GymAI Privacy Policy

Effective date: October 2, 2026. GymAI is a workout tracker with an AI coach, provided by Engcraft, LLC. This Privacy Policy explains what information GymAI collects, how it is used, and who it is shared with.

Data controller

GymAI is provided by Engcraft, LLC. For privacy requests, legal notices, or deletion requests, contact support@engcraft.io.

Information stored on your device

GymAI has no accounts. Your routines, workouts, sets, personal records, weigh-ins, goals, and settings are stored on your device. They are not sent to us, except the parts described under AI coach below.

Apple Health

With your permission, GymAI saves your finished workouts and the weigh-ins you log to Apple Health, and reads your weight, body fat, and lean mass from Health so readings from a smart scale appear in the app. Health data is read when the app needs it and is not copied into our servers. We do not use Health data for advertising, marketing, data mining, sale, or sharing with third parties for their own use. You can change Health access at any time in the Health app or iOS Settings.

AI coach

When you message the AI coach, GymAI sends your message together with a summary of your training to Engcraft’s backend: your recent workouts, routines, goals, and the units you use. The backend passes this to third-party AI model providers to write the reply. The coach is identified by an anonymous device identifier kept in your device’s Keychain, and our backend keeps a count of the coach messages used on that identifier to apply the free allowance. AI replies may be inaccurate or incomplete.

Subscriptions and purchases

GymAI offers paid auto-renewing subscriptions. Apple processes App Store billing, and RevenueCat helps manage subscription status and purchase records. We do not receive your payment card details. To understand which Apple Search Ads campaign brought you to GymAI, RevenueCat collects Apple’s ad attribution token; this does not identify you personally and is not used to track you across other companies’ apps.

Other services

Exercise photos are loaded from our image hosting. Workout reminders are local notifications scheduled on your device. Our backend runs on Google Cloud. We do not sell personal information and do not use your information for third-party advertising.

Retention, deletion, and your rights

Data on your device stays there until you delete it or uninstall the app. Coach requests may be kept on our servers only as long as needed to provide, secure, and debug the service, unless the law requires longer. You may request access to, correction of, or deletion of your information by contacting support@engcraft.io. Depending on where you live, you may have rights under GDPR, UK GDPR, or CCPA/CPRA. We do not sell personal information or Health data.

Security, transfers, children, and changes

We use reasonable safeguards, including encrypted and signed connections to our backend, but no method of transmission or storage is completely secure. Your information may be processed in countries other than where you live. GymAI is not directed to children under 13, or under 16 in the EEA, and we do not knowingly collect personal information from children. We may update this policy from time to time and will post the updated version on this page.

Contact

For questions about this Privacy Policy or to exercise your privacy rights, contact support@engcraft.io.