Overview
This Privacy Policy describes how GymBroAI collects, uses, and protects your personal information when you use our mobile application.
Definitions:
• "App" refers to the GymBroAI application
• "Company/We/Us" refers to GymBroAI, operated from Quebec, Canada
• "You" refers to the user of the App
• "Personal Data" means any information relating to an identified individual
• "Service Providers" means third parties who process data on our behalf
Types of Data We Collect — Personal Data
- First name and email address (at registration)
- Profile data: age, weight, height, fitness goals, dietary preferences, injuries, sleep habits, stress level
Usage Data (collected automatically)
- App version, device type, OS version
- Feature usage patterns (anonymized)
- Error logs for debugging purposes
- Subscription product, purchase status, and entitlement identifiers supplied by Apple and RevenueCat
Health & Fitness Data
- Photos of meals (processed in real-time, not permanently stored)
- Exercise videos/photos (processed in real-time, not permanently stored)
- Food journal entries you create
- Weight log entries you manually enter
How We Use Your Data
• To provide personalized AI fitness coaching
• To calculate daily calorie and macro targets using BMR formulas
• To analyze exercise form and provide feedback
• To suggest recipes based on detected ingredients
• To track your progress over time
• To send verification and notification emails
• To improve our AI models (anonymized, aggregated data only)
Exercise & Health Data
We process your fitness photos to provide form analysis and calorie estimates. These images are sent to our AI provider (Groq) for real-time processing and are NOT permanently stored on any server. All health metrics you log (weight, calories) are stored in your account. You may delete all your data at any time from Settings.
Data Retention
• Account, profile, journal, and progress data under our control: retained until you delete your account
• Photos: processed in real-time, not stored beyond the analysis session
• Usage data: retained for up to 12 months for app improvement purposes
• Purchase and transaction records: Apple and RevenueCat may retain records as required for subscription management, fraud prevention, accounting, and legal obligations
Third-Party Service Providers
We work with the following providers:
• Supabase (supabase.com) — secure database and authentication
• Groq (groq.com) — AI processing for meal scan, form check, and fridge scan
• Resend (resend.com) — transactional email delivery
• RevenueCat (revenuecat.com) — subscription entitlement and purchase management using your app user identifier and transaction information supplied by the store
• Apple (apple.com) — App Store payment processing and transaction records
We do NOT sell your personal data to third parties.
We do NOT use your data for advertising purposes.
Data Security
We implement industry-standard security measures:
• All data transmitted over encrypted HTTPS/TLS connections
• Passwords are hashed and never stored in plain text
• Database encrypted at rest (Supabase AES-256)
• Regular security reviews
Your Rights
You have the right to:
• Access your personal data (Settings → My Profile)
• Correct inaccurate data (Settings → Edit Goals)
• Permanently delete your account, profile, and GymBroAI data under our control directly in the App (Settings → Account → Delete my account)
• Export your data — contact privacy@gymbroai.ca
• Withdraw consent at any time by deleting your account
• Lodge a complaint with the Commission d'accès à l'information (Quebec)
Deleting your GymBroAI account does not cancel an active App Store subscription. Apple and RevenueCat may retain transaction records required for purchase management, fraud prevention, and legal obligations.
Children's Privacy
GymBroAI is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such data, contact us immediately at privacy@gymbroai.ca.
International Transfers
As a Canadian company, your data may be processed by service providers in Canada, the United States, or other jurisdictions, including Supabase, Groq, Resend, RevenueCat, and Apple. We use contractual and technical safeguards appropriate to the service and applicable law.
Changes to This Policy
We will notify you of material changes via email and in-app notice. Continued use of the App after changes constitutes acceptance.
Contact
Privacy Officer: privacy@gymbroai.ca
Legal inquiries: legal@gymbroai.ca
GymBroAI — gymbroai.ca — Quebec, Canada