Gymco

Privacy policy

Last updated 25 October 2026

Gymco is built so that your diary lives on your phone. This page explains, in plain words, what stays there, what leaves it, and why.

What stays on your phone

You can use Gymco fully without an account. In that case, nothing you log leaves your phone.

If you create an account (optional)

Accounts and backups are stored with our hosting provider, Supabase. Only you can read your backup.

AI food estimates

When you take a photo of a meal or ask for an estimate of something you wrote, that photo or text is sent through our server to Anthropic, which returns an estimate of the food and its nutrition. We do not keep the photo or the text after the estimate is returned. Anthropic processes it only to provide the estimate and does not use it to train its models. This feature needs an account and only runs when you ask for it.

Iron, the AI coach (optional)

Iron is off until you turn it on, and it needs an account. While it is on, when Iron writes your daily tip, a program or a weekly review, the app sends our server a summary of your numbers, which passes it to Anthropic to write the answer:

You can change these choices any time in Iron settings, or turn Iron off. We keep a counter of how many AI requests you used each day, and a record of cost and timing without the content. We do not keep the summary after the answer is returned. Anthropic processes it only to provide the answer and does not use it to train its models. Warning signs are worked out on your phone and need no AI.

Barcode and food search

When you scan a barcode or search for a packaged food, the barcode or search words are sent to Open Food Facts, a public food database. Nothing that identifies you is sent with it.

Apple Health and Health Connect

With your permission, Gymco reads and writes body weight, nutrition and workouts, and reads steps, sleep and heart rate, in Apple Health (iPhone) or Health Connect (Android). This data is used only to show your progress, calculate your targets, spot warning signs and, if you turn Iron on, to coach you as described above. It is never used for advertising or marketing, never sold, and never shared with anyone except the processor that writes Iron's answers, and only when you have turned Iron on.

Crash reports

If the app crashes, it sends a crash report to Google Firebase Crashlytics: the error, where in the code it happened, the app version, and the phone model and system version. Crash reports never contain anything you logged.

Purchases

Subscriptions are handled entirely by the App Store or Google Play. We never see your payment details.

What we never do

Your choices

Depending on where you live (for example under the GDPR), you also have the right to access, correct, or delete your data, and to complain to your data protection authority. Write to us and we will help.

Children

Gymco is not directed at children under 16, and we do not knowingly collect their data.

Changes

If this policy changes, we will update this page and the date at the top.

Contact

support@gymcoapp.com