Privacy Policy
1. Your data stays on your phone
Gymsmith is a training log. Your exercises, weights, reps, routines, notes, body measurements and workout history are stored only on this phone, in the app's private database. If Android backup is turned on, that database is also included in your own Google account backup, which Google encrypts and we cannot read. There is no Gymsmith account, no sign-in and no server of ours that receives your workouts. Gymsmith reads no sensors, heart rate, steps, location, camera, microphone, contacts or Health Connect data, and it collects no health data. Backup files (.gymsmith) and CSV or PDF exports leave the phone only when you save or share them yourself.
2. Permissions
- Notifications (Android 13 and later): this is the only permission Gymsmith asks for. It is requested right before your first workout so the rest timer can beep with the screen off. It is used for the ongoing workout notification (with Finish and Discard buttons), the rest-timer alert and, for free users, one optional daily reminder that you can turn off. If you decline, the timer still works while the app is open.
- Foreground service (health type): runs only during a workout you started, so the rest timer keeps counting and beeps with the screen off. It stops when you tap Finish or Discard. Android requires a sensor permission entry for this service type, but Gymsmith never reads any sensor.
- Wake lock and vibration: keep the timer accurate and buzz when rest is over, only while the timer runs.
- Run at startup: only restores the home-screen widget and the reminder after a restart. An unfinished workout is never restarted automatically.
- Internet: used for ads, analytics, purchases and consent. Your workouts are never sent.
3. Analytics and crash reports (Google Firebase)
With your consent where required, we use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to fix crashes. We log anonymous events such as “paywall viewed” or “purchase completed”, plus device model, OS and app version, approximate region and an app-instance identifier. We never log your content; the app enforces this with an allow-list of event parameters. Crash reports contain the error type and stack trace only. Firebase Remote Config is used to tune paywall and ad settings.
4. Advertising (Google AdMob and Unity Ads)
The free version shows ads: one slim banner on a list screen, an occasional full-screen ad after you finish a workout or close a chart (never during a workout or while the rest timer runs), and optional rewarded ads you choose to watch to unlock a Pro tool for a while. Ads never appear on the active workout screen, the rest timer, onboarding or the paywall, and never appear in the first two minutes of first use. Gymsmith Pro removes all ads.
Ads are served by Google AdMob, with Unity Ads competing through AdMob mediation. These partners may collect the advertising ID, device and usage information and approximate location derived from your IP address to serve and measure ads. See Google's and Unity's privacy policies.
5. Your choices (GDPR, UK GDPR, Swiss FADP, US state laws)
In the EEA, the UK and Switzerland, Gymsmith asks for your consent through Google's consent message (IAB TCF) before personalised ads or analytics are used. If you decline, ads are non-personalised and analytics stays off. In US states with privacy laws (such as California, Virginia, Colorado), you can opt out of the “sale” or “sharing” of personal information and targeted advertising. You can change your choice at any time in Settings → Privacy choices.
Legal bases (GDPR): consent for analytics and personalised ads; performance of a contract for the features you use and for purchases; legitimate interest for crash diagnostics where consent is not required. You may request access, deletion, correction or portability of data we control, object to processing, or lodge a complaint with your supervisory authority. California residents (CCPA/CPRA): we do not sell personal information for money; ad partners may receive identifiers as described above, which you can opt out of in Privacy choices. We do not discriminate against users who exercise their rights.
6. Purchases
Subscriptions and the lifetime purchase are processed by Google Play. We never receive your payment details; Google tells the app whether Pro is active.
7. Retention and deletion
Your workouts remain on your device until you delete them or uninstall the app. A copy in your own Google backup follows the retention of your Google account and can be deleted there. Analytics data is retained by Google for up to 14 months. See how to delete your data.
8. Children
Gymsmith is not directed to children under 13 (under 16 in the EEA) and we do not knowingly collect their data.
9. Changes
We will update this page if our practices change and revise the date above.