Privacy Notice
Last updated: July 10, 2026
1. Who we are
This Privacy Notice explains how GymRobot LLC ("GymRobot", "we", "us") processes personal data in connection with the GymRobot service (the "Service"). GymRobot LLC is the data controller for personal data collected through the Service.
2. Data we collect
- Account data: name, email address, password credentials, and any profile details you provide.
- Fitness data you enter: training plans, workouts, exercises, progress logs, notes, body metrics, and preferences.
- Support data: messages you send us and their metadata.
- Usage and device data: log data, device identifiers, IP address, browser type, timestamps, and pages visited.
- Cookies and similar technologies: essential cookies to keep you signed in and, where applicable, analytics cookies to understand usage.
Payment card details are collected directly by our payment provider, Stripe, and are not stored by GymRobot.
3. How we use your data
- Create and secure your account and provide the Service;
- Generate and deliver AI-generated training plans and features you request;
- Process transactions and manage subscriptions;
- Provide customer support and respond to your requests;
- Prevent fraud, abuse, and security incidents;
- Improve, debug, and develop new features;
- Send service-related communications (and, with consent, marketing).
4. Legal bases
Where applicable law (e.g. GDPR/UK GDPR) requires it, we rely on:
- Performance of a contract — to provide the Service you signed up for;
- Legitimate interests — to secure, improve, and operate the Service;
- Consent — for optional cookies and marketing emails;
- Legal obligation — to comply with tax, accounting, and other laws.
5. Who we share data with
- Payment processor (Stripe): for checkout, subscription management, payments, tax compliance, invoicing, and refund handling.
- Cloud hosting and infrastructure providers: to store data and run the Service.
- AI model providers: to generate training plans and other AI features you invoke.
- Analytics, error monitoring, and support tooling providers: to help us operate and improve the Service.
- Professional advisers (legal, accounting) where necessary.
- Authorities where required by law or to protect our rights.
We do not sell your personal data.
6. International transfers
Your data may be processed in countries other than the one you live in, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms to protect your data.
7. Retention
We retain personal data for as long as your account is active and as needed to provide the Service. When no longer required, data is deleted or anonymized. We may keep limited records longer where required for legal, tax, or fraud-prevention purposes.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, port your data, and withdraw consent. Users in the UK/EEA also have the right to lodge a complaint with a supervisory authority. To exercise any right, email support@gymrobot.ai. We aim to respond within one month.
9. Security
We use appropriate technical and organizational measures — including encryption in transit, access controls, and monitoring — to protect your data. No system is perfectly secure; please use a strong, unique password for your account.
10. Cookies
We use essential cookies to sign you in and keep the Service working. Where analytics or marketing cookies are used, we ask for consent as required by law. You can manage cookies via your browser settings.
11. Changes to this notice
We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.
12. Contact
GymRobot LLC — support@gymrobot.ai.