Privacy Policy

Effective date: 29 August 2026

The short version: GymChad stores your training log on your device. If you sign in, it is backed up to servers located in France. Your username, profile picture and workout milestones are visible only to members of the private groups you choose to join. We show no ads, use no third-party analytics, and never sell your data.

1. Who we are

GymChad is published by Mathieu Gries-Peroz, an independent developer based in France, who acts as the data controller for the personal data described below. You can reach us at contact@gymchad.app.

2. Data we collect and why

Without an account, GymChad works fully offline: your programs, workouts, sets and personal records are stored only on your device. We collect nothing.

If you sign in (via Google Sign-In), we process:

Account data — your email address, display name and profile picture, provided by Google when you sign in. Used to identify your account and let you recover your data on a new device.
Profile data — the username you choose and your unit preference (kg/lb).
Training data — your programs, workout sessions, sets and personal records, backed up to the cloud so you never lose them.
Group activity — if you join a group, its members can see your username, profile picture and automatic workout events (completed sessions, personal records) and reactions. Groups are private: only people with the invitation code can join.
Subscription status — whether you have an active GymChad Pro subscription (see section 4). We never see your payment details.

3. Where your data lives

Cloud data is stored with Supabase on servers located in Paris, France (AWS region eu-west-3), inside the European Union.

4. Third-party services

Supabase — authentication, database and backup hosting (EU servers).
Google Sign-In — account sign-in. Google's own privacy policy applies to the sign-in step.
RevenueCat — subscription management. It processes an anonymous user identifier and store purchase receipts, never your payment details. See the RevenueCat privacy policy.
Apple App Store / Google Play — payment processing for GymChad Pro, under their own terms.
jsDelivr — a content delivery network that serves the animated exercise demonstrations. When you open an exercise's animation, jsDelivr technically receives your IP address, as any web server does. No account data is sent.

5. What we don't do

No advertising, no ad trackers.
No third-party analytics.
No selling or renting of personal data — to anyone, ever.

6. Retention and deletion

Cloud data is kept for as long as your account exists. You can delete your account directly in the app (Profile → account settings): this permanently removes your account and all associated cloud data, including backup history. Data stored locally on your device stays under your control and is removed by uninstalling the app.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to certain processing. Most of this you can do directly in the app; for anything else, email contact@gymchad.app. You may also lodge a complaint with your supervisory authority (in France, the CNIL).

8. Children

GymChad is not directed at children. You must be at least 15 years old to create an account.

9. Changes

If we change this policy, we will update this page and its effective date. Substantial changes will be announced in the app.