GymBuddy Privacy Policy
This Privacy Policy describes how GymBuddy ("GymBuddy," "we," "us," or "our") collects, uses, and shares your personal information when you use the GymBuddy mobile and web application (the "Service"). GymBuddy helps adults (18+) find workout partners at their gym.
If you have questions, contact us at 2026gymbuddy@gmail.com.
1. Information We Collect
We collect only the information needed to run the Service:
- Account information: email address and a password (stored in hashed form by our authentication provider). You may instead create your account with Sign in with Apple or Google Sign-In; in that case we receive only your name and email address from Apple or Google to set up your account. If you use Apple's "Hide My Email" feature, we receive a private relay address instead of your real email, and that is fine — you can use the app fully with it.
- Profile information you provide: first name, age, gender, profile photo, bio, training goals, training schedule, experience level, and — optionally and only if you choose to share it — sexual orientation, along with your choice of whether it is visible to others.
- Gym information: your selected home gym, gyms you check in to, and check-in times. You can set your home gym by searching for it by name — no location access required.
- Messages: messages you send to your matches. Messages are stored so we can deliver them, and may be reviewed if reported for a safety violation.
- Approximate device location (optional): only if you grant location permission, and only while you are using the app, we use your device's coordinates to find gyms near you. Coordinates are sent to our gym-search service to return nearby gyms and are not stored in your profile. If you deny location access, you can use the app fully by searching gyms by name.
- Safety actions: blocks, unmatches, and reports you submit (including report details you write).
- Usage analytics: in-app events (such as sign-in, swipes, matches, check-ins, and feature usage) linked to your account ID, used to understand and improve how the Service works. We do not use third-party advertising or cross-site tracking SDKs.
- Referral information: if you join through a friend's invite link, we record the referral code used.
- Support communications: messages you send to support, including any contact details you include.
2. How We Use Your Information
- To create and operate your account and profile.
- To show your profile to other members at your home gym so you can match and chat (controlled by your privacy settings).
- To find gyms near you (only if you grant location access) or by name search.
- To deliver messages between matched members.
- To enforce our Terms of Service and community safety rules, including processing blocks and reports and removing violating users or content.
- To understand feature usage and improve the Service.
- To respond to support requests.
3. What Other Members Can See
Your profile (name, age, photo, bio, goals, schedule, experience, gender, home gym, and — only if you opt in — orientation and check-in status) is visible to other GymBuddy members based on your privacy settings ("everyone," "matches only," etc.). Your email, password, location coordinates, and reports are never visible to other members. You can hide your age and check-in status in Settings.
4. How We Share Information
We do not sell your personal information, and we do not share it for targeted advertising. We share information only with service providers ("processors") that host and run the Service on our behalf:
- Supabase — database, authentication, file storage, and serverless functions (hosts account, profile, message, and analytics data).
- Vercel — application hosting and delivery.
- Google Places API — gym search. When you search for gyms, your coordinates (if you granted location) or your text search query are sent to Google to return gym results. Your name, email, and profile are not sent.
- Apple & Google sign-in (optional) — if you choose Sign in with Apple or Google Sign-In, Apple or Google authenticates you and provides your name and email to create your account. Their handling of that sign-in is governed by their own privacy policies.
We may also disclose information if required by law, to protect the safety of our users (for example, responding to reports of threats or abuse), or as part of a business transfer.
5. Data Retention & Deletion
- Account and profile data are kept until you delete your account.
- Unmatching another member deletes the conversation between you.
- You can permanently delete your account in the app (Me → Delete Account) or by following the instructions at gymbuddy-zeta.vercel.app/delete-account.html. Deletion removes your profile, photos, matches, messages, check-ins, and swipe history.
- We may retain limited records of safety reports and blocks after account deletion where needed to keep the community safe and to comply with legal obligations.
6. Security
Data is encrypted in transit (HTTPS/TLS). Passwords are hashed. Database access is restricted with row-level security so members can only access data they are permitted to see. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards.
7. Age Requirement
GymBuddy is for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that a user is under 18, we will terminate the account and delete its data. If you believe a minor is using the Service, contact 2026gymbuddy@gmail.com.
8. Your Rights & Choices
- Access & correction: you can view and edit your profile in the app at any time.
- Deletion: delete your account in the app or via the instructions linked above.
- Location: location permission is optional; you can revoke it in your device settings at any time and keep using the app via name search.
- Visibility: control who sees your profile, who can message you, and whether your age, orientation, and check-in status are shown.
- To exercise any right you can't complete in the app, email 2026gymbuddy@gmail.com. We respond within the timeframe required by applicable law.
9. US State Privacy Disclosures
Residents of California, Colorado, Connecticut, Texas, Utah, Virginia and certain other US states have rights to know, access, correct, delete, and port their personal information, and the right not to be discriminated against for exercising those rights. The categories of personal information we collect (as defined under the California Consumer Privacy Act) are:
| Category | Examples in GymBuddy | Collected |
|---|---|---|
| A. Identifiers | Name, email address, account ID | YES |
| B. Personal information (Cal. Civ. Code §1798.80(e)) | Name, email; no financial data | YES |
| C. Protected classifications | Age, gender; sexual orientation only if you choose to provide it | YES |
| D. Commercial information | Purchase histories | NO |
| E. Biometric information | Fingerprints, faceprints | NO |
| F. Internet or network activity | In-app usage events (swipes, check-ins, feature usage) | YES |
| G. Geolocation data | Approximate device location, only while using the app and only if permission is granted | YES |
| H. Audio, electronic, visual information | Profile photo you upload | YES |
| I. Professional or employment information | — | NO |
| J. Education information | — | NO |
| K. Inferences | — | NO |
| L. Sensitive personal information | Sexual orientation, only if you voluntarily provide it; precise geolocation is not stored | YES (optional, user-provided) |
We collect these categories directly from you (and your device, for optional location), use them for the purposes in Section 2, and disclose them only to the processors in Section 4. We do not sell personal information and have not done so in the preceding 12 months; we do not share personal information for cross-context behavioral advertising; and we do not use sensitive personal information to infer characteristics. Sensitive information (orientation) is used only to display it on your profile per your visibility setting.
To exercise your rights, use the in-app tools or email 2026gymbuddy@gmail.com. You may use an authorized agent where permitted by law; we will verify requests using your account email.
10. Users Outside the United States
The Service is operated from the United States and data is stored on US-based infrastructure. If you use the Service from outside the US, you understand your information is processed in the US. Where the GDPR or UK GDPR applies, our legal bases are performance of contract (running the Service you signed up for), legitimate interests (safety, security, improving the Service), and consent (optional location, optional orientation), and you additionally have rights to object, restrict processing, and lodge a complaint with your supervisory authority.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version at this URL and update the "Last updated" date. Material changes will be highlighted in the app.
12. Contact Us
GymBuddy Support — 2026gymbuddy@gmail.com