Privacy Policy

1. Overview

Gym Bully AI is a workout-accountability app that sends you comedic reminders on your training days, lets you verify gym check-ins, and (optionally) charges a self-imposed penalty if you skip. This policy explains what we collect, why, and your choices. We do not sell your personal information, and we do not use it for advertising or cross-app tracking.

Gym Bully AI is operated by Fenwick Holdings LLC ("Gym Bully AI," "we," "us," or "our"), located at 131 Burton Road, Beacon Falls, CT 06403.

2. Information we collect

• Account (Sign in with Google or Sign in with Apple). If you sign in with Google, we receive your Google account ID and verified email address, and those are the only two things we keep (Google's sign-in also carries your name and profile photo, which we don't store). If you sign in with Apple, we receive a stable Apple user identifier and, if you choose to share it, your email address (which may be an Apple relay address). On Android, Sign in with Apple opens Apple's sign-in page in a browser tab, and Apple sends the result to our server. We never see your password. Signing in is optional; many features work without it. Once you're signed in, you can also choose a unique username in Settings.
• Device & notifications. A push token from Apple Push Notification service (iPhone) or Firebase Cloud Messaging (Android), plus device platform, app version, time zone, and whether notifications are turned on, used to deliver reminders at the right time. On Android the app registers when it first opens, even before you allow notifications, and we don't send reminders while they're off.
• Install identifier. A random-looking ID for this installation of the app. On Android it is computed on your phone from Android's device ID (ANDROID_ID) with a one-way hash, so the device ID itself never leaves your phone; like the iPhone version, it stays the same if you reinstall. We use it to keep one reminder registration per phone, to keep a creator code attached to your install, to connect purchases to your install, and to count installs in our analytics. It is never used for advertising.
• Profile & schedule. Your (optional) name, free-text goals, primary goal, training days/windows, chosen persona, and cruelty level.
• Workout activity. Dates you mark a workout done, and verified check-ins, which include your location when you check in (latitude and longitude), your distance from your gym, a timestamp, and a flag indicating whether you attached a photo. The app reads your location only while it's open, when you save your gym or check in by location, and never in the background.
• Registered gym location. The coordinates and radius of the gym you save for check-ins.
• Subscriptions and purchases. Whether you have an active Maximum Motivation subscription or Lifetime purchase, and the purchase records the App Store or Google Play sends us through our subscription provider, RevenueCat (product, dates, trial status, renewals, refunds). We don't receive your payment card for these purchases.
• Penalty feature (only if you opt in). Your penalty amount and settings, a Stripe customer identifier, and a record of each charge (date, amount, status). We do not receive or store your card number. Card data is collected and processed by Stripe.
• Body measurements (only if you sign in). Weight/BMI entries, height, and goal weight you log are backed up to your account so they survive a reinstall or new phone. They are not sent to the AI, with one exception you trigger yourself: the optional body fat analysis (see §4).
• Food log (Maximum Motivation, only if you sign in). Meals you log (names, calories, macros, water), your nutrition targets, and the details used to calculate them (sex, age, and activity level) are backed up to your account. Meal photos are analyzed by the AI when you scan them (see §4), and their thumbnails are backed up for subscribers.
• Photos (only if you sign in). Gym check-in proof photos are uploaded to private, account-scoped cloud storage as evidence behind verified check-ins (relevant if you use the penalty feature). Progress photos and meal thumbnails are backed up for Maximum Motivation subscribers. Photos are never visible to other users, and are only sent to the AI in the two cases you initiate: scanning a meal, or requesting a body fat analysis (see §4).
• Workouts & gym sessions (only if you sign in). Your workout library, weekly plan, and logged gym sessions (exercises, sets, weights, times, personal records) are backed up to your account.
• Product analytics. The app sends us simple usage events tied to your install identifier: which onboarding steps you reached, when the subscription screen was shown, purchases, and widget taps, with your app version and platform. We use them to see where people get stuck. They are not used for advertising and are not shared with advertisers.
• Bug reports and suggestions. If you send one, we receive your message plus these diagnostics: app and OS version, device model, your bully, cruelty level, check-in method, whether the penalty is on, subscription, sign-in and notification status, and time zone.
• Account settings backup (only if you sign in). Your settings (persona, schedule, name, goals, units, registered gym, check-in method, training phases) are stored against your account so they restore when you sign in on a new device.
• Apple Health and Health Connect (optional). Health sync is off until you turn it on, and the app only uses Apple Health (iPhone) or Health Connect (Android) if you do. On iPhone, it reads and writes workouts, weight, and nutrition through Apple Health on your device. On Android, it saves the weigh-ins, gym sessions, meals (calories, protein, carbs, and fat), and water you log to Health Connect, and reads weigh-ins and workouts that other apps saved there. If a watch recorded the same workout as a session you logged, the app also reads that workout's heart rate and active calories to show them on the session; it never stores or sends them. Workouts and weigh-ins it imports become part of your app history and, if you're signed in, are backed up to your account like anything you log yourself. We never use health data for advertising, never sell it, and never send it to the AI except the height and latest weight a body fat analysis uses (see §4). Gym Bully AI's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements. You control every permission in Apple Health (Sharing, then Apps) or in Health Connect's settings.

If you don't sign in: weight entries, photos, and settings stay on your device only. On Android, the system's own backup to your Google account may include app settings (never photos); we can't access that backup.

3. How we use information

• Deliver reminders and run your schedule.
• Track streaks, completions, and verified check-ins.
• Generate AI-written messages and workout splits (see §4).
• Provide and gate subscription features.
• Operate the optional penalty feature, including charging your saved card when a scheduled workout is missed.
• Understand how the app is used (onboarding and subscription-screen analytics) so we can improve it.
• Prevent abuse, for example by rate-limiting AI requests per account, device, and IP address.
• Maintain security, prevent abuse, and comply with law.

We do not use your data for advertising and do not sell it.

4. AI processing

To generate personalized messages and workout splits, we send limited context to our AI provider, Anthropic: your (optional) name, goals, primary goal, and the muscle groups for that day's workout.

Three features send more, and only when you actively use them:

• Meal scanning (Maximum Motivation). When you scan or describe a meal, the photo and/or your description is sent to the AI to estimate calories and macros. AI food scans are limited per month (see the Terms).
• Body fat analysis (Maximum Motivation). When you request it on a progress photo, that photo plus your height and latest weight are sent to the AI to produce an approximate range. It runs only on photos you explicitly choose, one at a time.
• Workout recaps and meal roasts (Maximum Motivation). After you finish a gym session, a short summary (number of sets, personal records, minutes, and exercise names) is sent with your name, goal, and chosen bully so the AI can react to it. Meal scans can include the same name and goal for the bully's comment.

Outside meal scanning and body fat analysis, we do not send your weight, body data, photos, or payment information to the AI. AI requests are processed to generate the response and are not used by us to build advertising profiles.

5. Third parties we share with

We share only what's necessary with service providers that process data on our behalf:

• Apple: Sign in with Apple, App Store subscriptions, and push notifications on iPhone.
• Google: Sign in with Google, Google Play billing, and Firebase Cloud Messaging (push notifications on Android, delivered using your push token and a Firebase installation ID).
• RevenueCat: processes App Store and Google Play purchase records so we can confirm your subscription. It receives your install's purchase ID and purchase history, not your payment card.
• Anthropic: AI message/split generation, meal scanning, workout recaps, and body fat analysis (see §4).
• Stripe: payment processing for the penalty feature.
• Railway: hosting for our backend and database (Postgres).
• Supabase: account settings backup and private photo storage (account-scoped access controls).
• Open Food Facts: when you scan a barcode, your phone asks Open Food Facts for that product. Only the barcode number is sent (and, like any website, they see your IP address).
• Google ML Kit: reads barcodes on your phone when you use the Android barcode scanner. Google receives performance and usage metrics about the scanner, such as device model, OS and app version, a random ID for this installation, speed, and error codes, which Google uses for diagnostics and usage analytics and doesn't pass on to third parties. The camera image and the barcode itself are not sent to Google.

These providers have their own privacy practices; we encourage you to review them.

6. Retention & deletion

We keep your information while your account is active. You can delete your account in the app (Settings, then Account, then Delete account) or follow the steps at gymbullyai.com/delete-account, and you can request access to, correction of, or deletion of your data by emailing gymbullyai@gmail.com. Deleting your account removes your account, your cloud backups (settings, weigh-ins, food log, workouts, sessions, photos), your check-in history, your penalty settings and saved card, and our copies of your penalty charge records. Check-in proof photos are currently kept until you ask us by email to delete them. We keep: bug reports you sent (without the link to your account), analytics events tied to your install identifier (without the link to your account), purchase records (ours and those of our subscription processor, RevenueCat) and creator-code records needed for accounting and refunds, and anything Stripe, Apple, or Google Play must keep under their own terms. Your phone's reminder registration stays while the app is installed so reminders keep working signed out; after you uninstall the app, its details are cleared (usually within a day) and the rest of the record is deleted 90 days later. You can also reset all on-device data from the app's Settings.

7. Your rights

Depending on where you live (e.g. GDPR in the EU/UK, CCPA/CPRA in California), you may have rights to access, correct, delete, or port your data, and to object to or restrict certain processing. We honor these requests as required by law. Contact gymbullyai@gmail.com.

8. Children

Gym Bully AI is not directed to children and is intended for adults (the payment and penalty features require you to be 18+). We do not knowingly collect data from children.

9. Security

We use reasonable technical and organizational measures (encrypted transport, access controls, and session tokens stored in the iPhone Keychain or Android's Keystore-backed encrypted storage) to protect your information. No system is perfectly secure.

10. International users

We operate in the United States. If you use the app elsewhere, your information may be processed in countries with different data-protection laws.

11. Changes

We may update this policy; we'll post the new version here and update the effective date. Material changes will be communicated in-app where appropriate.

12. Contact

Questions or requests:

• Email: gymbullyai@gmail.com
• Mail: Fenwick Holdings LLC, 131 Burton Road, Beacon Falls, CT 06403