gymcel Privacy Policy

Last updated: August 9, 2026

gymcel ("we", "us", or "the app") is a strength-training, nutrition, and physique-progress app. This policy explains the information gymcel handles, why it is used, and the choices available to you.

Information you provide

gymcel stores the profile details you enter, such as your username, age, height, weight, training goal, experience, preferred units, and weekly training frequency. The app also stores workouts, exercise sets, meals, coach conversations and summaries, weekly reports, and physique-scan results so its core features work and your progress can be restored.

Photos and camera access

Camera and photo-library access are used only when you choose to capture or select a physique or meal photo. Selected photos are uploaded over an encrypted connection to a private, account-scoped storage area and processed to return the requested scan. Photos and derived scan results are not used for advertising or to identify you outside gymcel.

Accounts

The app creates an anonymous account automatically. You may optionally link it using Sign in with Apple. Apple may provide a private relay email address depending on your Apple settings.

Subscriptions

Subscriptions and payment details are processed by Apple. RevenueCat receives purchase identifiers and subscription status so gymcel can unlock paid features and restore purchases. We do not receive your full payment-card details.

Analytics and advertising measurement

With your permission through Apple’s App Tracking Transparency prompt, AppsFlyer may use a device advertising identifier to measure advertising performance. You may decline permission; declining does not remove core app functionality. PostHog receives app lifecycle, screen-view, onboarding, paywall, purchase-status, and feature-interaction events so we can understand app performance and improve the experience. gymcel does not send workout contents, photos, coach messages, or payment-card details to PostHog.

Service providers

We use Supabase for authentication, database, private file storage, and server functions; OpenAI for generating requested coach and photo-analysis results; RevenueCat for subscription status; PostHog for product analytics; Apple for purchases and optional Apple sign-in; and AppsFlyer for consent-based attribution. These providers process data only to provide their respective services and under their own privacy terms.

Retention and deletion

We retain account data while your account is active. In the app, open Profile and choose Delete Account to permanently delete your server account, workouts, scans, photos, meals, coach data, and locally stored app data. You may also contact us for help with a deletion request.

Security

Data is transmitted using encrypted HTTPS connections. Server records and photos use account-level access controls. No internet service can guarantee absolute security, but we use reasonable technical safeguards appropriate to the information handled.

Health disclaimer

gymcel provides fitness estimates and general educational guidance, not medical advice, diagnosis, or treatment. Physique and nutrition estimates may be inaccurate. Consult a qualified professional before making health decisions.

Children

gymcel is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We may update this policy as the app changes. The date above identifies the latest version.

Contact

Privacy questions or requests: ahmed-hamza.sahl@vconsult.at