the US (us-east-1).
• PostHog (US) counts website visits, and runs the app’s analytics if you allow them.
• Resend (US) keeps the waitlist and sends its emails.
• Apple provides Sign in with Apple, Apple Health and the age check.
• Apple (iCloud Mail) and Google (Gmail) carry and hold the email you send to hello@gymento.com and privacy@gymento.com.

No one else. No AI or language-model service receives your data from us. If you connect an AI app yourself, it receives what you approve; see Apps you connect.

If you email us

When you write to us, we receive your email address and what you write. If you use Settings › Email support in the app, the email also carries your app version and build, your iPhone model and iOS version, your paired Apple Watch’s model and watchOS version if you have one, and your Gymento account ID. You see all of it in the draft before you send.

Your email is held in iCloud Mail and Gmail only as long as it takes to help you. It’s never used for marketing.

Security

Your data is encrypted on its way to us and where our processors store it. The app keeps your sign-in in the iPhone’s Keychain, and every request reaches only your own data. If a breach affects your data, we’ll email you within 60 days of finding it.

Do Not Track

Neither the website nor the app tracks you across other sites or apps, so there’s nothing for a Do Not Track signal to switch off. No other company collects data about you across services through Gymento.

Children

Gymento is for adults 18 and over. It isn’t directed at children under 13. If we learn we hold data from someone under 18, we delete it.

Visiting

gymento.com sets no cookies and stores nothing in your browser. It counts visits with PostHog in cookieless mode: PostHog tells visits apart with a hash that changes every day, not an ID kept on your device. It records the pages you view and leave, how fast they load, and whether a waitlist form went through, was confirmed, or asked for updates. Never your email address.

Those requests go through gymento.com, and the fonts come from gymento.com too, so your browser talks to no other company.

To stop bots, Vercel’s bot protection checks each waitlist sign-up, and a rate limit reads your IP address.

The page shows metric or imperial units from your browser’s language, or from the link you followed. It’s stored only if you join the waitlist, as your region.

The waitlist

Joining takes only your email address. We keep it in Resend with where on the page you signed up, your region, when you joined and which wording of our promise you saw.

You get one email to confirm. Once you confirm, you get one more: the launch email. It has a “Keep me posted” button, and only if you press it do you hear from us again. Every email after that has a link to stop.

A sign-up that isn’t confirmed is deleted after 30 days. Everyone who didn’t press “Keep me posted” is deleted 30 days after the launch email.

Your account

You sign in with Apple, which gives us your email address (it may be a private relay address) and your name, if you choose to share it. We also store your display name, timezone, units and display settings, and, if you enter them, your height, your birth year (the year only, to estimate your max heart rate) and your own max heart rate.

Your training

Your plans, scheduled workouts, sessions, sets, reps, loads, effort (RPE), cardio results, the notes you write, the exercises you exclude or swap and why, and your equipment locations.

Your body data

Bodyweight, body fat (and how you measured it), tape measurements and your goals for them, all typed in by you. They’re stored on our servers so the app can draw your trends.

When you start a strength session, the app asks how you feel right now, from 1 to 10. That rating stays on your phone: it’s used there, in the moment, to pick what to offer you, and it’s never sent to Gymento or saved. What we keep is the change you chose, if any, like “15% lighter”, “5% heavier” or “1 set fewer”, with that session, to show you your history and to set your next weights.

The app asks first. The first time you log bodyweight, body fat or a measurement, it asks you to agree to storing them. One agreement covers all three, plus height and birth year. Height and birth year typed into Settings are saved there without that question.

You can take your agreement back in Settings › Privacy. New entries stop, and what’s already stored stays until you delete your account or ask us to erase it.

Apple Health

Gymento writes to Apple Health, if you allow it: bodyweight, body fat, lean body mass, waist and height as you log them, and your Apple Watch workouts with their effort. It never reads these back. During a workout the Watch reads your heart rate and active energy; they stay on your devices.

Gymento doesn’t read anything else from Apple Health. Earlier versions of the app could read heart-rate variability, resting heart rate, sleep and active energy and send us one daily total of each, and asked a daily check-in. The app no longer does either, and our servers no longer store those totals. What earlier versions sent stays until you delete your account or ask us to erase it.

Health data is never used for ads, marketing or data mining, never shared without your permission, and never stored in iCloud.

Sign-in records

For each device you’re signed in on, we keep its IP address and device type. A sign-in lasts until you sign out, or until a week passes without the app using it. Ended sign-ins are deleted every day.

Your age

On iOS 26 and later, Apple tells the app your age range, if you share it, so we can check you’re 18 or over. The answer isn’t stored or sent anywhere.

Calendar, Photos, notifications and widgets

If you turn on calendar sync, Gymento adds your workouts to your calendar; it can’t read your calendar. Saving a share card only adds an image to Photos; Gymento can’t see your library. Reminders are scheduled on your phone. We have no way to send you push notifications.

Gymento’s widgets keep a copy of your next sessions and your streak on your phone, and it’s deleted when you sign out.

Analytics

Off until you say yes on the “Help improve Gymento?” screen when you set up the app. Change it anytime in Settings › Privacy › Share usage analytics.

When it’s on, PostHog (US) receives the screens you open and the actions you take, how long the app takes to open, your app and iOS version, crash and error reports, and a few choices about your plan, like what you train for and how many days a week. They’re linked to a random ID for this install and, once you sign in, to your Gymento account ID. Never your name, your email, any body or health value, or how you rated yourself at a check-in. There’s no screen recording. Turning it off stops all of it, crash reports included.

What a connected app sees

Your plans, workouts, sets, lifts, records and progress, and the names and notes you wrote on them. Never your bodyweight, measurements, check-ins, sleep or heart data.

What it can change

It can save a plan as a draft. It can’t start, stop or change a plan you’re training on. A draft does nothing until you start it in the app.

How you agree

You approve each app in the Gymento app, where it shows what the app will see and that it can draft plans. Training data can count as health data under Washington’s My Health My Data Act, and this approval is your consent to share it with that app.

What the app does with it

The app you connect receives your data at your direction. Its own privacy policy covers what it does next, including whether it keeps it or trains on it. Gymento never sends your data to an AI on its own.

Disconnecting

Disconnect any time in Settings › Connected apps. The app loses access right away. Drafts it saved stay in your plans until you discard them. Deleting your account disconnects every app.

Delete account is in Settings. It deletes everything in your account at once: your profile, training, body data, check-ins and Apple Health totals. It also revokes Gymento’s Sign in with Apple access, and deletes your analytics and their history in PostHog.

Our database keeps a restore history for at most 6 hours, so a deleted account is gone from it within 6 hours. No copy survives anywhere else. Deleting the app from your phone doesn’t delete your account. What Gymento wrote to Apple Health is yours, and stays there until you delete it in the Health app.

• See it. Ask whether we hold data about you, and what it is.
• Copy it. Get it in a form you can take elsewhere.
• Correct it. Most of it you can edit in the app.
• Delete it. Delete account in Settings does it at once.
• Take back consent. Body data and analytics in Settings › Privacy; Apple Health in Settings › Apple Health.

For anything you can’t do in the app, email privacy@gymento.com. We answer within 30 days. Where a state’s law allows more time, we’ll tell you if we need it, and never take more than 45 days. To check it’s you, we write back to the email address on your account.

If we turn a request down, reply “appeal”. We’ll answer within 45 days. If you’re still unhappy, you can complain to your state’s attorney general, for example in Washington or Connecticut.

Using any of these rights never changes what you pay or how the app works for you.

We announce material changes in the app, and by email to everyone with an account, before they apply. We never apply a change to data we already hold without asking you first.

Change history

• October 2026: Added “Apps you connect”: an AI app you connect to your account sees your training, with your consent, and only while you stay connected.
• October 2026: Gymento’s widgets keep a copy of your next sessions and your streak on your phone, deleted when you sign out.
• September 2026: The session check-in’s 1–10 rating stays on your phone and is never sent to us; we keep only the change you chose. The Consumer Health Data Privacy Policy now says how that data is processed and kept, that no third party tracks it across sites, and how we announce changes.
• September 2026: The app no longer reads recovery data from Apple Health or asks a daily check-in. It asks how you feel when you start a session instead.
• September 2026: Email you send us now arrives through Apple’s iCloud Mail, then Gmail.
• September 2026: Added “If you email us”: what the app’s Email support attaches, your account ID included.
• September 2026: First version.