Privacy Policy
This Privacy Policy describes how Gynus is operated by Kedson Alves da Silva ("we," "us," or "our") and how we collect, use, disclose, and protect information when you use the Gynus mobile application and related services.
1. Contact
If you have questions, requests, or complaints about this Privacy Policy or our data practices, contact us at support@gynus.fit.
2. What Gynus Does
Gynus is a workout tracking app. You build reusable routines, log your workouts set by set, and follow your personal records and progress over time. Gynus also includes a private motivation space that only you can see, optional workout reminders, and optional social groups where a small crew shares workouts and keeps each other accountable.
3. Information We Collect
We collect the following categories of information:
A. Account and profile information
- Display name and optional profile photo
- Your email address, and the Apple or Google account identifier if you sign in with one of those services
- Internal profile, authentication, and session identifiers used to bind a device session to a profile, including legacy profile fields such as an access code, tagline, and accent color carried over from earlier versions of the app
- Your preferred weight unit (kg or lb)
- Your weekly workout target and the answers you give during onboarding, such as your workout experience and what you find hardest about working out
B. Workout tracking information
- Routines you create, including routine names, the exercises in them, and target sets, reps, and weights
- Custom exercises you create, including the name, muscle group, and tracking type
- Workouts you log, including the date, start and end time, and duration
- The sets you record for each exercise, including weight, repetitions, or duration, and which sets you completed
- Personal records derived from your sets, such as heaviest weight, most repetitions, best volume, and estimated one-rep max
- Progress data derived from your workouts, including per-exercise and per-muscle-group trends over time
C. Private motivation information ("My area")
- The reason you write down for why you are working out
- Optional "before" and "after" photos you add to your journey
- Notes and photos you save as memories, and whether you pinned them
- Workout posts and comments you choose to save to your own space, including a copy of the original text, the author's display name, and the original timestamp
This content is private to your account. It is not shown to your groups or to other users.
D. Group and social activity information
- Group membership, role, and membership periods
- Group names and configured weekly targets and time zone
- Group invite links and the tokens they contain
- Workout posts you share to a group, including the date, optional caption, and optional photo
- Comments and reactions you post
- Shared progress, streak, completion, and achievement data derived from group activity
E. Reminders and notifications
- Your workout reminder schedule, including the weekdays and time you choose, your time zone, and your language
- Your notification preferences
- A push notification token for your device installation, so we can deliver reminders and notifications
- Records of reminders we have sent, so we do not send duplicates
F. Purchases and subscriptions
If you buy a paid plan, the purchase is processed by the App Store or Google Play. We do not receive or store your payment card details. We use RevenueCat to manage entitlements, and it processes purchase receipts, transaction and product identifiers, subscription status, and an app user identifier tied to your profile so the app knows whether your plan is active.
G. Analytics and diagnostics
- Usage events describing how the app is used, such as screens opened and actions taken
- App lifecycle events, such as opening and backgrounding the app
- Crash and error reports, including uncaught exceptions and unhandled errors, with technical diagnostic details
- Device and app context, such as platform, app version, and a generated analytics identifier
- Feature flag assignments used to enable or test features
We use PostHog for this. We use it to understand how Gynus is used, fix crashes, and improve the app.
H. Moderation and safety information
- Reports you submit about workout posts or comments
- Block records when you block another user
- Identifiers for the reporter, reported user, related group, post, or comment
- Content snapshots, such as the reported caption, comment body, image reference, timestamps, and related profile details, so we can review the report
- Moderation status, review notes, and enforcement actions
I. Device, app, and local storage information
- The currently selected group ID stored on your device
- Authentication and session data stored on your device to keep you signed in
- An in-progress workout saved on your device so you do not lose it if the app closes mid-session
- Camera or photo library permission status, when you choose to use those features
- Notification permission status, if you choose to enable reminders
- Technical data needed to upload media and operate the service, such as timestamps and request metadata
J. Information you choose to submit
Anything you include in routine names, custom exercise names, captions, comments, private notes, or photos may contain personal information, depending on what you choose to share.
K. Information we do not collect
Gynus does not request your precise location, contacts, microphone, or advertising identifier, and it does not include third-party advertising SDKs. Gynus does not connect to Apple Health, Google Fit, or Health Connect, and does not read health or fitness data from your device. The workout information in Gynus is only what you enter yourself.
4. How We Use Information
We use the information above to:
- Provide and operate Gynus
- Authenticate your account and connect a device session to the correct profile
- Save your routines and workouts, and show your history, records, and progress over time
- Keep your private motivation space available to you across your devices
- Show your groups, workout feed, achievements, comments, and reactions
- Upload and display photos you choose to post or save
- Send the workout reminders and notifications you have enabled
- Determine whether you have an active paid plan and unlock the corresponding features
- Synchronize activity across group members in near real time
- Maintain app security, detect misuse, debug errors, and improve reliability
- Understand how the app is used so we can improve it
- Filter objectionable text, review reports, process blocks, enforce our terms, remove offending content, and restrict or eject abusive users
- Comply with legal obligations and enforce our terms or community rules
We do not sell personal information, and we do not use Gynus for third-party advertising or cross-context behavioral advertising.
5. Camera and Photo Library Access
Gynus asks for camera and photo library access only when you choose to:
- Take or choose a profile photo
- Take a workout photo to share with a group
- Add a private photo to your motivation space, including "before" and "after" photos
You can deny these permissions and still use the app, including workout tracking, without photo uploads. You can also change these permissions later in your device settings.
6. How Information Is Shared
A. With other members of your group
If you use the social features, other members of your group may be able to see:
- Your display name and profile image
- Workouts you share to the group, including the date, caption, uploaded photo, and the exercise breakdown of that workout
- Personal records you set in a workout you shared
- Your comments and reactions
- Your contribution to shared progress, streaks, and achievements
B. What stays private to you
The following are not shared with your groups or other users:
- Everything in your private motivation space, including your written reason for working out, your "before" and "after" photos, your saved notes and memories, and any posts or comments you saved to that space
- Your routines and custom exercises
- Workouts you log but do not share to a group
- Your full workout history, records, and muscle-group progress charts
- Your reminder schedule and your weekly target
C. With service providers
We use third-party providers to operate the app. They process information on our behalf so the app can function:
- Supabase: authentication, database, realtime features, and file storage
- Apple and Google: sign-in, when you choose to sign in with an Apple or Google account
- RevenueCat: purchase and subscription entitlement management
- Apple App Store and Google Play: payment processing for paid plans
- Expo push notification service, together with Apple Push Notification service and Firebase Cloud Messaging: delivery of reminders and notifications to your device
- PostHog: product analytics, crash and error reporting, and feature flags
D. Important photo-storage note
Workout photos are uploaded to private cloud storage and displayed through time-limited signed URLs for authorized group members. Private motivation photos are stored in private cloud storage that only your own account can read. Profile photos may be served through public URLs so they can appear in the app.
E. Moderation and internal review
When you report content or block a user, the report and related content snapshot may be reviewed by us, our internal Gynus moderation team, and tools or service providers we use to manage the review queue. We use this information to investigate reports, act within 24 hours where required, remove objectionable content, restrict or eject abusive users, and protect the service.
F. Legal and safety disclosures
We may disclose information if reasonably necessary to:
- Comply with law, regulation, legal process, or valid government requests
- Protect the rights, safety, and security of users, the public, or our service
- Investigate fraud, abuse, or security issues
7. Data Retention
We retain personal information for as long as reasonably necessary to operate Gynus, keep your training history available to you, comply with legal obligations, resolve disputes, and enforce agreements.
In the current app build:
- Local session data and any in-progress workout may remain on your device until you finish or discard the workout, clear app storage, or uninstall the app
- Your routines, workouts, sets, records, private motivation content, group activity, profile data, and uploaded photos remain in the backend until they are deleted by you in the app, by us, or at your request
- Deleting a routine or a memory in the app removes it; deleting your account removes the associated data as described in Section 8
- Reminder delivery records and moderation records may be retained for as long as needed for reliability, safety, and legal purposes
8. Your Choices and Rights
Depending on where you live, you may have rights to request access to, correction of, deletion of, or export of your personal information, and to object to or restrict certain processing.
You can currently:
- Track workouts without joining any group, and without posting anything to a feed
- Choose not to upload photos
- Delete individual routines, memories, and posts in the app
- Turn workout reminders off, or change the days and time, in the app
- Control camera, photo library, and notification permissions in your device settings
- Manage or cancel a paid plan through your App Store or Google Play account settings
- Request deletion of your account and associated data, or ask for privacy help or correction, by contacting us at support@gynus.fit
If you are in the EEA, UK, or another jurisdiction with similar privacy rights, you may also have the right to lodge a complaint with your local data protection authority.
We do not currently use automated decision-making or profiling that produces legal or similarly significant effects.
9. Legal Bases for Processing (EEA/UK)
If EEA or UK privacy law applies, we generally rely on the following legal bases:
- Performance of a contract: to provide the app, save your training data, connect you with your group, display your activity and content, and deliver any paid plan you purchase
- Consent: when you choose to grant camera or photo library access, upload optional media, or enable push notifications and workout reminders
- Legitimate interests: to secure, maintain, troubleshoot, analyze, and improve the service, and to prevent misuse
- Legal obligation: where processing is required to comply with applicable law
10. International Transfers
Your information may be processed in countries other than the country where you live, depending on where we and our service providers operate our systems. Where required by law, we will use appropriate safeguards for international transfers of personal data.
11. Children's Privacy
Gynus is not directed to children under 13, or the higher minimum age required by local law. If you believe a child has provided personal information to us, contact us at support@gynus.fit so we can review and address the issue.
12. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where required, provide additional notice.