Privacy policy

Your training data deserves clear treatment.

This policy explains what GymnFit collects, why it is used, and the choices available to you. Effective 15 August 2026.

1. Who operates GymnFit

GymnFit is a pre-incorporation venture operating from Egypt. In this policy, “GymnFit,” “we,” and “us” refer to the team responsible for the GymnFit website and applications.

Privacy questions and rights requests can be sent to hello@gymnfit.co.

2. Information we collect

  • Account information: Google account identifier, email address, and name received through Google sign-in and AWS Cognito.
  • Profile information: display name, avatar, biography, preferred language, city, gym, public profile settings, and referral information you provide.
  • Training information: programs, sessions, exercises, sets, repetitions, weights, workout history, personal records, streaks, and consistency information.
  • Community information: follows, kudos, comments, activity events, challenge entries, votes, and public-profile activity.
  • Coaching information: coaching requests, relationships, coach-authored plans, client workout visibility, and coaching notes.
  • Media: avatars and optional photos or videos attached to workouts or competition entries.
  • Technical information: authentication events, device and browser information, diagnostic records, IP address, and security logs that may be generated when the service is used.

3. How we use information

We use information to provide authentication, personalize training plans, record workouts, calculate progress and consistency, operate social and coaching features, manage challenges and rewards, prevent abuse, respond to support requests, and maintain the safety and reliability of the service.

We may use aggregated or de-identified information to understand product performance and improve GymnFit. We do not represent de-identified information as personally identifiable data.

4. Public and shared information

Your chosen display name, avatar, biography, public-profile information, and activity configured as public may be visible to other users or visitors. Social actions such as follows, kudos, comments, and challenge participation may also be visible within the relevant community.

Coaches may access information needed to support an accepted coaching relationship. Competition recordings may be shown to eligible reviewers for community or coach verification. Private media is not intended to be publicly accessible outside the feature and permissions through which it is shared.

5. Service providers and storage

GymnFit uses service providers to operate the platform, including Google for federated sign-in and Amazon Web Services for authentication, application hosting, databases, and private media storage. These providers process information under their own security and privacy commitments.

Uploaded media is stored in private AWS S3 storage and accessed through time-limited signed links. Authentication tokens are issued through AWS Cognito. Information may therefore be processed outside Egypt, including in AWS infrastructure located in the European Union.

6. Security

We use access controls, signed authentication tokens, private object storage, ownership checks, time-limited media links, and other technical safeguards designed to protect account and training information. No online system can guarantee absolute security, and users should protect access to their Google account and devices.

7. Retention and deletion

We retain information while an account is active and as reasonably needed to operate the service, resolve disputes, enforce agreements, prevent fraud, or meet legal obligations. Some records may remain in protected backups for a limited period after deletion.

You can delete your account in the GymnFit app or use our account-deletion page to submit a request from outside the app. We may verify identity before completing an external request and will explain if a record must be retained for legal or security reasons.

8. Your choices and rights

You may ask to access, correct, export, restrict, or delete personal information, or object to certain processing, where applicable. You can also change supported profile visibility choices within the product. Requests should be sent to hello@gymnfit.co.

9. Children

GymnFit is not directed to children who cannot legally consent to use an online service in their jurisdiction. If you are under 18, use GymnFit only with the involvement of a parent or legal guardian. Contact us if you believe a child’s information has been provided without appropriate authorization.

10. Changes to this policy

We may update this policy as the product or legal requirements change. The effective date above will be revised when material changes are published. Where appropriate, we will provide additional notice through the service.