Privacy Policy

Who we are

• Gym Helper is run by PE Popovych Denys, a sole proprietor in Ukraine, who decides how your data is used and is responsible for it.
• Contact: @denys_popovych on Telegram or denys@hetg.net.

What we store

• If you use Telegram: your Telegram profile (name, username, photo and language).
• If you sign in with Apple: your Apple user ID (a code Apple gives us for Gym Helper), the name Apple shares the first time, and the email Apple shares (sometimes a private relay address) as your optional account email.
• If you sign in with Google: your Google user ID (a code Google gives us for Gym Helper), the name Google shares, and your verified Google email as your optional account email. Not your Google profile picture.
• Your email, only if you add one in Settings or it came from Google or Apple: only you see it, and we use it only to send you confirmation codes and the data download links you ask for. Never for advertising; change or remove it in Settings at any time.
• Workouts you log yourself on the site or in the iOS app — outside any group, or posted into your group (the bot posts them in the chat as a reply to the coach’s plan) — and, when you use the workout timer, when it started and stopped.
• The text and captions of messages in training groups registered with the bot. Not photos, videos or voice messages, and nothing from other chats.
• Only from people who joined a group with /join or /coach and accepted this policy: nothing from anyone else in the chat.
• The plans and workouts read from those messages, and your corrections.
• Body weight and daily activity, only if you add them (in the bot, on the site or in the iOS app).
• Reports you send (what you reported, a short excerpt and your reason) and the people you block.

What goes to the AI model

• To read workouts from messages, the bot sends them to Google's Gemini through its paid API. Google uses them only to answer us and doesn't use them to improve its products.
• The model gets only: whether the sender is a coach or a trainee, the group's exercise names, the lines of the plan being answered, and the message with names, @mentions, phone numbers, emails and links replaced. Anything else you write in a message, like an injury, reaches it as written.
• It never gets names, usernames, Telegram IDs or group names.
• Workouts you log in the app never go to the model.

Thanks, Oleh! @oleg_k squat 3x10 60

Thanks, [name]! @user squat 3x10 60

Sign in with Google

• If you sign in with Google, Google gives us your Google user ID, your name and your email address (the “openid”, “profile” and “email” permissions). We never ask for or keep your profile picture or anything else from your Google account.
• We use them only to sign you in, to name your account when it is created, and to fill in your optional account email, which we use only for confirmation codes and the data download links you ask for (change or remove it in Settings).
• We don’t share them with anyone, don’t sell them, and don’t use them for advertising or send them to the AI model.
• Disconnecting Google in Settings, or deleting your data, removes them from our server and revokes Gym Helper’s access at Google.
• Gym Helper’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google API Services User Data Policy →

Apple Health

• If you turn it on in the iOS app, the app reads your body weight, steps, active energy and exercise minutes from Apple Health and sends them to our server, where they show as your body weight and activity.
• It also writes your logged workouts (as strength workouts, with the timer’s real time when you used it) and your body weight to Apple Health.
• While the workout timer runs, the app keeps an Apple Health workout session open so it can update the lock screen and remind you when a rest is over; that session saves nothing. The Apple Watch app gets the running workout straight from your iPhone; nothing extra reaches our server.
• You choose each of these in the app and in iOS Settings → Health, and can turn them off at any time.
• Health data is never sent to the AI model, never used for advertising or marketing, and never sold or shared with anyone.

Notifications

• If you turn on notifications in the iOS app or in a browser, we keep that device’s push token or the browser’s push subscription, only to send you notifications. Turning them off removes it; logging out removes it too, and logging back in on the same browser turns them back on.
• The text of a notification passes through Apple’s push service (the iOS app and Safari) or the browser maker’s (for example Google for Chrome, Mozilla for Firefox).
• Your recent notifications are kept for 90 days, so you can see them in the site’s notifications (the bell at the top).

Who sees what

• You see all of your own data.
• Coaches see the workouts and plans in the groups they coach.
• Friends and group mates see only what you share with them: profile stats, achievements and progress. Never your messages or workout history.
• Body weight and activity: only you, and your coaches while you share them.
• Workouts you log in the app outside a group: you, and your friends as profile stats and progress (never the workouts themselves). Coaches and group mates don’t see them.
• Workouts you post to a group from the site or the app: the bot posts them in the group chat, so they’re seen like a reply there, and like any workout in that group.
• Public share links show only your name, photo, records and badges, and stop working when you turn them off.
• Admins — the Gym Helper team, currently one person — can see everything, and use it only to run the service, help you and fix problems. They also see reports, including who sent them.
• People you block aren't told.

Who else handles your data

• Telegram: messages reach the bot through Telegram, under Telegram's own privacy policy.
• Google: the Gemini API reads messages as described above, and may process them outside the EU.
• Oracle Cloud: our server and backups, in Frankfurt, Germany.
• Apple: if you sign in with Apple, Apple confirms who you are to us, and we ask Apple to end that sign-in when you delete your data. Apple Health keeps its data on your iPhone; we send Apple none of it.
• Google: if you sign in with Google, Google confirms who you are to us, and we ask Google to end that sign-in when you delete your data or disconnect Google.
• Resend: delivers the emails we send you (confirmation codes and data download links), from servers in the United States; it gets your email address and that mail only.
• We don't sell your data or use it for advertising, and there are no ads or analytics.
• This site uses only the cookies it needs to keep you logged in. It keeps your language and theme in your browser, and a copy of what you opened (your workouts, groups and profile) so it shows at once next time; logging out removes that copy. The iOS app keeps such a copy on your phone the same way.

Why we use it

• To provide the service you join: reading your workouts and showing them to you and your coaches.
• With your consent: recording your group messages, sharing with friends and group mates, public links and Apple Health.
• You can withdraw consent at any time: turn sharing or Apple Health off, or delete your data.

How long we keep it

• Until you delete it.
• Processed Telegram updates are deleted after 30 days, closed reports after 90 days, technical logs and backups after 14 days, so deleted data is fully gone after 14 days.

Changing or removing your data

• Fix a wrongly read workout on the site: open it and choose Correct.
• Turn sharing with group mates, body weight and activity sharing, and share links off in Settings at any time.
• Deleting a message in Telegram doesn't reach the bot, so the bot keeps it. Mark it as not a workout on the site.
• Get a copy of your data: Download my data in Settings (on the site or in the app) gives you everything we keep about you as one file (JSON), or with a confirmed email sends it as a link that works for 24 hours.
• Delete all your data yourself: Delete my data at the end of Settings, or /forget in the private chat with the bot. It removes your messages and the workouts read from them or logged in the app, body weight, activity, comments, friends, group memberships and your account.
• Plans you posted as a coach stay for your trainees, shown as by a deleted coach, without your name or the message text. Messages in the Telegram chat itself aren't touched.
• If you signed in with Apple or Google, deleting also ends that sign-in there.
• If you connect a login (Telegram, Apple or Google) that already had its own Gym Helper account, the two accounts become one only after you confirm: the other account’s data moves into the one you keep, and either login opens it.

Your rights

• You can get a copy of your data: write to us and we answer within 30 days.
• You can have your data corrected or deleted, restrict or object to how we use it, and withdraw your consent.
• You can complain to a data protection authority: in Ukraine the Ukrainian Parliament Commissioner for Human Rights, in the EU the authority of your country.

Age

• Gym Helper is for people 16 and older. If we learn that someone younger uses it, we delete their data.
• Using Gym Helper also means agreeing to the Terms of Use.

Changes to this policy

• When it changes, we update the date at the top, the bot posts a note in your groups, and the site and the app show a notice until you have read it.