Gym Vibes Logo GYM VIBES
← Back Home

Privacy Policy

Last updated: September 13, 2026

This policy explains what information Gym Vibes collects, how it is used and shared, how long it is kept, and the choices you have. It applies to the Gym Vibes apps for iOS and Android, the web app at app.gymvibes.xyz, and this website.

1. Who we are

Gym Vibes is operated by Waffle Sloth LLC ("we", "us"), which is responsible for your information. Contact us about privacy or your data at [email protected].

2. Information we collect

Information you give us

  • Account: your email address and password (stored only as a secure hash by our authentication provider). If you sign in with Apple, Google or GitHub, we receive your name and email address from that service.
  • Profile: your name and username, and optionally a profile photo, birth date, gender, height, activity level, target weight and unit preference.
  • Workouts: the workouts, exercises, sets, weights, repetitions, cardio details and templates you log.
  • Body measurements: optionally, your weight and body measurements (such as waist, neck or arms) and their history.
  • Purchases and donations: if you support Gym Vibes, the amount, product, store or payment platform, transaction ID and, for App Store and Google Play purchases, the store receipt. We use this to show your supporter history and tier. Payments are processed by Apple, Google or Stripe; we never receive your card details.
  • Account deletion requests: the email address you submit and the status of the request.

Information collected automatically

  • Website and web app analytics: this website and the web app use Google Analytics, which uses cookies and similar technology to collect information such as pages viewed, approximate location derived from your IP address, and your browser and device type. The iOS and Android apps do not include analytics or advertising tools.
  • On your device: the apps keep a local copy of your data so they work offline, and sync it when you are back online. This local copy is cleared when you sign out or delete your account.

We do not collect your precise location, contacts or advertising identifiers, and the apps only access your camera or photos when you choose a profile photo.

3. How we use your information

  • To create and secure your account and to sync your data across your devices.
  • To provide the app's features, such as workout history, progress and body measurement tracking.
  • To record purchases and donations and show your supporter tier.
  • To send account emails, such as password resets and account deletion confirmations.
  • To keep the service secure and prevent abuse, for example by limiting repeated requests.
  • To understand how the website and web app are used, through Google Analytics.

We do not sell your personal information, share it for targeted advertising, or use it to track you across other companies' apps and websites.

4. Legal bases (EEA and UK)

We process your information to perform our agreement with you (providing Gym Vibes), with your consent for optional information you choose to add (such as body measurements, birth date, gender and profile photo), and for our legitimate interests in keeping the service secure and understanding how our website is used. You can withdraw consent by removing that information or deleting your account.

5. Who we share information with

We share information only with service providers that help us run Gym Vibes, under their own privacy and security obligations:

  • Supabase — database, authentication (including sign-in and password reset emails), file storage and server functions.
  • Resend — delivery of account deletion emails.
  • Stripe — payment processing for web donations.
  • Apple and Google — app store purchases and, if you use them, sign-in.
  • GitHub — sign-in, if you use it.
  • DigitalOcean — hosting for this website and the web app.
  • Google Analytics — website and web app analytics.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of our business.

6. Where your information is stored

Your account data is stored in the United States. If you use Gym Vibes from outside the United States, your information will be transferred to and processed there.

7. How long we keep it

  • We keep your account information for as long as your account exists.
  • When you delete an item in the app, such as a workout, it is removed from the app but may be kept in our database until you delete your account.
  • When you delete your account, we permanently delete your account, profile, workouts, body measurements, supporter history and profile photos. Copies in routine backups are removed as those backups expire.
  • We keep a record of account deletion requests (the email address and request status) to show that requests were handled.
  • Payment providers keep their own transaction records under their policies. Google Analytics data is kept according to our Google Analytics retention settings.

8. Your choices and rights

  • Access and correct: view and edit your profile, workouts and measurements in the app.
  • Delete: delete your account in the app (Profile, then Delete Account), request deletion on our account deletion page, or email us.
  • Copy: email us to request a copy of your data.
  • Depending on where you live, you may also have the right to object to or restrict our processing, and to data portability. Residents of the EEA and UK may complain to their local data protection authority.
  • California residents have the right to know, access, correct and delete their personal information. We do not sell or share personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights.

To make a request, email [email protected] from the address on your account. We may need to verify your identity before acting on it.

9. Security

We use encrypted connections, access controls that keep each account's data separate, and limited access to our systems. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

10. Children

Gym Vibes is not intended for anyone under 13, and we do not knowingly collect information from children under 13. If you believe a child has given us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy. We will change the date at the top, and tell you in the app or on this website if the changes are significant.

12. Contact

Waffle Sloth LLC
[email protected]