Privacy Policy

1.The short version

• You can use most of GymGuide without an account; your plan then lives only in your browser.
• With an account we store your plans, logs and preferences so they follow you. We don't sell your personal information and we don't show your plans or logs to anyone.
• We use Google Analytics to see how the site is used, and AI services to power the coach and to check Community posts.
• Community posts from gyms and trainers are public. Members' personal posts and profiles are visible only to signed-in members, and never to search engines.
• Members under 18 get extra protection: private profiles, no location, no promotions.
• You can delete your account yourself at any time.

2.What we collect and why

We collect what you give us, what your use of GymGuide creates, and a little technical information from your browser.

GymGuide is a fitness tool, not a medical service. Body measurements and training logs are health-related, so we treat them with extra care: they're visible only to you, and they're never used for advertising.

3.Cookies and similar storage

We keep cookies and browser storage to the ones that make the site work or tell us how it's used:

• Sign-in (Supabase session cookies) — keep you signed in. Essential.
• Your plan on this device (browser storage, keys starting gg.) — your plan, logs and preferences when you're not signed in.
• First visit (gg_ft) — remembers the campaign that brought you, so it can be saved when you sign up.
• Community device check (gg_cdv) — a random ID used, only as a one-way hash, to stop someone under 15 from simply retrying the age check.
• Partner link counts (gg_sid) — a random ID to count clicks on grocery and retailer links.
• Google Analytics (_ga cookies) — how pages are used. Blocking these doesn't affect the site.
• Exercise videos play from YouTube's privacy-enhanced mode; YouTube may set its own cookies once you press play.

You can clear or block cookies in your browser. Blocking the sign-in cookies signs you out.

4.Who we share it with

We share personal information only with the services that run GymGuide for us, under contracts that limit them to doing that, and when the law requires it:

• Supabase — our database, sign-in and file storage.
• Vercel — hosting; it handles every request, including your IP address.
• OpenAI — generates AI coach answers, meal ideas and plan notes, and checks Community text and photos for things our guidelines don't allow. Its API terms say it doesn't train its models on this data.
• Resend — sends our emails (sign-in links, coaching check-ins you opted into, notices).
• Google — Google Analytics (usage measurement) and YouTube (exercise videos).
• Stripe — payments from businesses.
• Gyms and trainers — only what you send them through an enquiry or booking form.
• Safety and the law — we report child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC), and we respond to valid legal requests. We may also share information to protect someone from serious harm.

If GymGuide is ever sold or merged, your information would move with it under this policy, and we'd tell you first.

5.The Community: what's public

• Public: posts and offers from gyms and trainers, on their listing pages and city pages. Search engines can index them.
• Members only: your community profile, personal posts, comments and follower lists are visible only to signed-in members (and only to approved followers when your profile is private). They're never offered to search engines.
• Never shown: your email address, your birth month and year (it's used only to apply the age rules), and the moderation record attached to each post.
• No private messages. GymGuide has no direct messages between members.
• Read the Community Guidelines and how we keep members safe on the safety page.

6.Members under 18

Site accounts are for people 13 and older; the Community is for members 15 and older. We don't knowingly collect personal information from children under 13 — if you think a child under 13 has an account, tell us and we'll delete it. When someone tells the Community they're under 15, we keep only one-way hashes of their account, email and device so the check can't simply be retried — until the month they turn 15 (30 days for the device).

For members aged 15 to 17:

• Profiles are private and can't be made public; members under 18 never appear in an adult's search.
• Their posts are visible only to followers they approved. An adult can't comment on their posts unless the teen follows them.
• No location: their home gym and city are never shown or used for a nearby feed.
• No promotions: offers from gyms and trainers are never shown to them in the Community or on listing pages while they're signed in.
• Their photos are checked by a person before they appear.

7.How long we keep it

• Your account and everything tied to it — until you delete it. A post or comment you delete disappears from GymGuide at once and is erased for good when you delete your account.
• Moderation records (decisions, reports and their reasons) — as long as needed to keep the Community safe and handle appeals. They don't include your content where we can avoid it.
• Content preserved for a legal report — kept, with access limited to our safety team, as long as the law requires, even if the account is deleted.
• Backups — deleted data can remain in encrypted backups until they cycle out.
• Financial records — as long as tax and accounting law requires.

8.Your choices and rights

• See and correct: your plans, logs and profile are on your dashboard and progress page; edit them there.
• Delete: Delete my account shows exactly what will be deleted and does it straight away.
• A copy of your data, or anything else: email hello@gymguide.ai from the address on your account. We'll answer within 30 days, and we won't treat you differently for asking.
• Emails: every coaching email has an unsubscribe link, and you can turn them off on your dashboard.
• Depending on where you live, you may have further rights (for example to object or to complain to a regulator). Ask us and we'll help.

9.Security

Data is encrypted in transit and at rest with our providers. Access is limited by database rules so each account sees only its own data, and staff access is limited to what their job needs. No system is perfectly secure; if something goes wrong that affects you, we'll tell you.

10.Changes and contact

We'll update this policy as GymGuide changes and show the date at the top; for a material change we'll tell signed-in members first. Questions or requests: hello@gymguide.ai or the contact form. See also our Terms of Use and legal & health disclaimers.

Struggling or thinking about self-harm? In the US, call or text 988, any time.