Consumer Health Data Privacy Policy

What health-related data GymSpaces collects, why, who receives it, and how to change your mind.

Last updated: 14 October 2026

Overview

GymSpaces is operated by GymSpaces Limited, a company registered in New Zealand ("GymSpaces", "we", "us", or "our"). This notice supplements our Privacy Policy. It describes the information about your body, training, recovery and nutrition that you give the GymSpaces app or allow it to read, why we use it, who receives it, and how you can withdraw a choice or delete the data.

This notice is provided for residents of Washington State and Nevada under those states' consumer health data privacy laws. We offer the same choices and controls to everyone who uses GymSpaces, wherever they live.

Optional Body, Recovery, Nutrition and device-health features each have their own choice in the app. Using GymSpaces, or accepting our Terms or Privacy Policy, does not turn any of them on. You can use core training without enabling them.

What we collect and why

Training (core)

The programs, workouts, exercises, sets, repetitions, weights, per-set effort notes, personal records and goals you create and log, together with any notes you add to a session. We use this to save your training log, sync it across the devices where you are signed in, and show your history and progress. Training is the core of the app and has no separate choice.

Body measurements (optional)

Measurements you choose to add, such as weight, height, body fat, waist or chest. We use them so you can follow changes over time.

Recovery (optional)

The daily check-ins you enter, including soreness, stress, energy and sleep, and the session effort you record. We use them to show recovery history, insights and training guidance. Workout logging, training progress and per-set effort notes work without it.

Nutrition (optional)

Your food, water and supplement logs, custom foods, saved meals, targets and plans. We use them so you can review nutrition history, trends and guidance.

Calculate for me (optional, one calculation at a time)

The age, current weight, height, activity level and formula option you enter for one calculation. We use them to create a formula-based starting estimate for your nutrition targets. You review and apply it before anything changes. Manual targets stay available if you choose not to use it.

Device weight (optional)

Future weight readings imported from a connected health source, such as Apple Health or Health Connect. Imported weight appears read-only in your Body history and changes nothing else.

Device recovery metrics (optional)

Selected heart-rate variability (HRV), resting heart rate, heart rate, sleep, steps and active calories imported from a connected health source. Imported metrics appear read-only as Device context in Recovery. They change no score, guidance or workout, and they do not feed Pocket Coach or Nutrition targets in this release.

Apple Health and Apple Watch workouts (optional, iPhone)

With this choice and Apple's write permission, GymSpaces uses Apple Health for Workout Mode on Apple Watch and saves future completed strength workouts to Apple Health. This path writes a completed traditional-strength workout record only. It does not read live health metrics or your Apple Health history.

External food lookup (optional)

The search words you enter, barcodes you scan, and the food or serving identifiers you select, when you look up foods through FatSecret. We use them to make food search, barcode scanning and food details easier. Quick Add, your own foods and recipes work without it.

Training, nutrition and recovery guidance in GymSpaces is produced by rules and sports-science formulas. It is general information, not medical advice.

Where the data comes from

  • You — what you enter in the phone app and, if you use them, the GymSpaces companion apps for Apple Watch and Wear OS.
  • Apple Health or Health Connect — only the readings listed above, only after you turn on that import in GymSpaces, and only for the data types your device then allows. Your device asks separately for access.
  • FatSecret — food names and nutrition values returned for your searches when External food lookup is on. This is information about foods, not about you.

Each optional feature has its own choice

GymSpaces explains each optional feature before it is first used and asks you to allow it. Choosing Not now keeps that feature off and leaves the rest of the app working. One choice never turns on another:

  • Body measurements, Recovery and Nutrition are separate choices.
  • Each device import is its own choice, separate from Body measurements and Recovery, and separate from the permission your phone asks for. Device imports need GymSpaces Pro and run while Pro is active.
  • Saving workouts to Apple Health is a separate choice from importing from it.
  • External food lookup is separate from Nutrition.

You can review every choice at any time in the app under Profile, then Settings, then Privacy controls.

Who receives this data

We do not sell your health data, and we do not use it for advertising. It reaches the following recipients, and only for the purpose described.

  • Google (Firebase) — our hosting and backend provider. Firebase Authentication, Cloud Firestore and Cloud Functions store and process your account, training, body, recovery and nutrition data on Google's infrastructure so the app can save and sync it.
  • FatSecret — an external food-data service, used only if you turn on External food lookup. The search words you enter, scanned barcodes and selected food or serving identifiers may be sent to or matched with FatSecret. Requests go from our servers using GymSpaces' own FatSecret credentials. Your GymSpaces account ID, email, date of birth, health data, targets, notes and Nutrition history are not sent to FatSecret.
  • Apple Health — a health store on your Apple devices that you control. If you turn on Apple Health and Apple Watch workouts, GymSpaces saves completed strength workouts there. They stay there under your control, in Apple's Health app and settings.
  • Health Connect — a health store on your Android phone that you control. GymSpaces reads from it when you turn on a device import. It does not write to it.
  • RevenueCat — manages GymSpaces Pro subscriptions. It receives a pseudonymous identifier for your account and your purchase and entitlement status. It does not receive your training, nutrition, recovery, or health data.

Usage analytics and crash reports. Firebase Analytics and Crashlytics, both provided by Google, run for everyone who uses the app; there is no separate choice for them. They record feature interactions, app screens and routes, device and app version details and crash diagnostics, and may be linked to your pseudonymous Firebase user ID. The events and crash details GymSpaces adds are built to leave out the values you log, such as your measurements, check-in answers and food entries, but they can show which parts of the app were used. We do not use this data for advertising or to track you across other companies' apps or websites.

Withdrawing a choice

Open Profile, then Settings, then Privacy controls, choose the feature and select Turn off.

  • Body measurements, Recovery, Nutrition — the feature stops recording. History already synced is kept but hidden, and you can see it again by turning the feature back on while connected.
  • Device imports — imports stop and readings already imported are kept and hidden. Disconnect and delete imported data removes them from GymSpaces only. Apple Health and Health Connect keep their own records and their own access setting, which you manage on your device.
  • Apple Health and Apple Watch workouts — future workouts are no longer saved to Apple Health and Workout Mode on Apple Watch becomes unavailable. Workouts already in Apple Health stay until you remove them in the Health app.
  • External food lookup — future requests are blocked. A request already sent cannot be recalled. Your saved foods, recipes and Nutrition history are kept.

You can also revoke Apple Health or Health Connect access in your device settings at any time. We then stop reading new data from your device.

Deleting history

Under Manage my data in Privacy controls you can delete the whole history of one feature without deleting your account: Delete Nutrition history, Delete Body history and Delete Recovery history. Deleting history leaves the feature on or off as it is, and anything you add afterwards is kept. Deleting Body or Recovery history also deletes the readings imported from your device into that feature. Apple Health and Health Connect keep their own records.

Deleting your account

You can delete your account and its data in the app under Profile, then Settings, then Delete account, or by email if you cannot use the app. Our Delete Your Account page explains each step, what is deleted, and what is kept or managed separately.

Some limits apply, and we state them rather than claim more than we can confirm:

  • Data other apps placed in Apple Health or Health Connect is unaffected. Workouts GymSpaces added to Apple Health remain unless you separately select their removal during closure.
  • We cannot confirm deletion of every analytics or crash-report copy. Reports already queued on a device may still upload, and per-person deletion of retained crash reports is unavailable.
  • Deletion of FatSecret's request logs is unconfirmed.
  • Account deletion does not cancel a subscription or erase purchase history held by Apple or Google.

How long we keep it

The data described above stays in your account until you delete it or delete your account. Deletion records, service logs and disaster-recovery copies are kept for their own separate periods. The deletion record is kept for 24 months and contains no deleted content, and disaster-recovery copies expire within six months.

Your requests

You have the right to access, correct, and delete your personal data. The controls above let you withdraw a choice and delete history or your account yourself, and in the app you can change or delete most of what you have logged. To ask what consumer health data we hold about you, or to make a request you cannot make in the app, email privacy@gymspacesapp.com, ideally from the email address on your account. support@gymspacesapp.com reaches the same team.

We verify that a request comes from the account owner before acting on it. An email's sender address alone is not proof: we send a one-time code to the verified email address already on your account and ask you to quote it back, or we direct you to sign in. The code only confirms that the request is yours. It is not a sign-in code.

If you live in Washington State or Nevada

The consumer health data laws of Washington and Nevada give you these rights. We offer them to everyone.

  • Confirm — you can ask us to confirm whether we collect, share or sell your consumer health data. We do not sell it.
  • Access — you can ask for access to the consumer health data we hold about you. GymSpaces has no download or export button; email us and we will reply in writing.
  • List of third parties — you can ask for a list of the third parties and affiliates we have shared your consumer health data with. We have no affiliates. The only third party is FatSecret, and only if you turned on External food lookup; you can contact FatSecret at platform.fatsecret.com/contact. Google and RevenueCat handle data on our behalf and are described under "Who receives this data".
  • Withdraw consent, or ask us to stop — turn the feature off as described under "Withdrawing a choice". It stops straight away. Training is the service itself, so the way to stop that collection is to delete your account.
  • Delete — use "Deleting history" or "Deleting your account" above, or ask us by email.

How long we take. We act on a request without undue delay and within 45 days of receiving it. If a request is complex or you have made several, we may extend that once by up to 45 days, and we tell you why within the first 45 days. Deletion you start in the app begins at once. If you ask by email, deletion begins as soon as we have confirmed the request is yours. We also ask our subscription provider to delete its record of your account. Copies in our disaster-recovery backups cannot be removed one at a time: they expire within six months, and if a backup is ever restored your deletion is applied again before the restored copy is used. The limits listed under "Deleting your account" still apply.

Cost. Requests are free.

If we say no. We tell you why in writing. You can appeal by replying to that decision or by emailing privacy@gymspacesapp.com with "Privacy appeal" in the subject line. We answer in writing within 45 days of receiving your appeal, saying what we did or did not do and why. If we deny your appeal, Washington residents can complain to the Washington State Attorney General at atg.wa.gov/file-complaint, and Nevada residents can contact the Office of the Nevada Attorney General at ag.nv.gov.

We will not discriminate against you for using any of these rights.

Changes to this notice

We may update this notice from time to time. The current version is always published on this page. If we change what consumer health data we collect, why we use it or who receives it, we update this page and its date before the change takes effect, and we do not apply the change to you without first telling you and asking for your consent in the app.

Contact

Questions about this notice can be sent to the addresses below. Do not send passwords, sign-in codes, health exports, medical documents or unnecessary attachments. See our support guidance.

GymSpaces Limited
New Zealand company number: 9430575
NZBN: 9429053682703
Registered office: 15 Te Araroa Drive, Paremoremo, Auckland 0632, New Zealand