Last updated: July 9, 2026
Gym Plusis a workout tracker and AI workout coach. This page explains what data we collect, why we collect it, and the controls you have. The short version: we store the account and training data you give us, we use AI providers to generate your plans, we don't sell your data, and you can ask us to delete everything.
Account data. When you sign up — with email and password or with Google — we store your email address, name, and profile picture (if your Google account provides one).
Profile and settings. Optional training profile details you choose to add, such as age, sex, units, and language preference. They are used only to personalize generated plans and displayed stats.
Workout data. The training content you create and log: workout plans, workout sessions, per-set reps and weights, and the aggregate statistics derived from them.
Usage analytics. We use Google Analytics 4 (cookie-based) to understand aggregate site usage. We do not run advertising pixels or sell analytics data.
Connected-assistant activity. If you connect an AI assistant (see below), we keep an audit log of each tool call: your user id, the connection type, the tool name, the names of the argument fields (never their values), whether the call succeeded, how long it took, and the error message when a call fails.
We do not collect payment information — Gym Plus has no billing today. Workout logs are fitness data you choose to record; Gym Plus is not a medical service and does not collect health records.
To run the product: storing your plans and sessions, computing your stats, personalizing generated workout plans, and sending a welcome email when you sign up. We do not sell personal data or share it with advertisers.
When you ask the coach to generate or revise a workout plan — in the app or through a connected assistant — your brief, relevant training profile details, and (when revising) the plan being edited are sent to a large-language-model provider to produce the result. We currently use Anthropic (Claude models) via Vercel's AI Gateway, with OpenAI models in some configurations. These providers process the request to generate your plan; they are not given your account credentials.
You can connect assistants like Claude or ChatGPT to your account. Connections are authorized either through an OAuth consent screen or with a personal access token you mint in Settings. Tokens are stored only as SHA-256 hashes — the plaintext is shown to you once and never persisted. A connected assistant can only read and write the data of the account that authorized it.
You can revoke any token or connection at any time in Settings → AI Coach, and review recent assistant activity there.
We rely on a small set of infrastructure providers:
Your data is stored on Google Cloud infrastructure and is not shared with third parties beyond the providers listed here.
Workout plans you delete are moved to trash and permanently removed by a scheduled cleanup once they have been trashed for 7 days (the cleanup runs weekly, so removal completes within about two weeks). Other account data is kept while your account exists.
To delete your account and all associated data — or to request a copy of your data — email hi@gym.plus from the address on your account. We'll confirm and complete the request within 30 days.
Gym Plus is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
We'll update this page when our practices change and revise the "Last updated" date above. Material changes will be noted on this page.
Questions about this policy or your data: hi@gym.plus.