Privacy Policy

1. Overview

Gainly is a fitness progress tracking app for iOS. It lets you log workouts, track body measurements, photograph your physique, and receive AI-powered analysis of your progress over time.

This policy explains what data Gainly collects, why it collects it, where it is stored, and what rights you have. By using the app, you agree to the practices described here.

2. Data You Provide

2.1 Profile Information

• Name (optional) — used to personalise greetings and reminders
• Birth year — used to contextualise AI analysis and age-appropriate feedback
• Gender — used for personalised fitness insights and cycle-aware training (if applicable)
• Body measurements — weight, height, and optional circumference measurements you enter
• Fitness goal — the training phase (Cut, Bulk, or Maintain) you select
• Equipment profile — the gym equipment available to you

2.2 Activity Data

• Progress photos — photos you take or import for visual progress tracking and AI analysis
• Workout sessions — exercises, sets, reps, weights, and RPE ratings you log
• Nutrition logs — calorie and macro entries you record
• Daily check-ins — subjective wellbeing ratings you submit
• Water intake — hydration logs you enter
• Referral activity — if you share or redeem a referral code, we track redemption status to grant additional free AI analyses

2.3 What We Do NOT Collect

• We do not require or collect your email address
• We do not create user accounts
• We do not collect precise GPS location
• We do not track you across other apps or websites
• We do not sell your data to third parties

3. Automatically Generated Data

• Anonymous device identifier — a randomly generated UUID created on first launch, used solely to enforce usage limits. It is never linked to your name, Apple ID, or any personal identifier.
• AI analysis counter — the number of analyses you have used this week (Gainly Pro subscribers) or in total (Free — starts at 3 lifetime analyses and can increase through referral rewards), synced via your private iCloud account and stored server-side to enforce tier limits
• App settings — your unit preferences, theme, notification schedule, and feature toggles, stored locally on your device

4. How We Use Your Data

5. AI Analysis and Third-Party Processing

When you request an AI analysis, your photo and relevant body data are transmitted through our secure Firebase Cloud Functions proxy (hosted on Google Cloud, us-central1) to Anthropic, Inc. — the provider of the Claude AI model — for processing.

• The proxy does not store your photos. Data is forwarded in memory and never written to disk or a database.
• Anthropic processes the data solely to generate your analysis result.
• We do not use your photos or personal data to train AI models.
• Anthropic's handling of data is governed by their Privacy Policy and Usage Policy.

6. Data Storage

On Your Device

• All workout sessions, nutrition logs, check-ins, body measurements, and app settings are stored locally using Apple's CoreData framework.
• Progress photos are stored in your device's file system and are not uploaded to any server.
• If iCloud is enabled, your data syncs across your Apple devices via iCloud CloudKit, governed by Apple's Privacy Policy.

On Our Servers (Firebase / Firestore)

To enforce usage limits, we store the following minimal data in Google Firestore:

• Anonymous device UUID — never linked to personal identity
• AI analysis usage counter (free tier: lifetime total, starting at 3 and increasing with referral rewards; Gainly Pro tier: weekly count and week start date)

No photos, health data, workout logs, or personally identifiable information are stored in Firestore.

Device Integrity (App Check)

Our backend uses Firebase App Check with Apple App Attest to verify that analysis requests originate from a genuine, unmodified copy of Gainly. The attestation token does not identify you personally.

7. Apple Health Integration

7.1 Health Data We Read

During onboarding, every user is asked to grant Gainly permission to read the following data from Apple Health, used to power readiness insights and (where applicable) cycle-aware training recommendations:

• Steps, resting heart rate, heart rate variability (HRV), sleep analysis, and VO2Max
• Menstrual flow data — a sensitive health category. This is read only if you choose to grant it and is used exclusively to inform in-app cycle-aware training features. It is never transmitted to our servers or any third party, and is processed entirely on your device.

Declining this permission (or any part of it) at onboarding, or later in iOS Settings → Privacy & Security → Health, does not prevent you from using the rest of the app.

7.2 Health Data We Write

Gainly Pro subscribers can optionally enable "Sync to Apple Health" in Profile → Preferences. When enabled, Gainly writes the following data to the Health app on your device:

• Completed workout sessions
• Body weight and body fat percentage entries
• Water intake logs
• Active energy burned

This write sync is entirely opt-in and can be disabled at any time in Preferences. No Health data — read or written — is transmitted to our servers; all Health app access happens directly on your device.

8. Subscriptions and Payments

Gainly offers two optional paid subscription tiers, both processed exclusively through Apple In-App Purchases:

• Pro Lite — unlocks non-AI advanced features (advanced charts, Year in Review, CSV export, photo overlay history, full history, unlimited progress photos/albums/measurements, journey insights, and time capsule). Does not include AI-powered analysis.
• Gainly Pro — includes everything in Pro Lite plus AI physique analysis (5 analyses per week).

We never see or store your payment card details. Subscription management — including cancellation — is handled through your Apple ID settings. Purchase receipts are validated through Apple's servers.

9. Notifications

If you grant notification permission, Gainly may send daily workout reminders, inactivity nudges, streak alerts, and milestone celebrations. You can disable notifications at any time in iOS Settings → Notifications → Gainly or from Profile → Preferences inside the app.

10. Children's Privacy

Gainly is intended for users aged 18 and older. The AI physique analysis feature is designed for adults: our AI model is instructed to decline analysis and return a refusal if it judges the subject of a photo to be a minor. This is a content-level check performed by the AI model itself, not a substitute for age verification. We do not knowingly collect personal data from anyone under 18. If you believe a minor has used the app, please contact us at turlybekdostan@gmail.com.

11. Data Retention and Deletion

• All data on your device is deleted when you delete the app.
• iCloud data can be removed via iOS Settings → [Your Name] → iCloud → Manage Account Storage.
• To request deletion of server-side data (anonymous UUID + analysis counters in Firestore), email turlybekdostan@gmail.com. We will process your request within 30 days.

12. Your Rights

• Access — all data Gainly holds about you is visible within the app itself
• Deletion — delete the app to remove all local data; email us to remove server-side data
• Opt-out — disable notifications, iCloud sync, or Apple Health sync at any time
• Questions — contact us at turlybekdostan@gmail.com

13. Changes to This Policy

We may update this policy as new features are added. Material changes will be communicated via an in-app notice or by updating the date above. Continued use of the app after changes are posted constitutes acceptance.

14. Contact