Privacy Policy — My Gym Tracker

Effective date: August 3, 2026 · Den Digital LLC

This Privacy Policy explains what information My Gym Tracker (the "App") collects, how it is used, and your rights. By using the App you agree to this policy.

1. Information we collect

• Account information — your email address, an optional display name, and your password (stored hashed) when you create an account. We use Supabase as our authentication and database provider.
• Workout data — exercises, sets, reps, weights, durations, notes, templates, custom exercises, and personal records that you create in the App. This is synced to your account so you can access it across devices.
• Body measurements — bodyweight and any other measurements you choose to record (waist, hips, chest, arm, thigh), together with the unit you entered them in. This data is stored only on your device. It is not uploaded to our servers and is not available across devices; use the App's JSON backup export if you want to move it to a new phone.
• Nutrition data — food entries you log (name, calories, protein, carbohydrates, fat, serving text, meal and date) and your daily calorie and protein targets. This data is stored only on your device. It is not uploaded to our servers, is not linked to your account, and is never used for advertising.
• Camera (barcode scanning) — if you use the optional barcode scanner to look up a packaged food, the App uses your camera only while the scanner screen is open. Camera images are processed on your device to read the barcode; no photo or video is stored, saved, or transmitted. Only the decoded barcode number leaves your device, and only to the food databases named in Section 4. The rest of the App, including adding food by hand, works without granting camera access.
• Optional cycle data — if you use Women's Mode, you may choose to log period start/end dates, cycle length, and notes. This data stays on your device by default. It is uploaded to a separate protected database table only after you explicitly enable Cycle Cloud Sync. It is never placed in ordinary workout-session payloads or advertising data.
• Location (GPS) — if you use the optional GPS run tracker, the App reads your device's precise location only while the run-tracking screen is open (in the foreground). It is used to measure your run's distance, pace, and splits and to draw your route on a map. The recorded route is saved with your workout history and synced to your account, the same as your other workout data. The App does not track your location in the background or when the tracker is closed, and location is never used for advertising. The rest of the App works without granting location access.
• Advertising identifiers — the App displays ads via Google AdMob, which may collect the device Advertising ID and limited device information to serve and measure ads and prevent fraud. On iOS, ad personalization follows your App Tracking Transparency choice; if you decline, you receive only non-personalized ads. On Android, the App declares the Advertising ID for AdMob; where required by law or your device settings, ads are non-personalized.

2. Information we do NOT collect

• We do not collect your location in the background, or at any time while the GPS run tracker is closed. Location is read only during an active run-tracking session (see Section 1).
• We do not collect your contacts, photos, calendar, or other personal media.
• We do not record audio or use your microphone.
• We do not store or transmit camera images. The barcode scanner reads frames on your device and keeps none of them.
• We do not use third-party analytics or crash-reporting SDKs. If the App closes unexpectedly, a short technical record (error type, message and stack trace — no food, workout or account data) is kept on your device. Nothing is sent anywhere unless you tap to share it yourself, and you can clear these records in Settings.
• We do not sell or rent your data to anyone.

3. How we use your information

• To provide the core features of the App (logging workouts, syncing across devices, viewing history).
• When you use the GPS run tracker, to calculate your run's distance, pace, and splits and to display your route on a map — only while the tracking screen is open.
• To authenticate you and keep your account secure.
• To look up the nutrition facts for a barcode you scan or a food you search for, and to show your daily calorie and protein totals against the targets you set.
• To serve advertisements that support the free version of the App.
• When you choose to log cycle data, to provide estimated phase labels and optional training suggestions. These estimates are informational fitness guidance, not medical advice, diagnosis, contraception, or fertility prediction.

4. Service providers

We use the following third-party services. Each receives only the data needed for their function:

• Supabase — authentication, database, and storage of your account and workout data on our behalf. supabase.com/privacy
• Google AdMob — advertising. AdMob may collect device identifiers and limited device data to serve ads. policies.google.com/technologies/ads
• Google Maps (Android) / Apple Maps (iOS) — used to display your run route on a map. The map provider processes map-tile and rendering requests to show the map on your device. Google Maps Platform terms · Apple Privacy
• Open Food Facts — when you scan a barcode, the App sends the decoded barcode number to Open Food Facts to retrieve that product's name and nutrition facts. No account identifier, device identifier or other personal data is sent with it. world.openfoodfacts.org/privacy
• Cloudflare Workers — when you search for a food by name, the App sends your search text to a small proxy we operate on Cloudflare, which forwards it to the USDA database below and caches the result. The proxy exists so that a database API key is not embedded in the App. Search text is not linked to your account, and we do not build a profile from it. cloudflare.com/privacypolicy
• USDA FoodData Central — a public food-composition database operated by the U.S. Department of Agriculture, queried through the proxy above to return nutrition data for your search. fdc.nal.usda.gov
• Apple App Store / Google Play — distribution.

Barcode and food-search lookups are the only network requests the nutrition features make. The food you log is not sent to any of these services — only the barcode number or the words you type into the search box.

5. Data security

All data is transmitted over HTTPS/TLS. Account data is stored in encrypted Supabase Postgres with row-level security so each user can only access their own records. Passwords are hashed using industry-standard algorithms; we never see your plaintext password.

6. Your rights

• You can request a copy of your data by emailing the address below.
• You can request deletion of your account and all associated data by emailing the address below or using the in-app delete-account option.
• GPS run routes are part of your workout data: deleting a run in the App removes its route, and deleting your account removes all synced routes along with your other data.
• You can disable future cycle-data sync or delete local cycle logs in the App at any time. Deleting your account deletes synced cycle records along with other account data.
• Nutrition entries and body measurements never leave your device, so there is nothing on our servers to request or delete. You can remove individual entries in the App, and uninstalling the App removes all of them. Because they are not backed up to your account, export a JSON backup from Settings before switching phones if you want to keep them.
• EU/UK users have rights under GDPR and may contact us to exercise them.
• California users have rights under the CCPA/CPRA and may contact us to exercise them.

7. Children

My Gym Tracker is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top of this page reflects the most recent revision. Continued use of the App after changes means you accept the updated policy.

9. Contact

Questions, requests, or concerns: support@dendigital.us

Den Digital LLC
(physical address available on request)