Privacy Policy

Who we are

GymMax is a training log and program builder available on the web at lift.segmen.dev and as an iOS app. It is operated by the GymMax developer (“we”, “us”). This policy explains what information GymMax collects, why, where it is kept, and the choices you have.

What we collect

We only collect what GymMax needs to work:

• Account information — your email address, your password (stored only as a one-way hash by our authentication provider; we never see it), a unique user ID, and, if you provide one, a display name.
• Training data — the programs you build or save, their weeks, days, exercises and set targets; the workouts you log, including each set's weight, reps, reps in reserve and set type; workout and exercise notes; and any custom exercises you create.
• Agreement records — the version of these Terms and this Privacy Policy you accepted when you created your account.
• Technical data — like any web service, our hosting providers process your IP address and standard request logs to deliver the service and keep it secure.

GymMax does not currently collect body measurements, photos, location, contacts, health data from Apple Health, or payment details.

Programs you publish to Discover

Programs are private by default. If you choose to publish a program to Discover, that program's name, description and structure, together with your display name as its author, become visible to anyone, including people who are not signed in. The number of people who saved it is also shown. You can unpublish a program at any time; copies other users already saved may remain in their accounts.

How we use it

• To create and secure your account and sign you in.
• To store, sync and show your programs and workout history across the web and iOS apps, and to suggest weights from your past sessions.
• To send account emails such as confirmations and password resets.
• To operate, maintain and protect the service.

We process this information because it is necessary to provide the service you signed up for.

Where it is stored

Your account and training data are stored with Supabase, our database and authentication provider, in its US East (North Virginia) region. The web app is hosted on Vercel. If you use GymMax from outside the United States, your information is transferred to and stored in the United States.

On your device, the iOS app keeps your sign-in session and, while a workout is in progress, a copy of that workout so it can recover after a crash. The website uses cookies only to keep you signed in.

What we do not do

• We do not sell your personal information.
• We do not show ads.
• We do not track you across other companies' apps or websites, and GymMax currently contains no third-party analytics, advertising or attribution tools. If that changes, we will update this policy first.

Who we share it with

We share information only with the service providers that run GymMax on our behalf (Supabase for data storage, authentication and account emails; Vercel for web hosting), with Apple as the distributor of the iOS app, or where the law requires it.

How long we keep it, and deleting your account

We keep your information for as long as your account exists. You can delete your account at any time from Settings → Delete account in the iOS app or on the web. Deleting your account permanently removes your profile and the training data linked to it, including any programs you published to Discover. Server logs held by our providers expire on their own schedules.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict how it is used. You can correct or delete most of it yourself in the app; for anything else, contact us at the address below. You may also complain to your local data protection authority.

Children

GymMax is not directed to children under 13, or under 16 in the European Economic Area and the United Kingdom, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

When we change this policy we will update its version and effective date above, and tell you in the app for any material change.

Contact

Questions or requests about your privacy: TODO-legal-contact@segmen.dev