Last updated: November 1, 2026
Gymlette is a workout and health tracking app. This policy explains what data the app handles, where it goes and how long it's kept. Short version: your workouts live on your device and in your own account; Coach's AI conversations are kept for 12 months so Coach can be fixed and improved; nothing is sold or shared with advertisers.
When you first open Gymlette, the app creates an account for you with a random account id (an anonymous Firebase Authentication account). This happens whether or not you ever sign in, and no name or email is attached to it. The data described below that's kept in the cloud is stored under this account id.
So you can get the same account back after reinstalling the app or on a new phone, the app also creates a random recovery code and keeps it in your device's secure storage that's backed up by Apple or Google: iCloud Keychain on iPhone, or Google's backup for Android. Gymlette's servers keep only a one-way fingerprint (hash) of the code, never the code itself. Recovery is best effort: if iCloud Keychain or Google backup is off, or you move between iPhone and Android, you get a new account instead.
Inactive accounts: an account that isn't signed in with Google or Apple is kept as long as it has data you've logged, such as workouts, meals or body measurements, until you delete it. If such an account has no logged data (stored Coach conversations alone don't count) and hasn't been used for 12 months, we delete it, along with everything stored under it.
You can sign in with Google or Apple. This is the reliable way to keep your data across devices and platforms. Signing in links your existing account id to that sign-in, so nothing you've stored is lost. Firebase Authentication receives your email address and name from Google or Apple (with Apple you can hide your email). They're used only to sign you in, and never sent with analytics or to the AI.
Workouts, meals, body measurements, Coach chats and settings are stored on your device. iOS may also include them in your device's own iCloud backup.
Your app data (workouts, meals, body measurements, templates and settings) is backed up to Google Firebase (Firestore) under your account, including the random account if you haven't signed in, and is readable only by that account. The settings part includes short notes from your recent Coach conversations and recent scan results. You can restore, overwrite or permanently delete this backup in Settings.
With your permission, Gymlette reads and writes data via Apple Health (iOS) or Health Connect (Android): steps, heart rate, sleep, weight, body fat, blood pressure and workouts. Health data is used to show and record your activity and to give Coach context. When Health sync is on, Coach is sent summaries of workouts you recorded in other apps (activity type, date, duration and source app) so it can take them into account. Those summaries are sent to Google's Gemini and stored with your Coach conversations, as described in "Coach (AI)" below. Health data is never sold and never used for advertising. You can revoke access at any time in your device's health settings.
Coach (post-workout debriefs, Monday recaps, the Ask Coach chat and live-workout tips) is powered by Google's Gemini API, reached through Google Firebase. To answer, the app sends Gemini your question and the context Coach needs: your workout history and recent sessions, goals, experience level and training preferences, the body measurements and nutrition totals you've logged, summaries of activity from other apps if Health sync is on, and short notes from your earlier Coach conversations. Meal-photo and workout-journal scans send the photo you choose. Your name, email and account id are not sent to Gemini.
Google processes this on Gymlette's behalf. Under the Gemini API terms for paid services, Google doesn't use these prompts or responses to improve its products, and keeps them only for a limited time to detect abuse.
Gymlette stores every Coach conversation turn and every scan result in your account in Google Firebase (Firestore). For each one this is: your question, the full context that was sent to the AI (as listed above), the earlier messages of that conversation, the AI's reply (or, for a scan, the foods or exercises it read), which AI model and app version were used, timing, token counts, whether it worked, and any feedback you give (thumbs up or down, and a reason).
This is stored for everyone by default, including people who never sign in (under their random account id), except in the EEA and UK, where we ask first (see below). It's used to run Coach, to troubleshoot when an answer fails or is wrong, and to improve Coach.
How long: each stored turn is deleted automatically 12 months after it was created.
Who can see it: only you (through the app) and the developer. The developer reads stored conversations to diagnose problems and to improve Coach.
Photos are not stored. A scan's photo is sent to the AI for analysis only. Gymlette keeps it neither on its servers nor with the stored result. A short fingerprint (hash) of the image, which can't be turned back into the image, is kept so a repeat scan of the same photo can be recognized.
If "Help improve Coach" is on, the developer may pick some of your conversations and keep a copy, with your account id replaced by a pseudonymous code, in a test set used to check new versions of Coach before they're released. Copies in the test set are kept until you turn the setting off or delete your data.
You can change it any time in Settings > Privacy. Turning it off stops future sharing and removes your conversations from the test set. When you rate a Coach reply you can also choose whether to share that conversation.
If your device region or your App Store / Google Play country is in the European Economic Area or the UK, Gymlette asks for your explicit consent, on a one-time screen, before storing any Coach conversations, because they can include health information. Coach works either way: if you choose "Not now", your conversations stay on your device only. Sharing to help improve Coach is a separate choice on that screen and starts unticked.
You can withdraw consent any time in Settings > Privacy ("Store Coach conversations"). Withdrawing stops storage, turns sharing off and deletes your stored conversations and any test-set copies.
If you share a workout template, a copy of it (its name, your chosen display name and the exercises) is stored so anyone with the link can open it. Deleting your account deletes your shared templates.
If you connect Strava, completed workout summaries you choose to share are posted to your Strava account using Strava's API. Gymlette does not read your Strava activities.
The app sends usage events (for example "workout completed") to Google Analytics for Firebase and crash and error reports to Firebase Crashlytics, to find bugs and improve the app. These are linked to your account id (the random one, or your signed-in account's id) and include device and app details, so a problem you report can be matched to what went wrong. They never include your name or email, the text of your Coach conversations or questions, food names, or anything else you type. An error report for a Coach answer carries only a random id for that conversation turn. No advertising identifiers are used.
The marketing site at gymlette.com also uses Google Analytics (GA4) to measure page views, traffic sources (including campaign links such as Strava posts), and beta signup form submissions. This is used only to understand whether people find the site and which channels bring them.
Wherever you live, you can ask to access, export, correct or delete your data, and you can withdraw any consent you've given, using the in-app options above or by emailing us. If you're in the EEA or UK you can also complain to your data protection authority.
We collect: identifiers (your account id, and your email if you sign in), health and fitness information, the content of your Coach conversations and scan results, and app usage and diagnostic data. We use them to provide the app and Coach, to troubleshoot, and to improve the app and Coach, and keep them as described above (stored Coach conversations: 12 months). We don't sell or share personal information for cross-context behavioral advertising. You have the right to know, delete and correct your personal information, and we won't treat you differently for using these rights.
No selling of data. No advertising networks. No sharing of personal or health data with third parties beyond the services listed above, which act as processors for app functionality.
Questions or deletion requests: damien.murtagh@gmail.com
If you join our closed Android beta, we may email you when a new internal Play build is ready (install steps and what’s new). You can leave that list anytime via the unsubscribe link in those emails. Leaving the list stops future build emails; we keep a minimal record so we do not re-add you by mistake. For full erasure of that record, contact us at the address below.