Privacy Policy

Last updated: 12/5/2025

1. Information We Collect

We collect information that you provide directly to us, such as when you create an account, update your profile, or request support. This information helps us provide you with a personalized fitness experience. Categories of data we collect include:

  • Identity Data: Name, email address, and profile photo.
  • Profile Data: Age, gender, fitness goals, and physical statistics.
  • Activity Data: Workout history, exercises performed, and progress logs.
  • Location Data: Precise or approximate location to identify nearby gyms and potential workout partners (only if you grant permission).
  • Media Access: Access to your camera or photo library to facilitate photo sharing and profile updates (only if you grant permission).
  • Contact List: To help you discover friends who are already using GymRat (only if you grant permission).
  • Usage Data: Information about how you navigate and interact with our services to help us improve performance.

2. How We Use Your Information

We utilize the collected data for the following purposes:

  • Service Delivery: To provide, maintain, and enhance the functionality of the GymRat app.
  • Communications: To send you important updates, security alerts, and administrative messages.
  • Support: To respond to your inquiries and troubleshoot issues.
  • Personalization: To tailor workout recommendations and content to your fitness goals.
  • Social Features: To facilitate connections with friends and the broader fitness community.

3. Information Sharing and Disclosure

We value your trust and do not sell your personal data. We may share your information only in the following circumstances:

  • Consent: When you explicitly grant us permission to share your data.
  • Legal Compliance: To comply with applicable laws, regulations, or valid legal requests.
  • Protection of Rights: To enforce our terms and protect the safety, rights, or property of GymRat or its users.
  • Service Providers: With trusted third-party vendors who assist in our operations (e.g., cloud hosting, analytics), bound by strict confidentiality obligations.

4. Data Security

We employ industry-standard security protocols to safeguard your personal information. Our measures include:

  • Encryption: Data is encrypted both in transit (using TLS/SSL) and at rest.
  • Access Control: Strict access controls ensure that only authorized personnel can access personal data.
  • Secure Infrastructure: We utilize reputable cloud service providers with robust security certifications.

5. Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes outlined in this policy or as required by law. Upon your request or account deletion, your data will be securely removed from our active systems.

6. Your Rights and Choices

Depending on your jurisdiction, you may have specific rights regarding your data:

  • Access & Portability: Request a copy of the personal data we hold about you.
  • Correction: Update or correct inaccuracies in your personal information.
  • Deletion: Request the permanent deletion of your account and associated data.
  • Opt-Out: Unsubscribe from promotional communications at any time.

7. Cookies and Tracking

We use cookies and similar technologies to analyze usage patterns, prevent fraud, and improve user experience. You can manage your cookie preferences through your device or browser settings.

8. Third-Party Links

Our Service may contain links to external sites not operated by us. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review their privacy policies.

9. Age Restriction

Our Services are strictly intended for individuals who are 18 years of age or older. We do not knowingly collect, use, or disclose personal information from anyone under 18. If we become aware that we have inadvertently collected personal data from a user under 18, we will take immediate steps to delete such information from our records. By accessing or using GymRat, you certify that you are at least 18 years of age.

10. Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by updating the date at the top of this policy.

11. Contact Us

For any questions or concerns regarding this Privacy Policy or our data practices, please contact our privacy team:

12. Data Protection Authority

If you are located in the European Union, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.