Data Policy

Version: 1.0

Effective Date: September 1, 2025

Introduction

Gymti ("we," "us," or "our") is a free AI-powered fitness platform based in the Netherlands and serving users internationally. We are committed to harnessing data to deliver personalized workout experiences and continually improve our AI-driven services, while protecting your privacy. This Data Policy explains what data we collect, how we use and manage it, and our broader data handling philosophy. It complements our Privacy Policy by focusing on how we leverage data for AI features and product evolution, with an emphasis on flexibility for innovation and strong safeguards for your information. By using Gymti, you agree to the data practices described in this policy.

(Note: Gymti is currently an independent project and not yet a registered legal entity. We nevertheless adhere to applicable data protection laws, such as the EU GDPR, and will update this policy when Gymti incorporates as a legal entity.)

Data We Collect

We collect various categories of data to operate and enhance Gymti's services. This includes:

• Account Information: When you sign up, we collect personal details like your name, email address, and password. This information is used to create and secure your account, and to communicate with you about account-related matters (e.g. login alerts or policy updates).
• Profile & Fitness Data: You may provide information about your fitness profile, such as your goals, body measurements, health metrics, workout preferences, and schedule. This data helps us tailor your experience – for example, generating personalized workout plans and recommendations suited to your goals and physical metrics. It also enables progress tracking and adjustments to your fitness program over time.
• AI Interaction Data: When you interact with Gymti's AI (for instance, by inputting prompts, questions, or engaging with AI-generated workout content), we collect the text of your prompts or queries and the AI's responses. These AI interaction logs are essential for providing you with the service (the AI needs this data to generate answers). They may also be reviewed internally to improve our algorithms and the quality of AI coaching. Be aware that these prompts and outputs are transmitted to our AI technology partner, OpenAI, for processing, and OpenAI may use the content of prompts and responses to train or improve its models. We disclose this so you understand that anything you input into the AI might be seen by OpenAI's systems and personnel for moderation or model improvement purposes. Please do not include sensitive personal details in your AI prompts.
• Usage Logs & Device Information: Like most online services, Gymti automatically collects certain information about your use of our platform. This includes technical data such as: your device type, operating system, browser type and language, device identifiers, IP address and approximate location, date and time of access, pages or screens viewed, features used, and click-stream data about how you navigate our site or app. We log this information to monitor system performance, debug errors, and protect the security of our services (for example, to detect fraud or abuse). We also use it to analyze overall user engagement and usage trends, which helps us improve Gymti's design and functionality.
• Communication Records: If you contact us or otherwise communicate with Gymti (for example, by emailing support, filling out our contact form, or participating in surveys), we will collect and retain those communications. This may include your contact details and the content of your messages. We use these records to respond to your inquiries, provide customer support, train our team (for quality assurance), and address any issues you raise. We also maintain records of any in-app notifications or service announcements we send you (e.g. confirmations, technical notices, updates) for reference and compliance purposes.
• Cookies & Tracking Data: We use cookies and similar tracking technologies on our website to enhance your experience and gather analytics data. Cookies are small text files stored on your browser that allow us to recognize you and remember your preferences. For instance, cookies help keep you logged in, save your settings (like language or units), and measure how you interact with our site. We also utilize third-party analytics cookies, notably Google Analytics, to collect information about site traffic and user behavior. This analytics data (such as which pages you visit, for how long, and how you arrived at our site) helps us understand usage patterns and improve our content and features. Google Analytics may set its own cookies and receive certain data about your device and browsing (including your IP address, though we configure Google Analytics to anonymize IPs where feasible). We obtain any required consent for non-essential cookies per applicable regulations. You can control cookies through your browser settings; however, disabling cookies might affect the functionality of Gymti (for example, some features may not remember your preferences without cookies).
• Email Delivery Data (Brevo): Gymti uses Brevo (formerly Sendinblue), a third-party email service provider, to send out emails such as account verification messages, password resets, newsletters, and other service communications. In doing so, we necessarily share your email address and sometimes your name with Brevo in order to deliver the emails to you. Brevo may also collect data related to those emails, such as whether you opened an email or clicked a link, the timestamp, and technical details about email delivery. This data helps us gauge the effectiveness of our communications and ensure important messages reach our users. Brevo operates with GDPR-compliant measures as our data processor for email; they are contractually bound to protect your information and use it only for sending Gymti communications on our behalf.

How We Use Your Data

Gymti uses the collected data to operate, personalize, and enhance our fitness platform, as well as to protect our business interests and develop new offerings. Specifically, your data is used in the following ways:

• Providing and Personalizing the Service: We use your Account Information to create and maintain your account, verify your identity when you log in, and communicate with you about account status or security. Your Profile and Fitness Data are utilized to generate personalized workout plans and recommendations tailored to your goals, physical metrics, and preferences. This personalized content is a core feature of Gymti – for example, our AI might design a workout schedule appropriate for the weight, fitness level, and objectives you've provided. We may also use profile info to configure in-app displays (e.g. showing your chosen avatar or preferred units of measurement).
• AI-Powered Content Generation: A key part of Gymti's service is our AI fitness coach, which uses OpenAI's technology to create human-like responses, exercise plans, and guidance. Whenever you interact with the AI, we send your input (prompt) and relevant profile data to OpenAI's servers, which then process it and return an AI-generated result. We use the AI's output (the response) to present you with coaching advice, answers, or workout plans. Both the prompt and the AI-generated output may be stored in our systems (as part of the AI Interaction Data) to enable features like conversation history or to improve future responses. Importantly, by using the AI features, you acknowledge that your prompts and the AI responses may be shared with OpenAI and could be used by OpenAI to improve its models over time.
• Analytics and System Improvement: We continuously analyze usage data to understand how Gymti is performing and where we can make improvements. Data from Usage Logs and cookies/analytics are aggregated to tell us things like which features are most popular, where users might encounter difficulties, and what times of day our platform is most active. We use Google Analytics and similar tools to assist with these analytics. The information gathered (largely on an aggregate basis) is used to debug technical issues, optimize load times, improve UI design, and plan new features. We also use usage data to improve our AI models and algorithms – for instance, by reviewing some AI interaction logs to identify and fix misunderstandings or biases in the AI's responses.
• Communications and Customer Support: We use your contact information (like email) to send you operational emails (e.g. to verify your account, confirm changes in your profile or password, notify you about important updates to our terms or policies), and service announcements (like downtime notices or new feature alerts). If you opt-in to marketing communications, we will use your data to send those as well – and you can unsubscribe at any time. If you reach out via our Contact Us form or support channels, we will use the information you provide to assist you and resolve your issues, and may retain a record of support interactions.
• Security and Abuse Prevention: Data such as usage logs, IP addresses, and account activity is also used for keeping Gymti and its users safe. We monitor this information to detect suspicious or unauthorized behavior, protect against fraud, and enforce our Terms of Service. Device information and logs help us troubleshoot errors and investigate any incidents.
• Aggregated Insights and Product Development: Gymti may combine and anonymize data across many users to generate aggregated insights. Once data is aggregated and stripped of personal identifiers, it no longer identifies any individual and becomes anonymous statistical information. We use such information freely to understand fitness trends, improve our AI algorithms, and guide the development of new features and services. We reserve broad rights to use aggregated or anonymized data for any business purpose, including research, analytics, marketing, and product innovation. We will not attempt to re-identify aggregated data or allow any use of it that could compromise your privacy.
• Improving and Developing New Services: Your data is critical for Gymti's continuous improvement and innovation. We learn and adapt based on data to train our AI models, optimize our fitness recommendations, and explore new wellness offerings (e.g., an AI nutrition coach). Any use for new purposes will remain consistent with original purposes or, where required, be subject to additional consent.

Data Sharing and International Transfers

Gymti is a global service, and some of our trusted service providers are located in other countries. We want you to understand when and with whom we share data, and how we protect your data when it travels internationally.

Third-Party Service Providers

• OpenAI (AI Provider): We send AI Interaction Data (your prompts and the AI's responses, possibly along with necessary context from your profile) to OpenAI, a U.S.-based artificial intelligence company. OpenAI processes this data to generate the intelligent responses that we deliver back to you. OpenAI acts as our processor for AI content generation and may retain and use content for its model improvement under its policies. We ensure that no more data is sent to OpenAI than is necessary for the AI function and that data is transmitted securely.
• Google Analytics (Analytics Provider): We use Google Analytics (Google LLC, U.S.) to collect analytics data via cookies and similar trackers. Google acts as a data processor providing aggregated statistics. We configure privacy protections (e.g., IP masking) and have a data processing agreement in place. Because Google is a U.S. company, data processed by Analytics may be transferred to or stored in the United States.
• Brevo (Email Delivery Provider): We share your contact information (email and name, if provided) with Brevo (Sendinblue SAS) to send emails. Brevo may process your data in the EU or via its global infrastructure. Brevo is contractually bound to confidentiality and security and uses your data only per our instructions.
• Other Vendors: We may also use services for cloud hosting, storage, backup, content delivery, or customer support tooling. All vendors are bound by data protection obligations and may process your data solely to provide services to Gymti.

International Data Transfers

Gymti is based in the Netherlands, but the data we collect may be stored and processed outside your home country. In particular, OpenAI and Google are in the United States, and using those services entails transferring certain personal data to the U.S. We may also use servers or service providers in other regions. Some countries may not have data protection laws as strict as those in the EEA; therefore, when we transfer personal data out of the EEA, we rely on safeguards such as the European Commission's Standard Contractual Clauses (SCCs), and we implement technical and organizational measures (encryption, access controls, data minimization) to protect your information. Your privacy rights remain enforceable with us even when your data is processed abroad.

Legal Compliance and Protection

We may disclose personal data if required by law or reasonably necessary to: (a) comply with legal obligations or requests; (b) enforce our Terms of Service or other agreements; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of Gymti, our users, or the public. We will limit disclosures to what is necessary and handle them lawfully.

Business Transfers

If Gymti undergoes a merger, acquisition, investment, restructuring, or asset sale, user data may be transferred to or shared with the acquiring or merging entity for continuity of service. We will require any new owner to honor this Data Policy and notify users of changes in data stewardship.

With Your Consent

Outside of the above, if we need to share your personal data in a new way, we will seek your consent first (e.g., publishing a testimonial with your name or collaborating with a partner that requires identifiable information).

Aggregated and Anonymized Data Use

Once data is aggregated or anonymized (stripped of personal identifiers), Gymti retains the right to use it for any purpose. Such information does not identify you and is extremely useful for legitimate business purposes, including publishing statistics, training new models, sharing high-level insights with partners, and improving features. We will not attempt to re-identify aggregated data or permit uses that could compromise your privacy.

Data Retention and Deletion

• Active Account Data: We retain account info, profile details, workout history, AI interaction logs, and related data while your account is active so we can continue to provide the service.
• Inactive Accounts: If you stop using Gymti or deactivate your account, we may retain your information for a time in case you return or for legitimate business purposes (disputes, audits, compliance). We will delete or anonymize personal data once it's no longer needed for its original purpose.
• Legal and Operational Retention: We may retain certain data after account deletion if required by law or necessary for critical purposes (record-keeping, legal claims, security, enforcement). Access to retained data is limited and justified.
• Deletion and Anonymization: When retention is no longer necessary, we will securely delete or irreversibly anonymize your personal data. Account deletion triggers our deletion process for associated personal data, subject to limited legal exceptions and retention of non-personal aggregates.

We follow the principle of storage limitation: we keep personal data only as long as needed for stated purposes or legal/business obligations. When data is no longer necessary, we eliminate it or anonymize it permanently.

Policy Updates and Changes

We may revise this Data Policy as Gymti evolves or regulations change. We will update the Effective Date and provide prominent notice for material changes (e.g., email or in-product notice) before they take effect, and seek consent where required. Minor edits may occur without advance notice. Your continued use after updates constitutes acceptance to the extent permitted by law. We will not reduce your rights under this Data Policy without your explicit consent.

Contact Us

If you have questions, concerns, or requests regarding this Data Policy or Gymti's data practices, please contact us via the website's Contact Us page. We take privacy seriously and aim to respond promptly.

Note: Gymti is not yet a formal legal entity. When you contact us, you reach the Gymti team operating the platform. We will update our policies with official company details once incorporated.