Privacy policy
Last updated 19 October 2026
Gymco is built so that your diary lives on your phone. This page explains, in plain words, what stays there, what leaves it, and why.
What stays on your phone
- Your food log, workouts, routines, weigh-ins, measurements, targets and settings. They are stored in the app's own storage on your device.
- Progress photos. They are never uploaded, never included in a backup, and never seen by us.
- Data read from Apple Health or Health Connect.
You can use Gymco fully without an account. In that case, nothing you log leaves your phone.
If you create an account (optional)
- Email address — to sign you in with a one-time code.
- Backup — a copy of your diary (food log, workouts, routines, weigh-ins, targets), so you can restore it on a new phone. Progress photos are not included.
- Photo-logging counter — how many AI estimates you used today, to enforce the daily limit.
Accounts and backups are stored with our hosting provider, Supabase. Only you can read your backup.
AI food estimates
When you take a photo of a meal or ask for an estimate of something you wrote, that photo or text is sent through our server to Anthropic, which returns an estimate of the food and its nutrition. We do not keep the photo or the text after the estimate is returned. Anthropic processes it only to provide the estimate and does not use it to train its models. This feature needs an account and only runs when you ask for it.
Barcode and food search
When you scan a barcode or search for a packaged food, the barcode or search words are sent to Open Food Facts, a public food database. Nothing that identifies you is sent with it.
Apple Health and Health Connect
With your permission, Gymco reads and writes body weight, nutrition and workouts in Apple Health (iPhone) or Health Connect (Android). This data is used only to show your progress and calculate your targets. It is never used for advertising, never sold, and never shared with third parties.
Crash reports
If the app crashes, it sends a crash report to Google Firebase Crashlytics: the error, where in the code it happened, the app version, and the phone model and system version. Crash reports never contain anything you logged.
Purchases
Subscriptions are handled entirely by the App Store or Google Play. We never see your payment details.
What we never do
- No ads and no advertising trackers.
- No selling or renting your data.
- No analytics about how you use the app.
Your choices
- Export everything: Me → Your data → Export now.
- Delete everything on your phone: Me → Your data → Delete everything.
- Delete your account and backup: Me → Account → Delete account. See Delete your account.
- Turn off Health access at any time in your phone's settings.
Depending on where you live (for example under the GDPR), you also have the right to access, correct, or delete your data, and to complain to your data protection authority. Write to us and we will help.
Children
Gymco is not directed at children under 16, and we do not knowingly collect their data.
Changes
If this policy changes, we will update this page and the date at the top.