Privacy Policy – Gymyan

Effective date: 24 July 2025

Who we are

Gymyán (“the App”, “we”, “our”) is an AI-powered personal fitness application developed and operated by Ricardo Orozco Osorio. For any privacy questions, write to support@gymyan.com.

Information we collect

We collect the following types of data:

Account data – e-mail address, hashed password, anonymous user ID.
Content you provide – chat messages, saved workouts, exercise metadata.
Usage data – interaction counters, language and trainer preferences.
Purchase data – product identifiers (pro_monthly, pro_annual), App Store receipts.
Device data – iOS version, model, anonymised device ID, IP address.
We do not request HealthKit data or precise location.

How we use your information

• Provide, maintain and improve the App.
• Personalise workout suggestions and trainer responses.
• Process subscriptions via Apple StoreKit and RevenueCat.
• Respond to support requests.
• Ensure security, detect fraud and comply with legal obligations.

Legal basis

We process data under GDPR Article 6(1)(b) (performance of a contract) and 6(1)(f) (legitimate interests). Marketing e-mails are sent only with explicit consent (6(1)(a)).

Sharing of data

We share data only with service providers who help us run the App:
• RevenueCat, Inc. – subscription management.
• OpenAI, L.P. – AI chat responses.
We do not sell your data. We may disclose information if required by law.

International transfers

When data leaves the EEA we rely on Standard Contractual Clauses and TLS 1.3 encryption.

Data retention

• Account data – while the account remains active.
• Purchase records – 10 years (tax law).
• Usage logs – 12 months.
You may request deletion at any time.

Security

We use TLS 1.2/1.3, AES-256 at rest, role-based access controls and regular audits. No method is 100 % secure, but we strive to protect your information.

Your rights

You can access, correct, delete or export your data, and object to processing. Send your request to support@gymyan.com from your registered e-mail. You may also lodge a complaint with your local data-protection authority.

Children’s privacy

The App is intended for users aged 13 and older. If we learn that we have collected data from a child under 13 without parental consent, we will delete it.

Changes to this policy

We will post any changes at gymyan.com/privacy and update the effective date. Significant changes will be announced inside the App.

Contact

E-mail: support@gymyan.com