Privacy policy

Last updated: 13 November 2026

This policy explains what the Gym Book workout app ("Gym Book", "we") collects, how it's used and who it's shared with. Gym Book needs an account, which backs up your data and syncs it between your devices. Your data is also kept on each device, so the app works without a connection.

Your account

• Account details: your email address and password. Passwords are stored only as a secure hash, never in readable form. If you sign in with Google, we receive your Google account's email address and account ID from Google, and nothing else. We also keep whether your email address has been verified.
• Sign-in sessions: sign-in tokens that keep you signed in on each device, stored only as hashes.
• Server logs: the server may record IP addresses and request times in its logs, used only to keep the service secure and to fix problems.

What you put in Gym Book

What you enter is saved on your device and synced to your account so it can be restored and appear on your other devices: your profile (goal, experience, training days, session length, equipment, units, gender, body weight, and optionally your age, body fat percentage, height, activity level and how long you've trained), your training plans, workouts and their sets and notes (including a workout in progress), custom exercises, body weight history, the food you log with its calories and macros, foods you save to My foods, your supplements and the doses you log, your nutrition goals, and your physique checks (the body fat estimate and notes the AI gave, with the weight it went by).

A workout you delete is kept in your account as deleted, so you can bring it back from Recently deleted workouts and so the deletion reaches your other devices. It's removed for good when your account is deleted.

Progress photos: photos of yourself you add in Progress (taken with the camera when you tap Take a photo, or picked from your photos), with the day and pose you give them, are kept on your device and in your account so they come back on a new device. They're private: only you can see them, not your friends or anyone else, and they're never sent to the AI, except the photos of a physique check you run (see AI features). In your account they're kept encrypted with a key of your own, and only sent back to you. Deleting a photo deletes it from your account too.

Sharing a picture: when you share a workout or a recap as a picture, the app draws it on your device and hands it to the app you choose; it isn't sent to our server.

Your calendar

Only if you turn on booking workouts in your calendar (it's off by default), and with the permission your phone asks for, Gym Book reads when the events in your device's calendars start and end and whether they're marked busy, and adds your plan's next workouts to the calendar you pick. It doesn't use or keep your events' titles, places or guests. All of this happens on your device. Gym Book only moves or deletes the events it added itself, and turning booking off removes the ones still to come.

Only if you also use planning with AI (Gym Book Pro; you can turn it off), Gym Book sends our server, and through it the AI, the free time it found on the days ahead (start and end times only), your training days and preferred time, your plan's next workouts (their names, length and main muscles), and when your recent workouts started. Your events themselves are never sent. It's used only to plan your week and isn't saved, apart from counting toward your AI quota.

Health data from Samsung Health and Health Connect

On Android, you can choose to let Gym Book read health data, either from Samsung Health directly or through Health Connect (from every app, or only the apps you pick). Only with your permission, given in Samsung Health or Health Connect and changeable there at any time, Gym Book reads: calories burned (total, active and resting), steps, food logged in other apps (each food's name, meal, time, calories, protein, carbohydrates and fat), weight, body fat, lean body mass, bone mass, body water mass, basal metabolic rate, height and sleep (when each sleep started and ended, how long you were asleep, its time in deep and REM sleep, and Samsung Health's sleep score). When you first connect, Gym Book reads all of this that's available, including data recorded before you connected (in Health Connect, older than 30 days only if you allow access to past data); after that it keeps the last 30 days up to date.

Only if you turn on sending (it's off by default), Gym Book also writes to Samsung Health or Health Connect what you log in Gym Book: finished workouts (as strength-training sessions with their time and active calories), the food you log and the weight and body fat you enter. It only changes or deletes the records it wrote itself. Turning sending off stops it.

This data is used to show your nutrition, energy balance (calories eaten against burned), activity and body composition in the app, to estimate and suggest your nutrition goals, to estimate how quickly your muscles recover (sleep), and to keep your health app up to date with your training and food. It's saved and synced like the rest of your data. It's never used for advertising, never sold, and never sent to the AI features, apart from the body weight and height a physique check goes by (see AI features). The one way any of it can become visible to others is your choice to join the strength leaderboards: your latest weigh-in, including one read from a health app, is what your lifts are compared to, as described below. Disconnecting stops further reading; deleting your account deletes what was synced.

Heart rate on Wear OS

With your permission, the Gym Book app on a Wear OS watch reads your heart rate from the watch's sensor while a workout is on screen, to show it on the watch and, live, on your phone. It isn't stored, synced to your account or shared.

Food search and barcodes

When you search for a food to log, the words you type are sent to Gym Book's server, which looks them up in FatSecret (fatsecret.com), the food database, and keeps neither the search nor who made it. A barcode you scan is looked up the same way. Nothing else is sent with them: no account, health data or other personal information. Your favourites and the foods you save to My foods are searched on your device.

Barcode scanning is on Android only. Barcodes are scanned with Google's code scanner, part of Google Play services, which reads the barcode on your device and hands Gym Book only its number; Gym Book doesn't get access to your camera or its pictures.

Gym Book on the web

You can sign in on this website to see your workout history and edit your plans. The website loads them from your account into your browser and sends your edits back the same way the app syncs. Your sign-in is kept only in that browser tab until you close it or sign out.

Your public profile

Every account has a public profile so friends, leaderboards and shared plans can show who's who:

• Username, picture and bio: your username (the one you pick when you sign up, or one made up for you, which you can change), and the picture and bio you choose to add. Other Gym Book users can see them, for example when they look you up by username or friend code, on a leaderboard or on a plan you share. Your picture can be loaded by anyone who knows your username. Your email address and the rest of your profile are never shown.
• Friend code: a code you can give people so they can add you as a friend.
• Gym Book Pro: if you have Gym Book Pro, a ring around your picture on the leaderboards shows it.

Leaderboards

The leaderboards are optional: you're only on them after you choose to join, and leaving removes you from all of them. They're between friends only: while you're on them, the people who've added you as a friend can see, next to your username and picture:

• Strength and consistency: your tier overall and in each category (chest, back, shoulders, legs, posterior chain, arms and consistency). For each strength category, the exercise it comes from (one you created yourself shows only as "Custom exercise"), its estimated one-rep max and that lift's ratio to your body weight, which together show your body weight; for consistency, how many workouts a week you've done over the last 8 weeks. They're worked out on our server from your synced workouts of the last year and your latest weigh-in (or the body weight in your profile), against the standards for your gender.
• Nutrition: how many days in a row you've logged food, your longest run, and how many of the last 30 days your calories and protein were on target for your own goals. Only these numbers are shared, never what you ate. The app sends them to our server whenever you open Nutrition.

Someone who thinks your numbers or profile are wrong or offensive can report them; our team reviews reports and can hide you from the leaderboards or clear your picture and bio.

Friends and shared plans

• Friends: who you add as a friend, and who adds you. Friends who've joined the leaderboards see each other on them.
• Friends' workouts: unless you turn it off (Profile → Edit profile, or in Friends' workouts), your friends see your finished workouts in the app: their name, date, duration, exercises and sets. They can like and comment on them; your likes and comments on their workouts are seen by them and their friends. You can delete any comment on your workouts.
• Challenges: when you start or join a challenge, everyone in it sees your username, picture and your total for it (workouts, sets, volume, active days or a lift's best in its dates, or the days you logged food or were on your protein or calorie goal), worked out from your synced workouts, or your synced food log and goals.
• Reports: any report you send about another user, with the reason you give, for our team to review.
• Shared plans: a plan you share with people in the app is visible to them, with your username and picture, and those you let edit it can change it. A plan you share by public link can be seen by anyone with the link, without an account, with your username, picture and bio. Stopping sharing ends both. A copy someone saved of a plan you shared is theirs and stays in their account.

Gym Book Pro and purchases

Gym Book Pro is bought through Google Play, the App Store or the Microsoft Store, which handle the payment: we never see your payment details. So that a purchase can only be used by your account, the app gives the store an identifier for your account that doesn't reveal who you are. Our server then checks the purchase with the store and keeps what it needs to know whether you have Gym Book Pro: which plan, when it renews or ends, whether it's a free trial or was refunded, and the store's identifiers for the purchase. Pro can also be given to you by our team. Cancelling is done in the store; deleting your account doesn't cancel a subscription.

AI features

The AI features (AI plans, importing a plan, the AI coach, AI suggestions, weekly plan reviews, AI food estimates and physique checks) send what they need to OpenAI to generate an answer: your training profile (goal, experience, days, session length, equipment, and your age, gender, body weight and how long you've trained, where set), the plan, what you type or attach, and for suggestions and reviews a summary of your recent workouts on the plan. To import a plan from a link, our server downloads the page or file at that link and sends its contents. When you import workouts from another app, exercise names the app can't match itself are sent so the AI can match them. For an AI food estimate, what you describe and the photo you take or pick are sent (the camera is only used when you tap Take photo). The description and portion are kept with the food you log, in your account like the rest of your log; the photo is kept only on your device. The AI coach (on the Nutrition tab, your nutrition goals and a finished workout) is sent a summary of what it looks at, worked out on your device: the food you logged in Gym Book (names, calories, macros and times), your goals and goal weight, your supplements, or the workout's sets and your last sessions of the same exercises. A physique check sends the photos you take for it (and those of your check before, if they're on your device or in your account), your sex, age, height, goal and the body weight shown on the check, which you can change before sending; that weight and height may have been read from a health app. Apart from that, your name, email address and health data (anything read from Samsung Health or Health Connect, such as calories burned, food logged in other apps, weigh-ins or sleep) are not sent.

The AI features run when you use them, with these exceptions, all with Gym Book Pro: the app reviews your active plan about once a week after you've logged workouts on it, and shows any suggestions in the app; the AI coach looks at today's food once you've logged some (again only after a few hours, once more is logged) and at a workout when you finish it; and planning with AI plans your week when it starts, or when your calendar changes in its way. We record when each AI request was made and what kind it was, to apply usage limits.

How we use your data

Only to provide Gym Book: signing you in, backing up and syncing your data, training suggestions such as starting weights, progression and muscle recovery, nutrition goals, the AI features you use, your public profile, friends, shared plans and the leaderboards, Gym Book Pro, support, reviewing reports, and keeping the service secure. Suggestions are calculated from your own data. We don't use your data for advertising, don't build marketing profiles, and don't sell it.

Who can access it

We don't sell your personal data or share it with third parties beyond what's described here. Your account data is stored on a server we operate, run by our hosting provider, which processes it only on our behalf. Our team can see account details in our admin tools (your email address, profile, a summary of your training, your plans and recent workouts, AI usage and subscription) and uses them only to run the service, to help when you contact us and to review reports. We disclose data only if required by law.

Gym Book contains no advertising, analytics or tracking software. Besides OpenAI and the stores, described above, a few features use other services:

• Exercise videos are YouTube videos: an exercise's page plays its demonstration in YouTube's embedded player, so YouTube receives your device's IP address and which video is shown. (The exercise pictures are part of the app and load nothing.) No account information is sent. What YouTube collects is covered by Google's privacy policy. "Open in YouTube" opens the video (for your own exercises, a YouTube search) in your browser or the YouTube app.
• Email: codes to verify your email address, reset your password or change your email are sent through our email provider, which receives the address and the message.
• Sign in with Google: Google receives your sign-in to Gym Book, as with any app you sign in to with Google.

Security

All communication between the app and our server is encrypted with HTTPS. Access to your data requires your signed-in account, and each account can only ever read its own data, apart from what others share with it as described above.

Keeping and deleting your data

Your account data is kept while your account exists. You can delete your account at any time in the app (Profile tab → Delete account); this permanently deletes your account and everything kept for it on our server: your synced data, public profile and picture, progress photos, leaderboard entries, friends, likes and comments, challenges, reports, shared plans and purchase records. Signing out removes your data from that device. Data on a device is also deleted when you uninstall the app.

You can also request deletion without the app, and export your data from the app at any time.

Children

Gym Book is not directed at children under 13, and we don't knowingly collect data from them.

Changes to this policy

If this policy changes, the new version will be posted on this page with a new "last updated" date.

Contact

Questions about this policy or your data can be sent by email to yskudilov@gmail.com.