Privacy Policy

Information You Give Us

We receive and store any information you give us when interacting with our services. For example:

• Name, email address and password (or Apple/Google account identifiers if you sign in with Apple or Google) when registering an account with us
• Profile information such as your date of birth, gender, profile photo, and language, timezone and unit preferences
• Onboarding information such as your fitness objective, dietary preferences, food preferences, activity level, target weight and the obstacles you tell us about
• Photos you choose to upload, including profile photos, body-progress photos, food photos and grocery-receipt photos
• Notification preferences, including meal reminder times and notification toggles
• Email addresses of people you know when you participate in a referral program
• Information you provide when you contact us for support by email
• Any information you choose to share with us as part of surveys you do for us (or a third party acting on our behalf)

Premium membership purchases are made through the Apple App Store or Google Play. Payment is handled by Apple or Google — we do not collect or store your credit card or bank details. We receive purchase receipts and subscription status (such as product, transaction identifier and expiry date) from Apple or Google in order to activate and maintain your membership.

Health and Fitness Data

As a fitness and nutrition application, Gymrock collects and processes health-related data that you provide or that is generated through your use of our services. This includes:

• Workout and exercise data: exercise types, sets, repetitions, weights, workout duration, workout history, and exercise performance metrics
• Body measurements: body weight, height, body fat percentage, other physical measurements you choose to log, and body-progress photos you choose to take
• Nutrition and dietary data: food logs, food photos, calorie intake, macronutrient tracking (protein, carbohydrates, fat), water intake, meal plans, and dietary preferences
• Grocery and spending data: if you scan a grocery receipt, the shop name and address, purchase date, items, quantities and prices extracted from the receipt
• Device health data: if you choose to connect Apple Health (HealthKit) or Google Health Connect, data such as steps, calories burned, distance, active minutes, heart rate, sleep and weight, together with the name of the source device or app. These connections are optional and you can revoke them at any time in your device settings. With your permission, we may also write workout data back to Apple Health.
• Fitness goals: weight goals, strength targets, training programs, streaks, and progress tracking data
• AI-generated fitness and nutrition content: personalised workout routines, meal plans, insights and coaching commentary created based on the health data you provide

We use this health and fitness data to:

• Provide and personalise your workout tracking and nutrition logging experience
• Generate AI-powered fitness and nutrition recommendations, insights and coaching commentary tailored to your goals
• Track your progress over time and display performance insights
• Improve our fitness and nutrition algorithms and services

We do not sell your health data to third parties. Your health and fitness data is only shared with third-party service providers (such as cloud hosting and AI processing services) as strictly necessary to deliver our services, and these providers are contractually prohibited from using your data for any other purpose.

Information Collected Automatically

When you use our services, we automatically receive and record information, whether you are a basic or premium member, from your browser or mobile device, including:

• The unique identifier for your mobile device and your push notification token
• Your IP address
• Your device type, operating system, language and timezone
• Time and date of access
• The user ID we've assigned to the account through which you are accessing our services
• The version of our application that you're using
• Usage and interaction data, such as the screens you visit and features you use, collected through analytics tools
• Crash reports and diagnostic data if the app encounters an error
• Cookie information and the page you requested, when using our website

We do not collect precise GPS location. If you scan a grocery receipt, the merchant address printed on the receipt is stored as part of the receipt data.

Lion Rock Technology Limited uses cookies and other types of data collection technologies for different purposes, including recognizing our users and customizing certain features of our services and functions for repeat visitors.

Other Users (Squads and Social Features)

Gymrock includes social features called squads. When you join a squad, certain information is visible to other members of that squad, such as your username, profile photo, activity, step counts, competition standings and AI-generated commentary about your logged activity. Sharing of your weight-progress data within a squad is controlled by a separate opt-in setting that you can change at any time. Content you choose to share outside the app (for example share cards) is shared at your direction.

Third Party Service Providers

We employ other companies to perform specialized functions on our behalf. They may have access to personal information needed to perform these functions but are prohibited from using it for other purposes. These include:

• Cloud hosting and storage — our servers and databases are hosted on cloud infrastructure, and your photos (profile, progress, food and receipt photos) are stored in cloud storage (Amazon Web Services)
• AI processing — food photos, grocery receipts and relevant fitness/nutrition context are processed by a third-party AI provider (Google) to generate analysis, plans, insights and commentary, and to screen uploaded images
• Email delivery — transactional emails (such as verification codes and account confirmations) are sent through a third-party email service
• Push notifications — notifications are delivered through a third-party push notification service (OneSignal)
• Analytics and crash reporting — we use analytics services (Google Firebase, Mixpanel, PostHog) and crash reporting services (Sentry, Firebase Crashlytics) to understand how our app is used and to fix problems
• Sign-in and billing — Apple and Google process sign-in (if you use Sign in with Apple or Google Sign-In) and all subscription payments
• Nutrition databases — when you search foods or scan a barcode, the query or barcode is sent to third-party nutrition databases (such as USDA FoodData Central and Open Food Facts) to look up nutrition information

Protection of Us and Others

We may disclose personal information if required to do so by law or in the good-faith belief that such action is necessary to: (a) comply with the law or comply with legal process served on Lion Rock Technology Limited; or (b) protect and defend our rights or property, our services, users or the public.

Business Transfers

In the unlikely event that we sell a portion of or all of our business or in the event that we reorganize, customer records would likely be transferred to the acquiring company or new entity; however, any personal information in those records will remain subject to the promises made in the pre-existing privacy policy.

Our cookies

We place cookies that identify you, or allow third parties to do so on our behalf, for the following purposes:

• to recognize you automatically when you return to our websites and mobile applications and to customize certain features and functions;
• to understand how you use our websites and mobile applications so we can improve them; and
• to make an automated record of your activities on our websites and mobile applications.

We use third-party analytics cookies and SDKs to track how groups or categories of users interact with our services.

Advertising

We do not serve third-party advertising in our services and do not use advertising cookies. If this changes in the future, we will update this Privacy Policy before doing so.

Active Accounts

Your account data, including health and fitness data (workout logs, nutrition data, body measurements, progress photos, receipt data, and AI-generated plans), is retained for as long as your account remains active. You may view or delete individual data entries at any time through the app.

After Account Deletion

When you request account deletion, we permanently delete your personal data and health data from our active systems within 30 days of confirming your request. Some data may be retained in encrypted backups for up to 90 days, after which it is permanently purged. Data that we are legally required to retain (such as transaction records) may be kept for up to 7 years in compliance with applicable laws.

Inactive Accounts

If your account has been inactive for more than 24 months, we may send you a notification. If you do not respond, we reserve the right to delete your account and associated data in accordance with the deletion process described below.

Anonymised and Aggregated Data

We may retain anonymised or aggregated data that does not identify you personally for analytical and service improvement purposes. This data cannot be used to re-identify you.

In-App Deletion

You can delete individual workout logs, nutrition entries, body measurements, progress photos, and other health data directly within the Gymrock app at any time. You can also request deletion of your entire account from the app's settings.

Account Deletion Request

To delete your entire account and all associated data, you can:

• Submit a request through our Account Deletion page
• Email us at support@gymrock.io with the subject line "Account Deletion Request"

What Happens When You Delete Your Account

• All personal profile information (name, email, profile photo) is permanently deleted
• All health and fitness data (workout history, nutrition logs, body measurements, progress photos, receipt data, fitness goals, AI-generated plans) is permanently deleted
• All Premium membership data is removed (active subscriptions should be cancelled via the App Store or Google Play before requesting deletion)
• Deletion is permanent and irreversible — your data cannot be recovered once deleted
• Deletion requests are processed within 30 days of confirmation

Confirmation

After your account deletion request is processed, we will send a confirmation email to the email address associated with your account. If you have any questions about the deletion process, please contact us at support@gymrock.io.