Privacy policy
Last updated 25 October 2026
Gymco is built so that your diary lives on your phone. This page explains, in plain words, what stays there, what leaves it, and why.
What stays on your phone
- Your food log, workouts, routines, weigh-ins, measurements, targets and settings. They are stored in the app's own storage on your device.
- Progress photos. They are never uploaded, never included in a backup, and never seen by us.
- Data read from Apple Health or Health Connect, except the summary you choose to share with Iron (see below).
- Your health profile (injuries, conditions, medication, pregnancy and health questions), unless you choose to share it with Iron.
You can use Gymco fully without an account. In that case, nothing you log leaves your phone.
If you create an account (optional)
- Email address — to sign you in with a one-time code.
- Backup — a copy of your diary (food log, workouts, routines, weigh-ins, targets), so you can restore it on a new phone. Progress photos are not included.
- Photo-logging counter — how many AI estimates you used today, to enforce the daily limit.
Accounts and backups are stored with our hosting provider, Supabase. Only you can read your backup.
AI food estimates
When you take a photo of a meal or ask for an estimate of something you wrote, that photo or text is sent through our server to Anthropic, which returns an estimate of the food and its nutrition. We do not keep the photo or the text after the estimate is returned. Anthropic processes it only to provide the estimate and does not use it to train its models. This feature needs an account and only runs when you ask for it.
Iron, the AI coach (optional)
Iron is off until you turn it on, and it needs an account. While it is on, when Iron writes your daily tip, a program or a weekly review, the app sends our server a summary of your numbers, which passes it to Anthropic to write the answer:
- Always, while Iron is on: your goal, activity level, targets, age, sex, height and weight trend; your planned routines; daily totals of calories, protein and water; training days, sets and streak; and, if Health access is on, steps, sleep, resting heart rate and heart rate variability. It also includes the warning signs the app's own rules found.
- Only if you turn on "Food details": what you ate in the last three days, and when.
- Only if you turn on "Health profile": your injuries, conditions, whether you take medication, pregnancy, your answers to the health questions, and your note.
- Never: progress photos, workout notes, your email, or anything else not listed here.
You can change these choices any time in Iron settings, or turn Iron off. We keep a counter of how many AI requests you used each day, and a record of cost and timing without the content. We do not keep the summary after the answer is returned. Anthropic processes it only to provide the answer and does not use it to train its models. Warning signs are worked out on your phone and need no AI.
Barcode and food search
When you scan a barcode or search for a packaged food, the barcode or search words are sent to Open Food Facts, a public food database. Nothing that identifies you is sent with it.
Apple Health and Health Connect
With your permission, Gymco reads and writes body weight, nutrition and workouts, and reads steps, sleep and heart rate, in Apple Health (iPhone) or Health Connect (Android). This data is used only to show your progress, calculate your targets, spot warning signs and, if you turn Iron on, to coach you as described above. It is never used for advertising or marketing, never sold, and never shared with anyone except the processor that writes Iron's answers, and only when you have turned Iron on.
Crash reports
If the app crashes, it sends a crash report to Google Firebase Crashlytics: the error, where in the code it happened, the app version, and the phone model and system version. Crash reports never contain anything you logged.
Purchases
Subscriptions are handled entirely by the App Store or Google Play. We never see your payment details.
What we never do
- No ads and no advertising trackers.
- No selling or renting your data.
- No analytics about how you use the app.
Your choices
- Export everything: Me → Your data → Export now.
- Delete everything on your phone: Me → Your data → Delete everything.
- Delete your account and backup: Me → Account → Delete account. See Delete your account.
- Turn off Health access at any time in your phone's settings.
Depending on where you live (for example under the GDPR), you also have the right to access, correct, or delete your data, and to complain to your data protection authority. Write to us and we will help.
Children
Gymco is not directed at children under 16, and we do not knowingly collect their data.
Changes
If this policy changes, we will update this page and the date at the top.