Privacy Policy

How GymSpaces Limited collects, uses, and protects your information.

Last updated: 3 June 2026

Overview

GymSpaces is operated by GymSpaces Limited, a company registered in New Zealand ("GymSpaces", "we", "us", or "our"). This Privacy Policy explains what information we collect when you use the GymSpaces mobile app, how we use it, and the choices you have. We provide it in the interest of transparency, and it should be read alongside our Terms of Service.

By using GymSpaces, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the app.

Information we collect

We collect the following categories of information so that the app can function and stay in sync across your devices:

  • Account data — your email address, name, and authentication details. Authentication is handled by Firebase Authentication, including sign-in with Google.
  • Profile and body metrics you enter — such as weight, body-fat percentage, body measurements, height, and age.
  • Training data — the programs, workouts, sets, personal records, and goals you create and log.
  • Nutrition data — your food logs, custom foods, saved meals, and water and supplement entries.
  • Recovery data — your daily check-ins, including soreness, stress, energy, and sleep.
  • Health and fitness data — only with your explicit permission, we read data from Apple Health or Android Health Connect, including resting heart rate, heart-rate variability (HRV), sleep, steps, active calories, and weight. See the dedicated section below.
  • Usage and diagnostic data — information about how the app is used and how it performs, which helps us operate and improve it.

Health and fitness data

GymSpaces can connect to Apple Health and Android Health Connect to give you a more accurate picture of your readiness and recovery. We treat this data with particular care:

  • We access your health and fitness data only after you grant explicit permission.
  • We use this data only to calculate your readiness, recovery, and training recommendations within the app.
  • We do not sell your health data, and we do not use it for advertising.
  • You can revoke access at any time in your device settings, or by disabling health sync inside the app.
  • If you revoke access, we stop reading new health data from your device.

How we use your information

We use the information we collect to:

  • Operate and personalize the app — including generating your training, nutrition, and recovery recommendations. These recommendations are produced by rules and sports-science formulas; they are not sold or shared for advertising.
  • Sync your data across the devices where you are signed in.
  • Provide customer support and respond to your requests.

How your data is shared

We do not sell your personal data. We share data only with the service providers we use to run the app, and only to the extent needed to provide the service. Those providers are listed below.

Third-party services

We rely on the following service providers, who process data on our behalf:

  • Google Firebase — provides Authentication, Cloud Firestore, Cloud Functions, and Hosting. Your account, training, nutrition, recovery, and profile data are stored and processed on Google's infrastructure.
  • FatSecret — powers our food database. When you search for foods, your search queries are sent to FatSecret's food database service to return results.
  • RevenueCat — manages subscriptions. This will apply once GymSpaces Pro launches.

Each of these providers maintains its own privacy policy, available on its website. We encourage you to review them.

Data retention and deletion

You can delete your account and associated data at any time from within the app, or via our Delete Your Account page. When you delete your account, we remove your personal data from our systems, subject to any limited retention that may be required by law.

Security

We use reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

GymSpaces is not intended for children under the age of 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can remove it.

International data transfers

Because we use providers such as Google, your data may be processed and stored outside New Zealand on their global infrastructure. By using the app, you acknowledge that your information may be transferred to and processed in other countries.

Your rights

You have the right to access, correct, and delete your personal data. You can manage much of your information directly within the app. To exercise any of these rights, or if you have questions about how we handle your data, contact us at gymspacesapp@gmail.com.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date shown above. We encourage you to review this page periodically.

Contact

If you have any questions about this Privacy Policy, you can reach us at: