Privacy Policy

Last updated: 2026-10-31

Gymrevo is the app your gym gives you as part of your membership: training programs, workout tracking, meal plans and an AI coach. This policy explains what personal data the app uses, why, who receives it and what your rights are.

1. Who is responsible

Your gym is the controller of your member data: it creates your account and decides to offer you the app. Gymrevo is operated by VEKS 1 EOOD („ВЕКС 1“ ЕООД), company ID (ЕИК) 104661822, registered at 22 Hr. Botev St., Veliko Tarnovo, Bulgaria, and processes your data on your gym's behalf to provide the app. For any privacy question, write to hello@gymrevo.com — we will answer or pass it to your gym.

2. What data we use

• Account: name, email, phone (entered by your gym), language, login times.
• Profile: date of birth, sex, height, weight, goal, experience, training days and session length.
• Health: injuries and limitations you describe, health questionnaire (PAR-Q+) answers and pain reports.
• Training: programs, workouts, sets, weights, effort and notes.
• Progress: body measurements and progress photos you add.
• Nutrition: food preferences and allergies, if you ask for a meal plan.
• Machine photos: photos of gym machines you scan to swap an exercise.
• Technical: login tokens and server logs needed to run and secure the service.

The app has no ads, no third-party analytics or tracking, and does not sell data.

3. Why, and on what legal basis

• To provide the app included in your membership (performance of a contract).
• To use your health data and to send data to AI providers — only with your explicit consent (GDPR art. 6(1)(a) and 9(2)(a)). You give it in the app and can withdraw it at any time in Settings → AI coach.
• To keep the service secure and working (legitimate interest), and where the law requires it (legal obligation).

4. Artificial intelligence (AI)

Your training program, meal plan, workout recaps and coach notes are written by an AI model. Only with your consent, the following data is sent to the AI provider(s) listed below: age, sex, height and weight; goal, experience, training days and session length; injuries, pain reports and health questionnaire answers; your workouts; notes and requests you write; food preferences and allergies; photos of machines you scan.

Never sent: your name, email, phone number or progress photos.

• Claude (Anthropic) — Anthropic PBC, USA
• DeepSeek — Hangzhou DeepSeek Artificial Intelligence Co., Ltd., China

The providers receive the data through their API only to produce the answer for you. These providers are located outside the European Union, in countries that may not offer the same level of data protection; the transfer is based on your explicit consent (GDPR art. 49(1)(a)). AI answers can be wrong — see the terms. Without consent, nothing is sent to AI; the app then cannot create programs or meal plans, but you can still track your progress.

5. Who else can see your data

• Your gym's staff: your membership, training activity and pain reports, so they can support you. They cannot see your progress photos.
• Service providers that host the app for us, under data processing agreements: SuperHosting.BG (servers, database and email, Sofia, Bulgaria) and Amazon Web Services (photo and video storage, Stockholm, Sweden). Your data is stored in the EU.
• Authorities, only when the law requires it.

6. How long we keep it

As long as you have an account. When your membership ends, your data stays so you can continue when you return. When you delete your account (Settings → Delete my account), your data and files are deleted immediately; remaining copies in backups disappear as backups are rotated.

7. Your rights

You can access and download your data (Settings → Download my data), correct it, delete your account, object to or restrict processing, and withdraw your consent at any time without affecting earlier processing. You may also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the authority in your country.

8. Phone permissions

The iOS app asks for the camera and photo library only when you take or choose a photo, and for notifications for the rest-timer alert and workout reminders. Notifications are scheduled on your phone; nothing about them is sent to our servers.

9. Security and age

Data travels encrypted (HTTPS) and access is limited to people who need it. The app is not intended for people under 16.

10. Changes

We will update this page when something changes and show the date above. If the AI providers change, the app asks for your consent again.