Last updated October 6, 2026
Gymswell is a fitness and nutrition app published by IdeaPlaces Inc. This policy explains what data the app collects, why it collects it, who it is shared with, and how you can remove it. It covers the Gymswell iOS app and the Gymswell website.
The short version. Your training and nutrition data is yours. We store it so the app can show it back to you across your devices. We do not sell it, we do not use it for advertising, and we do not share it with anyone except the service providers listed below that are needed to make the app work.
When you create an account we store your email address and a display name. If you sign in with Google or with Apple, we receive the email address and name that provider releases to us. If you choose Sign in with Apple and hide your email, we only ever see Apple's relay address. You may also use the app as a guest, in which case no account identifier is collected until you decide to sign up.
This is the data the app exists to hold: workouts, exercises, sets, weights and reps, personal records, rest times and session notes; food and meal logs, recipes and pantry items; body measurements, body weight and progress photos; goals, training programs and preferences.
| Permission | Why the app asks |
|---|---|
| Camera | Scanning food barcodes, photographing meals for calorie logging, and importing workout plans from paper. |
| Photo library | Logging meals from photos you already have, adding images to custom exercises, and saving progress photos or workout summaries you choose to export. |
| Microphone | Voice logging, so you can record sets and reps hands-free during a workout. |
| Health (HealthKit) | Reading your weigh-ins (to keep your trend weight and calorie target current) and your runs, rides, walks and other cardio workouts, and writing your Gymswell workouts back to Apple Health so they count toward your activity goals. |
| Location | While you use the app: showing the map and finding gyms near you. If you turn on gym reminders and allow “Always”: your phone notices when you walk into or out of a gym you saved, so Gymswell can remind you to start or finish a workout. Gymswell never tracks your route or keeps a location history, and your position is never sent to our servers; only the gyms you save (name, address and map point) are stored in your account. |
Every one of these is optional. iOS asks before granting each, you can decline any of them, and you can revoke them at any time in Settings. Declining a permission disables the feature that needs it and nothing else.
Health and fitness data read from HealthKit is used only to display your activity inside the app and to inform the workout and nutrition guidance it gives you. It is never used for advertising or marketing, never sold, and never shared with third parties for their own purposes.
Your Apple Health weigh-ins and cardio workouts are included in a request to the AI service (section 2) only after you have given the app permission to do so. You can withdraw that permission in the app at any time, and the AI then works from what you log in Gymswell alone.
If you subscribe to Gymswell Pro, the purchase is made through Apple. We receive the subscription's status (which plan, when it renews or expires) and your purchase history for Gymswell from RevenueCat, linked to your Gymswell account identifier. We never receive your card or payment details.
If you save your gym, the gym's name and coordinates are stored in your account so the app can recognise when you are there. Searching for a gym sends your search and your approximate location to Google Maps and Places.
If you connect Strava, the app imports metadata about your activities (type, name, date, duration, distance, elevation and calories). It does not import routes, GPS tracks, heart rate or photos. You can disconnect Strava at any time in the app.
If you allow notifications, your device's push token is stored in your account and passed to the Expo push service and Apple's push service so we can deliver rest-timer and account notifications.
If the app crashes or hits an error, we receive a crash report through Sentry containing the error, the device model and the OS version. Crash reports are used to fix defects.
Gymswell generates workouts, answers coaching questions and estimates nutrition from meal photos using large language models hosted on Microsoft Azure OpenAI Service in an IdeaPlaces-controlled Azure resource.
To answer a request, the app sends the context that request needs: for example your recent training history and goals when generating a program, or the meal photo you just took when estimating its calories. Azure OpenAI processes these requests on our behalf as a data processor. Under Microsoft's terms for the service, your prompts and responses are not used to train OpenAI or Microsoft models.
We do not sell personal data and we do not share it for advertising. We use the following processors, each only for the function named:
| Provider | Function |
|---|---|
| Google Firebase | Authentication, database and file storage, app hosting. |
| Microsoft Azure OpenAI | Workout generation, coaching answers, meal photo analysis. |
| Sentry | Crash and error reporting. |
| Apple | Sign in with Apple, HealthKit, App Store delivery. |
| Google Sign-In; Google Maps and Places for gym search (your search and approximate location). | |
| RevenueCat | Gymswell Pro subscription status and purchase history, linked to your app account identifier. |
| Expo (push service) | Delivering push notifications; receives your device's push token. |
| Strava | Importing your activity metadata, only when you connect Strava. |
| Embedded video providers (such as YouTube) | Playing the training videos shown in the app. When a video plays, the provider receives the usual information a web player receives, such as your IP address and device type. |
| Discord | Internal routing of the feedback and reports you send us to our team. Used by IdeaPlaces only; nothing is posted publicly. |
When you look up a food item, the app queries public nutrition databases, including Open Food Facts and the USDA FoodData Central database. These queries contain the search term or barcode only. They do not contain your identity or your logs.
We may also disclose data where we are legally required to, or to protect the rights and safety of our users.
Your account and app data are stored in Google Firebase (Cloud Firestore and Cloud Storage) on Google Cloud infrastructure. AI requests are processed in Microsoft Azure. Data may therefore be processed in the United States and other countries where these providers operate. Access is restricted by Firebase security rules so that a signed-in user can read and write only their own records.
We keep your data for as long as your account exists, because the app's purpose is to show you your own history over time. When you delete your account, your account record and the training and nutrition data associated with it are deleted. Backups and logs may retain copies for a short period before they age out. Anonymous, aggregated statistics that cannot identify you may be retained.
Depending on where you live, you may have additional rights under laws such as the GDPR or Quebec's Law 25, including the right to object to processing or to lodge a complaint with your data protection authority. Write to us and we will honour them.
Gymswell is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
If we change this policy we will update the effective date above. Material changes will be communicated in the app.
IdeaPlaces Inc.
Questions about this policy, or any request above:
chip@ideaplaces.com