Privacy Policy

1. Data controller

The data controller for this app is Gymova Teknoloji A.Ş. Data Protection Officer: privacy@gymova.app

2. What we collect

We only collect the data we need, while you actively use the app:

• Account info: name, email, phone, profile image

• Workout data: sets, reps, weights, rest times

• Nutrition data: meal logs, macro values

• Body measurements and progress photos (encrypted on device)

• Gym check-in records (GPS captured only at check-in)

• Device info: OS, app version, push token

3. Why we use it

We only use your data to give you a better experience:

• Personalised workout and nutrition recommendations

• Charts and badges to visualise progress

• Anonymous aggregate stats for gym owners

• Crash reports and performance improvements

We never sell your data and we do not share it for advertising.

4. Retention

Workout and measurement data is kept while your account is active. After you delete your account a 30-day grace period applies, then all data is permanently erased. Financial records (subscriptions) are kept for 10 years to meet legal obligations.

5. Security

• All traffic is encrypted with TLS 1.3

• At-rest data uses AES-256 disk encryption

• Access logs are reviewed monthly

• Two-factor auth is recommended via Apple/Google SSO

6. Your rights

Under GDPR and KVKK you can at any time:

• Learn what data we hold about you

• Ask us to correct inaccurate data

• Ask us to delete or freeze your data

• Export your data to take elsewhere (data portability)

• Object to processing

You can exercise these rights from the in-app "Delete account" / "Export my data" flows, or by writing to privacy@gymova.app. We respond within 30 days.

7. Cookies and analytics

We do not use third-party tracking cookies in the app. Only crash reports and anonymous usage stats are collected. You can disable these from in-app settings.

8. Children's privacy

We do not knowingly collect data from users under 13. Users aged 13-18 need parental consent. Accounts we identify as belonging to a child under 13 are permanently closed.

9. Changes

Material changes are announced via in-app notification and email at least 30 days in advance. Minor edits are reflected on this page; the date is shown at the top.