Privacy Policy

Last updated: August 17, 2026

GymCircle ("we", "our", or "us") operates the GymCircle mobile application. This Privacy Policy describes how we collect, use, and share information when you use our app.

1. Information We Collect

We collect the following types of information:

Account and authentication information: Email address, authentication credentials processed by Supabase Auth, account UUID, session information, and authentication events when you create and use an account.
Profile information: Display name, optional profile photo, timezone, settings, preferences, equipped theme and badge, and profile-level fitness totals.
Fitness and activity data: Gym session start and end times, duration, exercises, sets, body measurements, optional progress photos, goals, streaks, experience points, and workout statistics.
Social and moderation data: Friend requests and friendships, blocks, groups and memberships, group posts, planned sessions and invitations, activity feed entries, notifications, and reports about users, groups, or posts, including report reasons and notes.
Precise location and saved gym data: Foreground location when you ask the app to use your current position, and foreground or background location when you enable automatic gym session tracking. Saved gym records can include a name, address, exact latitude and longitude, geofence radius, and primary-gym choice.
Map and location-search requests: Address or place search text, coordinates you tap for reverse geocoding, and the map viewport, tile coordinates, and zoom level needed to display a map. Your current GPS position can be used on your device to sort search results by distance, but that GPS search bias is not sent with the search request. Requests to GymCircle and map providers can disclose network, device, app, and request-time information as described below.
Purchase data: Product identifiers, order information, and purchase tokens needed to verify and restore Google Play purchases.
Advertising and device data: Advertising identifiers, IP-derived approximate location, app interactions, ad impressions, consent choices, device information, and diagnostics that Google may process when ads are eligible to be shown.
Notifications and local storage: Push notification tokens, app preferences, consent and age-gate choices, ad frequency controls, and cached data stored on your device.
Service, security, and diagnostic data: Supabase Auth and API records may include your account UUID, IP address, device or app information, request and response metadata, timestamps, authentication and security events, function activity, and errors. GymCircle also stores account-scoped geofence diagnostic events, such as a saved gym identifier, transition time, action taken, and error details, to investigate automatic tracking problems.

2. How We Use Your Information

We use your information to:

Provide, maintain, and improve the GymCircle app and its features.
Authenticate your account and manage your profile.
Deliver push notifications (e.g., friend requests, group invites, planned session reminders).
Display leaderboards, streaks, and analytics.
Enable social features such as groups, friends, and planned sessions.
Provide automatic gym arrival and departure tracking when you enable it.
Process, verify, restore, and support in-app purchases, including the Remove Ads purchase.
Show and measure advertising for eligible users, subject to consent, age, account maturity, and frequency controls.
Moderate reported content, prevent fraud and purchase replay, diagnose reliability or location-tracking problems, and keep the service secure.
Comply with legal obligations and enforce our terms.

3. Social Visibility and Sharing

GymCircle includes social and leaderboard features. The following visibility rules apply:

Signed-in profile visibility: Non-deleted profile UUIDs, display names, avatar URLs, equipped cosmetics, and profile-level fitness totals may be visible to other authenticated GymCircle users through profile search, profiles, and leaderboards.
Public avatar files: Profile avatars are stored in a public Supabase Storage bucket. Anyone who has the avatar URL may load the file, including without signing in. Private progress photos use a separate private bucket and are not profile avatars.
Automatic friend activity: Starting or ending a workout, reaching certain streak milestones, setting personal records, and completing goals can automatically create activity feed events visible to your GymCircle friends. GymCircle does not currently provide a per-event sharing switch.
Groups: Public group details are discoverable to authenticated users. Private groups are limited to their owners, members, and invited users as applicable. Group posts and group-member fitness statistics are visible to members of that group. Removed posts are hidden from the normal member feed but may be retained for moderation.
Private fitness and location records: Detailed gym sessions, exercise sets, body measurements, private progress photos, saved gym locations, and geofence diagnostics are restricted to the account owner through application access controls, except when disclosure is required for security, support, legal compliance, or a user-directed feature.

4. Third-Party Services

We use the following third-party services that may process your data:

Supabase: Authentication, database, public avatar storage, private progress-photo storage, server functions, purchase verification records, real-time features, and operational security or API logging. Supabase primarily processes app content for us as a service provider. Supabase may process operational information for its own security and legal obligations as described in the Supabase Privacy Policy.
Firebase Cloud Messaging (Google): Push notifications. Installation or push tokens and device, app, delivery, and diagnostic information may be processed by Google.
OpenStreetMap Foundation Standard tiles: The app requests map tiles from the OpenStreetMap Foundation's Standard tile service. A tile request can reveal your IP address, app user agent, request time, and the geographic area and zoom level visible on the map.
OpenStreetMap Nominatim: When you explicitly submit an address search or choose a map point, the app sends the search text or selected coordinates to an authenticated GymCircle server function. Your live GPS search bias stays on your device. The server function applies shared rate limits and caching before contacting the public Nominatim service. Nominatim can receive the submitted search text or selected coordinates, the proxy network address and identifier, and the request time. It does not receive your GymCircle authentication token from the proxy. Do not enter personal or confidential information into the location search. The OpenStreetMap Foundation operates its Standard tile and public Nominatim services and determines how its service logs are processed independently from GymCircle. See the OpenStreetMap Foundation Privacy Policy and Nominatim Usage Policy.
Google Play: App distribution, payment processing, purchase verification, acknowledgement, restoration, cancellations, refunds, and chargebacks. Google may process your Play account and payment information under its own terms. GymCircle receives the identifiers and status information needed to verify the purchase, not your complete payment-card details.
Google Mobile Ads and User Messaging Platform: Consent collection, privacy options, ad delivery, frequency controls, fraud prevention, reporting, and measurement. Google may process advertising identifiers, device information, IP address, approximate location, diagnostics, consent signals, and ad interactions under its own privacy terms. We do not send your precise saved gym coordinates or precise workout-tracking location to advertising providers.

Google acts independently when it processes information for Google Play, Firebase, advertising, fraud prevention, and its own legal obligations. Review the Google Privacy Policy and Google partner services information.

5. Advertising Choices and Remove Ads

GymCircle uses advertising to support free access. Ads are not requested until an eligible user has confirmed that they are at least 18, the applicable consent flow is complete, the account meets our maturity rule, and the user has not purchased Remove Ads. Users who do not confirm adult eligibility do not receive ads.

Where required, you can choose between available advertising consent options through Google's consent form. A Privacy Choices entry is available in the app settings when Google requires it. You may change an eligible age-gate selection in settings.

Purchasing Remove Ads stops new ads on the account after the entitlement is verified. It does not delete purchase records, consent records, security logs, or information previously processed under the choices that applied at the time.

6. Data Retention

Retention depends on the type of information and why it is needed:

Supabase account and app data: Account, profile, fitness, saved gym, social, and notification records are generally retained while your account is active, unless you delete an item through an available app control. When account deletion is requested, GymCircle first marks and anonymizes the profile, then attempts to delete the authentication user and dependent database records immediately. If immediate deletion cannot finish, the database fallback is designed to use a 30-day grace period before hard deletion. Supabase backups and platform logs age out under the applicable Supabase service schedule.
Avatar and progress-photo files: Avatar files are public and progress photos are private. They are retained in Supabase Storage until they are replaced, separately deleted, or removed while processing a verified deletion request. Deleting a measurement record does not by itself delete its related progress-photo file. Account deletion removes the account's avatar and progress-photo objects before deleting or anonymizing the account records. If storage cleanup cannot be verified, the account deletion operation stops instead of reporting a completed deletion. Previously created progress-photo links are signed for a limited period, currently up to one year, and stop working after the underlying private file is removed.
Purchase records: Verified receipts, raw purchase tokens, order identifiers, acknowledgement state, and entitlement records are kept in restricted storage while needed for verification, restoration, refund or chargeback handling, accounting, dispute resolution, and legal obligations. For a voided purchase, GymCircle keeps a permanent service-only SHA-256 fingerprint of the purchase token and related void metadata, which may include product and order information, to prevent replay. The tombstone does not contain the raw purchase token and is not available to app users.
Security, diagnostic, and moderation records: Account-scoped geofence diagnostic entries remain until the user clears them through an available control or the account data is deleted. Content reports and security or fraud records may be retained for investigation, abuse prevention, dispute handling, and legal obligations. Supabase Auth, API, and function logs follow the project's and Supabase's operational retention schedules.
Firebase Cloud Messaging data: GymCircle removes its stored push tokens when account deletion begins, and installation tokens may be replaced when they change. Google may retain delivery, installation, security, and diagnostic information according to its own policy.
Advertising and consent data: Local consent, age-gate, and ad-frequency information remains on the device until it expires, is reset, or app data is removed. Google retains server-side AdMob and User Messaging Platform information under Google's applicable retention rules, even after Remove Ads stops future ad requests.
OpenStreetMap requests: GymCircle does not add your address search text or map tile requests to your GymCircle profile. The location-search proxy can cache provider results for up to seven days using a one-way hashed request key. The cache key contains no raw search text or user ID, and cached results are shared service data rather than account history. The OpenStreetMap Foundation may retain Standard tile and Nominatim service logs under its own policy. Its current policy describes temporary service records and states that detailed analytics usage information is retained for 180 days.

7. Delete Specific Data or Your Account

Delete your account in the app: Sign in, open Settings, choose Delete Account in the Danger Zone, type DELETE_MY_ACCOUNT exactly, and select Permanently Delete Account. GymCircle first removes and verifies the account's avatar and progress-photo storage objects, then unregisters account-specific geofences, anonymizes or deletes the account records, deletes the authentication user where possible, and signs the device out. If required storage cleanup fails, the server stops before changing the account and returns an error so you can retry.

Delete data without deleting the account: Use the available delete controls for individual gym sessions, body measurement entries, saved gym locations, planned sessions, group content, and geofence diagnostics. Some file objects, derived statistics, activity events, moderation records, purchase records, and security records are not removed by deleting a related screen item. Use the external process below if you want a related avatar or progress-photo file removed or need a broader deletion request.

Request deletion outside the app: Email Support@insight-flowai.com with the subject "GymCircle data deletion request". Provide the email address associated with your GymCircle account plus the specific data or account you want deleted. Do not send your password, a raw purchase token, or precise location data. We may ask you to verify control of the account before acting on the request. This is the same support address published in GymCircle's Google Play listing.

Deletion does not include information that we must keep for legal obligations, accounting, disputes, security, fraud prevention, or purchase-replay prevention, or information already processed independently by a third-party provider. Where possible, retained records are restricted, minimized, or disconnected from the active profile.

8. Data Security

We use technical and organizational safeguards designed to protect your data, including encrypted network connections, access controls, and server-side verification for purchases. No security measure can guarantee absolute protection.

9. Your Rights

Depending on your location, you may have the right to:

Access, correct, or delete your personal data.
Export your data.
Object to or restrict certain processing.
Withdraw consent where applicable.

To exercise these rights, use the relevant in-app setting or the external request process in Section 7. Rights and exceptions vary by location, and we may need to verify your identity before responding.

10. Children

GymCircle is not directed at children under 13. We do not knowingly collect personal information from children under 13. Advertising is disabled unless a signed-in user affirmatively confirms that they are at least 18. If you believe a child has provided personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy at this URL and updating the "Last updated" date.

12. Contact Us

For privacy questions, rights requests, or data deletion, email Support@insight-flowai.com. You can verify this address in the App support section of GymCircle's Google Play listing.