Privacy Policy

Last updated: 24 June 2026

GymXP ("we", "us", "our") is operated by Nicholas Hall, a sole trader based in the United Kingdom. This policy explains what personal data we collect, how we use it, and your rights under UK GDPR.

1. Data We Collect

When you use GymXP we may collect:

Account data — name or display name, email address, and profile information you provide when signing in with Apple or Google.
Fitness data — workout logs, exercise history, sets, reps, weights, and personal records you record in the app.
Nutrition data — food logs, macro targets, and meal information you enter manually or via barcode scan.
Health data — if you grant permission, workout and sleep data synced from Apple Health or Google Health Connect. Workout data is written to Apple Health or Health Connect automatically after each session. Sleep duration from the previous night may be included in AI coach requests to provide more relevant advice (for example, flagging under-recovery). No raw health data is stored on our servers — it is used only within the AI request and not retained.
Subscription data — purchase receipts and subscription status, processed by RevenueCat on our behalf.
Crash and error reports — anonymised diagnostic data collected via Sentry to help us fix bugs. No identifiable fitness or health data is included.
Usage analytics — anonymised data about how the app is used (for example, screens viewed and actions such as signing up or completing onboarding), collected via Amplitude to help us understand and improve the experience. This does not include your fitness, nutrition, or health content. You can turn it off at any time in Settings → Privacy & Data.
Device data — operating system version and device type, used solely for compatibility and support.

2. How We Use Your Data

To provide and improve the GymXP app and its features.
To manage your subscription and process payments.
To power the AI coach, which uses your workout history, personal bests, nutrition data, streak, and sleep duration to give personalised advice. This data is sent to Anthropic's API for the duration of the request only and is not stored or used for training by Anthropic.
To sync your data across your devices via Firebase.
To diagnose and fix crashes and bugs.
To understand how the app is used and improve it, using anonymised product analytics. You can opt out at any time in Settings → Privacy & Data.

3. Third-Party Services

GymXP uses the following third-party services, each with their own privacy policies:

Firebase (Google) — authentication and cloud data storage.
RevenueCat — subscription and payment management.
Anthropic — AI coach functionality (Claude API). Data sent to Anthropic is used only to generate a response and is not retained for training.
Sentry — anonymised crash reporting.
Amplitude — anonymised product analytics to help us understand app usage and improve features.
Open Food Facts / USDA FoodData Central — public food databases used for nutrition lookups. No personal data is sent to these services.

4. Data Storage and Security

Your account and workout data is stored in Firebase Firestore, hosted in the EU. We take reasonable technical measures to protect your data. Your local SQLite database on-device is not backed up to any external server beyond Firebase.

5. Data Retention

We retain your data for as long as your account is active. You can request deletion of your account and all associated data at any time from within the app (Profile → Settings → Delete Account). Deletion is permanent and irreversible.

6. Your Rights (UK GDPR)

You have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request erasure of your data.
Object to or restrict certain processing.
Data portability.

To exercise any of these rights, contact us at nichallsoftware@gmail.com.

7. Children

GymXP is not directed at children under 13. We do not knowingly collect data from children under 13.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes within the app. Continued use of the app after changes constitutes acceptance of the updated policy.

9. Contact

If you have any questions about this policy, please contact us at nichallsoftware@gmail.com.