Privacy
Last updated 16 October 2026. This page describes what GymZip stores, where, and what you can do about it.
What we store
- Your account: email address and a hashed password. We never see or store the password itself.
- Your training profile: display name, age, weight, height, experience level, goal, preferred training days, language, theme, units and time zone. Your body data is used to choose safe starting loads — nothing else.
- Your plans and sessions: the plans written for you and the sessions, sets and notes you log.
- Billing state: which plan you are on and when it renews. Card details never reach us — see Payments below.
- Operational records: plan-generation attempts (the brief you submitted, the model used, success or failure) so we can investigate problems and meter usage.
Where it is stored
Application data is stored in a PocketBase database on servers in the European Union, and uploaded files are stored in Hetzner Object Storage, also in the EU. Backups are held in the same region.
Who else sees it
- OpenAI receives your plan brief and training profile when you generate a plan, so it can write one. It does not receive your email address or your name.
- Creem is our merchant of record. When you subscribe, Creem handles the payment and holds your billing details; we receive only the subscription status.
- Email delivery providers handle verification and password-reset messages.
We do not sell your data, and we do not use it to train models.
Analytics
GymZip does not use advertising trackers or third-party analytics cookies. The only browser storage the app uses is the session that keeps you signed in, plus your theme and language choice.
Your rights
- Export: download every plan and session as JSON from Settings.
- Correction: edit your profile and any logged session at any time.
- Deletion: delete your account from Settings. Plans, sessions and profile are removed; billing records are kept only as long as tax law requires.
Contact
Questions about any of this: privacy@gymzip.app.