Privacy Policy

Account

• Name, email address, sex, date of birth, language

Body and goals

• Height, weight, target weight, goal and activity level

Nutrition and training

• Meals, portions, nutritional values, workouts, sets and weights
• Photos: meal scan photos are used only for the analysis and are not stored. Progress photos you add yourself are stored privately and visible only to you

Health Connect and Apple Health — only with your consent

• Steps, heart rate and resting heart rate, sleep, weight, calories burned and workouts

Coach and community

• Conversations with Coach Activ and what the coach remembers about your preferences
• Friends, chat messages, challenges and the statistics you share (adjustable)

Subscription and technical

• Subscription status (no payment data), device type, app version, push token and crash reports

Data about your weight, nutrition, workouts, heart rate and sleep is health data. We only process it with your explicit consent, which you give when creating your account.

You can withdraw that consent at any time: turn off the connection with Health Connect or Apple Health in your phone's settings, or delete your account. Withdrawal applies to the future.

We only use data from Health Connect and Apple Health to show it to you in the app and guide you. We never use it for advertising and do not sell or share it with third parties for other purposes.

• Supabase — database, sign-in and storage (including your progress photos)
• Anthropic (Claude) — AI for the coach, meal scan and reports. Does not use your data to train models and only keeps it for a limited time for security
• RevenueCat — management of your subscription status
• Apple and Google — purchases, subscriptions and push notifications
• Expo — sending push notifications
• Sentry — crash reports to keep the app stable
• Our email service — confirmation and reset emails

Agreements oblige all these parties to process your data only on our behalf and to secure it. Your friends only see what you share with them.

Some processors are based in the United States. These transfers only take place with appropriate safeguards: the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

• Account and usage data: as long as your account exists
• After deleting your account: your account, data and photos are erased immediately; backups within 30 days
• Meal scan photos: not stored. Progress photos: until you delete them or delete your account
• Coach conversations: a limited number of recent messages, up to 30 days with Premium
• Crash reports and technical logs: 90 days maximum
• Accounting data: as long as the law requires

The AI features give suggestions and estimates. No decisions are made that have legal effects on you or significantly affect you: you always decide.

• Access to your data
• Correction of inaccurate data
• Erasure of your account and all your data, yourself in the app: Profile → Delete account
• Restriction of processing
• Portability of your data
• Objection to processing based on legitimate interest
• Withdrawing your consent at any time

Send your request to gymactivapp@gmail.com; we reply within one month. You can also lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be) or the authority in your country.

• Encrypted connections (TLS)
• Secure sign-in and per-user access rules in the database
• No payment data on our servers

GymActiv is not intended for people under 16.

We announce material changes at least 14 days in advance in the app or by email.

The data controller is Mohamed El Bouchattaoui, under whose direction GymActiv is developed and managed.

Trading name GymActiv · Fortuinstraat 34, 2800 Mechelen, Belgium · company number 1041.515.724 · VAT BE 1041.515.724

For any question about your data, you can reach us at gymactivapp@gmail.com.