Terms & Privacy.

Last updated 1 November 2026

This page covers both the terms for using Gymarc and its privacy policy. Gymarc is for adults aged 18 or older. By creating an account you confirm that you are at least 18 and agree to use the service responsibly and lawfully. The short version on privacy: your data is yours, it exists so the app can work, and it is never sold or used for advertising.

Fitness and AI disclaimer

Gymarc is a workout log, not a medical service. Its coach can make mistakes and does not replace a doctor, physiotherapist, qualified trainer, or your own judgment. Stop exercising and seek appropriate help if you feel pain, dizziness, or another concerning symptom.

Your account

You are responsible for protecting your sign-in details and for the workout information you enter. You keep ownership of that information. You give Gymarc permission to process it only as needed to provide the features described below.

Acceptable use

• Do not abuse, overload, reverse engineer, or interfere with the service.
• Do not use automated accounts or the AI endpoints to consume excessive resources.
• Do not enter unlawful, abusive, or third-party confidential information.

Availability

Gymarc is provided on an “as available” basis. Reasonable care is taken to protect data and keep the service working, but uninterrupted operation or perfect AI interpretation cannot be guaranteed. Export your workout data periodically if it is important to you.

Ending use

You may export your workouts or delete your account at any time from the profile screen. Gymarc may restrict abusive use that threatens the service or other users.

What Gymarc stores

• Account: your email address and a securely hashed password.
• Workouts: the exercises, sets, reps, weights, and notes you log, with their dates.
• Saved workouts: the workout names and exercise targets you save sync with your account. Unfinished guided targets stay on your device; only sets you log become workout history.
• Cardio: the runs, walks, rides, swims and rows you log — activity type, distance, duration, date, and any note. Cardio records are not automatically included in AI context. Anything you type into a message may still be sent with that message.
• Body measurements (optional): the weigh-ins you record, and — if you choose to give them — your height, date of birth and gender. Every one of these is optional, you are never required to answer, and you can clear any of them at any time from Body weight. Gymarc stores a date of birth rather than an age so the figure cannot silently go stale; it is not used to verify your age.
• Training goal (optional): whether you are training to lose fat, build muscle, maintain, build strength or stay consistent, and an optional target weight.
• Coach chat: messages sent to AI coaching and its replies are stored with your account. Supported history questions are answered on your device without sending the question to an AI provider. Those questions, answers and workout links are saved in account-specific history on this device. If you explicitly choose “Share and ask Coach” for an AI follow-up, up to six recent messages are copied to your account and sent to OpenAI for context. Workout links remain local. AI conversations are grouped into separate chats; opening Coach starts a fresh chat, and History lets you reopen an older one.
• Preferences: theme, units (kg/lb), and week start are saved only on your device. Your weekly training target and featured lifts sync with your account.

Where it lives

Workout data and your account are stored with Supabase, a hosted database service. Your data is protected so that only your signed-in account can read it.

The iOS interface is included in your installed Gymarc app. Signed-in sessions keep a local offline cache so a weak connection does not erase an in-progress workout. Workouts left on a device by the removed guest preview are not read by the app and are cleared when you delete your account.

Birthday is optional. Gymarc uses its month/day for an in-app birthday message and to skip that day’s reminders, without changing your recurring training schedule. A February 29 birthday is recognized on February 29. Device reminders are scheduled for up to eight weeks ahead and refreshed during app use; they are not a guarantee of background execution, and iOS Focus/notification settings can suppress delivery. Finishing a workout in Gymarc cancels pending reminders known to this iPhone; changes on another device require this iPhone to refresh.

Optional demo analysis

The welcome demo shows a local preview without sharing data. The current iOS release uses this local preview; signed-in AI analysis and Coach remain available separately with your consent. If public demo AI is configured in a future release, it will require optional adult consent and Cloudflare Turnstile verification. Only the submitted entry and its unit would be sent to OpenAI; no account history would be included and no workout would be saved. Verification would use a separately configured HTTPS page and return a short-lived token to the app. No public demo verification page is configured in this release.

AI processing

Before any personal data is sent to an AI provider, Gymarc asks for your explicit permission and confirmation that you are at least 18. Choosing “Not now” leaves AI sharing off. You can turn it off later from Terms & Privacy → “Allow AI processing”.

Common shorthand such as “bench 3x8 60” is understood on your device and is not sent to an AI model. When a more complex line needs interpretation, that line and names of exercises you recently used are sent to the OpenAI API only after permission is granted.

With AI sharing enabled, Gymarc can name a saved workout by comparing its exercise names and muscle groups with a catalogue of common workout types. Naming does not send weights, notes or profile details. The name is saved with your workout and reused; without AI sharing or connectivity, a simple label is derived on your device.

When you ask the coach a question, Gymarc sends the question, up to 12 of your recent workout sessions, up to 60 all-time best-exercise summaries, and up to 6 recent messages from the selected conversation (including on-device messages you explicitly chose to share) to OpenAI so the answer can use your history. If you have supplied them, your latest weigh-in, height, age and gender and your training goal are sent with it, so the advice fits you rather than an average person. Anything you left blank is not sent, and clearing a field stops it being sent from then on. Your email address and password are never included in that prompt. OpenAI processes this information to return the requested AI result; Gymarc does not use it for advertising.

AI logging and coaching are available to signed-in adults who enable AI data sharing, subject to service availability and usage limits. Gymarc calls OpenAI’s Responses API with stored responses disabled (store: false), no tools and no persistent conversation. Under OpenAI’s data controls, API content is not used for model training by default. Abuse-monitoring logs can retain prompts, context and replies for up to 30 days, with authorized review and legal or safety exceptions. Temporary prompt caching can retain encrypted model state for up to 24 hours. Gymarc has not obtained Zero Data Retention approval. Do not submit injuries, medical details or other unnecessary confidential information. Gymarc does not include your account email, display name, password, or account ID in the OpenAI prompt.

Optional iPhone features

Workout reminders are scheduled on your iPhone only after you enable them and allow notifications. Their text does not include your workout details. Reminders are cancelled when you sign out.

While signed in, Gymarc automatically keeps a local snapshot for its optional Home Screen widgets. This shares your training calendar, completion dates, saved-workout titles and identifiers, and the title/date/set count of your latest workout with Gymarc’s own extension on this iPhone. They follow the same appearance and schedule as the app. No account tokens, set weights, private notes or body measurements are shared. The shared snapshot is cleared on sign-out; iOS may display a previously cached widget until it refreshes.

Apple Health is a separate opt-in. After you connect Apple Health, Gymarc exports finished lifting workouts, cardio and weigh-ins while the app is in use; Sync now also lets you request an export. Cardio workouts can include associated distance samples for supported activities when you allow that write permission. Date-only weigh-ins use local noon, because their original time is unknown. Only Gymarc's own exported samples are inspected to update or remove copies. No Health records are imported into Gymarc, Supabase or AI. Later complete syncs reflect Gymarc edits and deletions. Disconnecting or deleting a Gymarc account leaves Health copies in Health; remove them first with “Remove Gymarc copies from Health”, or manage them in Health. Reinstalling can remove the local record of older copies, so use Health to manage them.

When enabled after setup, Sign in with Apple can use Apple's private relay email. Apple credentials used for revocation are encrypted on Gymarc's server and restricted from other account users. The app checks native credential revocation and attempts to revoke Apple authorization on account deletion; if Apple is unavailable or a legacy token is missing, deletion still proceeds and instructions explain manual revocation.

The website also requests the Inter font stylesheet from Google Fonts, which can process network request information before AI sharing is enabled. This is separate from OpenAI requests. Authentication emails use the email delivery service configured for Gymarc's Supabase project; the operator must verify that service and its retention before public launch.

Retention

Account workouts, coach messages, and profile information are kept while your account exists so they remain available across devices. Deleting coach history removes those messages; deleting the account removes the account and its associated active Gymarc rows. Backups, security logs and third-party processing have separate retention rules; deletion does not instantly erase every backup or another device's offline cache. Contact support for the current backup schedule or a complete personal-data request. OpenAI processing follows the retention described above.

What Gymarc doesn’t do

• No advertising, cross-site tracking, or analytics cookies.
• No selling your data. Supabase and OpenAI act as service providers needed to operate Gymarc.
• Gymarc's operator does not routinely read your data. Limited access may occur when you request support, or when reasonably necessary for security, abuse prevention, or legal compliance.

Your controls

• Export: Menu → Settings → “Export my data (CSV)” downloads logged lifting sets, notes and cardio entries in CSV format. This export does not include weigh-ins, goals, saved routines, preferences or coach chat.
• Delete your account: in the app, open Menu → Settings → “Delete account”. On successful server confirmation, this deletes your active account and its workouts, sets, notes, cardio sessions, chat messages, usage events and AI quota counters. This cannot restore deleted active records through the app. Backup expiry and provider/security-log retention are separate. You can also email the address below and we’ll do it for you.
• AI permission: Terms & Privacy → “Allow AI processing” lets you grant or withdraw permission. When it is off, Gymarc does not call OpenAI.
• Coach history: Menu → Settings → “Delete coach history” permanently removes your account’s saved AI questions and replies and its on-device Coach history on the current device, without deleting workouts. On-device answers on another device can be removed by clearing Coach history there or clearing that device’s app data.

Training backups

You can export a private JSON training backup containing finished lifting workouts, cardio, weigh-ins, saved workouts, profile details, schedule and preferences. It excludes account credentials, chats, AI permission and device permissions. Restore adds missing training records; replacing profile and schedule settings requires a separate choice. Keep this unencrypted file private.

Website and waitlist

If you join the waitlist on the Gymarc website, Gymarc stores your email address, a personal referral code, the code of the person who invited you (if any), the source of your visit (for example a TikTok or Instagram link) and the time you joined. This is used only to tell you about the Gymarc beta and launch and to work out your place in line. It is stored in Gymarc’s database (Supabase), is never sold, and is never used for advertising. The website itself uses no advertising or analytics trackers. Your place in line and invite link are saved in your browser’s local storage so the page can show them again; clearing the site’s data removes them. The site is hosted by Cloudflare, which processes standard request data such as your IP address to deliver pages. To be removed from the waitlist, email the address below and your entry will be deleted.

Contact

Questions or deletion requests: [email protected]

← Back to Gymarc