GymForm

Privacy Policy

Last updated: August 20, 2026

1. Introduction

Welcome to GymForm ("we", "our", or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the GymForm app.

By using GymForm, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information you provide during onboarding

Full name, date of birth, gender, height and weight, fitness goal, experience level, training frequency, and how you heard about us.

2.2 Information generated through use of the App

Exercise videos submitted for analysis (not retained on our servers — see Section 4), analysis results (exercise name, form score, feedback, tips), and analysis history and dates.

2.3 Account information (if you create an account)

Email address and authentication provider (Sign in with Apple).

2.4 Purchase information

Subscription status, plan type, purchase date, and renewal date. This is handled by Apple and RevenueCat — we do not store payment card details.

2.5 Technical information

Device type and iOS version (for crash reporting and compatibility), and product usage events — such as which app screens and features you use, and whether key steps like onboarding, analysis, or subscription actions are completed. These events are tied to an anonymous device identifier until you sign in, after which they are linked to your account.

2.6 Feedback you submit

If you send feedback from Profile → Settings, we store the message you write along with your app version and iOS version. When you are signed in, the feedback is linked to your account so we can follow up; when you are signed out, it is stored without any account identifier.

3. How We Use Your Information

We use the information we collect to personalise your coaching feedback, display your analysis history and progress, calculate your training streak, send workout reminders (only if you opt in), improve AI analysis quality, process your subscription, respond to support requests, and comply with legal obligations.

We do not sell your personal information to third parties. We do not use your information for advertising purposes.

4. Exercise Videos — Special Notice

When you submit a video for form analysis:

  • Your video is sent directly from your device to a third-party AI service for analysis.
  • Along with the video, we send the exercise name and profile context used to tailor your feedback — your age, gender, height, weight, experience level, and goal, plus a short summary of your recent analyses for that exercise.
  • Your video is never stored on GymForm's servers — it goes from your device straight to the AI provider.
  • Our AI provider does not use your video to train or improve its models. It may hold the video briefly for automated abuse and safety monitoring, after which it is deleted. It is never kept as part of your GymForm account.
  • Only the text-based result (score, feedback, tips) is saved to your account.
  • Your videos never touch GymForm's servers.

To illustrate your feedback, the app extracts a few short clips and still images from your video at the moments a fault occurs. This happens entirely on your device. They are stored only on your device, excluded from iCloud backup, and never uploaded to us or anyone else. They are deleted when you delete that analysis or your account.

If you turn on "Save recordings to Photos" (Profile → Settings — off by default), a copy of the clips you record in the app is saved to your device's Photos library so you can review them later. This copy stays on your device under your control and is never uploaded to us or anyone else. It applies only to videos you record in the app, not to videos you upload for analysis.

5. Third-Party Services

  • Third-party AI provider — AI video analysis
  • Supabase — Account data storage and sync (supabase.com/privacy)
  • RevenueCat — Subscription management (revenuecat.com/privacy)
  • PostHog — Product analytics, hosted in the European Union (posthog.com/privacy)
  • Apple — Authentication, payments, crash reporting (apple.com/legal/privacy)

6. Data Storage

Local storage (all users)

Your onboarding answers and analysis history are stored locally on your device. This data remains on your device even without an account.

Cloud storage (account holders only)

If you create a GymForm account, your profile information and analysis history are synced to our secure cloud database (Supabase), hosted on servers within the European Union.

7. Data Retention

  • Local data: Stored on your device until you delete the app or delete your account.
  • Account data: Retained while your account is active. Deleted within 30 days of account deletion.
  • Analysis results: Retained until you delete them or delete your account.
  • Videos: Never stored on our servers. Held briefly by the AI provider for abuse monitoring only, then deleted (see Section 4).
  • Keyframe clips and stills: Stored on your device only, until you delete the analysis or your account.
  • Photos copy (if you opt in): Stays on your device under your control until you delete it.

8. Your Rights

Depending on where you live, you have some or all of the following rights over your personal data:

  • Access — get a copy of the data we hold about you.
  • Correction — have inaccurate data fixed.
  • Deletion — have your data erased.
  • Portability — receive your data in a machine-readable format, or have it sent to another provider.
  • Restriction — ask us to pause processing while a dispute about accuracy or legitimate interests is resolved.
  • Objection — object to processing we carry out on the basis of our legitimate interests, including product analytics. Email us and we will act on it (see Section 12).
  • Withdraw consent — where we rely on your consent, withdraw it at any time. This does not affect processing already carried out.

To exercise any of these, email support@gymformapp.com. We may ask for information to verify your identity. We respond within one month.

You can delete your account and all associated data at any time via Profile → Settings → Delete Account. Deletion is permanent and cannot be undone.

9. Children's Privacy

GymForm is not intended for children under 13, and we do not knowingly collect personal information from them. Users aged 13 to 18 must have permission from a parent or guardian, as set out in our Terms of Service. Some countries set a higher minimum age for consenting to online services without a guardian; where that applies, the higher age governs.

Contact support@gymformapp.com if you believe a child has provided us with personal information without the required consent, and we will delete it.

10. Data Security

We implement encrypted data transmission (HTTPS/TLS), secure cloud infrastructure, row-level security on all database tables, and do not store payment card information.

11. International Data Transfers

Your account data and analysis history are stored in the European Union, and product analytics are processed there too. If you are located outside the EU, using GymForm means your data is processed in the EU.

Video analysis is different. When you submit a video, it and the accompanying profile context are sent to our third-party AI provider and processed in the United States, which is not covered by an EU adequacy decision. If you have questions about this transfer, contact us at support@gymformapp.com.

12. Additional Information for Users in Europe

Our legal bases for processing

  • Providing the app — delivering analyses, storing your history, syncing your account, processing your subscription: performance of our contract with you.
  • Product analytics and service improvement: our legitimate interest in understanding how the app is used and making it better. See "Product analytics" below.
  • Security, fraud prevention, and enforcing our Terms: our legitimate interests, and compliance with legal obligations.
  • Workout reminders and other optional notifications: your consent, withdrawable at any time in Settings.
  • Responding to support requests and feedback you send us: our legitimate interest in supporting our users.

Product analytics

We use a privacy-focused analytics service, hosted in the European Union, to understand how the app is used — which screens are visited, and whether steps like onboarding or an analysis are completed. We do not use Apple's advertising identifier. We do not track you across other apps or websites, we do not build advertising profiles, and we never sell or share this data. Events are tied to a random identifier while you are signed out, and linked to your account once you sign in.

We rely on our legitimate interests for this, balanced against the limited and non-sensitive nature of the data. If you would like to object, email support@gymformapp.com and we will delete the usage data associated with you. If you want us to stop collecting it going forward, you can delete your account at any time via Profile → Settings → Delete Account, which erases that data and unlinks your device from your account.

Automated processing

Your feedback is generated automatically by an AI model, without human review. It is coaching guidance only — it produces no legal or similarly significant effect, and it is not used to make decisions about you. It can be wrong or incomplete. Nothing in it is medical advice, and it does not replace a qualified professional. If you want a human to look at an analysis, email support@gymformapp.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date and, where appropriate, by sending a notification through the App.

14. Contact Us

Email: support@gymformapp.com

GymForm is committed to your privacy. Your videos never touch GymForm's servers — they go straight from your device to the AI provider, which does not train on them and deletes them after a short safety-monitoring window. Only your text results are saved to your account. Keyframe images stay on your device. (If you opt in, a copy of clips you record is also saved to your own device's Photos — see Section 4.)