Privacy Policy

This Privacy Policy explains what information Pixoby ("Pixoby", "we", "us") collects when you use the Gym mobile app (the "App") and this website (the "Website"), why we collect it, who we share it with, and the choices you have. Gym is a workout tracker that turns your logged lifts into strength ranks and also lets you log nutrition.

The short version: we collect what the App needs to work, we do not show ads, we do not track you across other apps or websites, and we do not sell your data. You can delete your data in the App at any time.

1. Who we are

Gym is published by Pixoby, which is the controller of your personal data. You can reach us at info@pixoby.space for any privacy question or request.

2. Information we collect

2.1 Account information

• Anonymous account. You do not need to sign up. When you first open the App we create an anonymous account for you, identified only by a random user ID.
• Optional sign-in. If you choose to add an email and password, or to sign in with Apple or Google, we store your email address (or the address the provider shares with us, which may be a private relay address from Apple) and a provider identifier. Passwords are stored only as a secure hash.
• Public profile. Your display name, username and the avatar you pick from the App's preset illustrations (we store only the preset's key; you do not upload a profile photo).

2.2 Profile information

During onboarding and in your profile you can enter your sex, age, height, bodyweight, training experience, training goal, unit system (metric or imperial) and calorie and macro goals. We use these to calculate your strength ranks, calorie targets and recommendations.

2.3 Training and nutrition data

Everything you log in the App: routines, workouts and sets (exercise, weight, reps, warm-up flag), the strength ranks and rank history calculated from them, muscle ranks, body weight entries, goals, nutrition logs (meal name, calories, protein, carbohydrates, fat, meal type, date), and your game progress (XP, level, gems, streaks, quests, medals and league results).

Some of this information, such as bodyweight, may be treated as health-related data in some jurisdictions. We use it only to provide the features you ask for. Where the law treats it as health data, we rely on your explicit consent, which you give by choosing to enter it and can withdraw at any time by deleting the entries or your account.

2.4 Meal photos (Pro)

The AI food photo estimate is optional and only runs after you agree to it in the App. When you use it:

• The photo is sent from our server through OpenRouter, our AI provider, to an AI vision model that estimates the foods, calories and macros in it. We send the image only, without your name, email or other profile data, and we request providers that do not collect or retain the data for their own purposes (OpenRouter's provider data collection setting is turned off).
• If you save the result, the photo is stored with that meal log in our storage as a protected file that only your account can access.
• The photo is deleted when you delete that meal log or your account.

2.5 AI workout generation

When you ask the App to generate a workout, we send your chosen goal, the number of minutes, the available equipment and any target muscles through OpenRouter to an AI model. No name, email, body measurements or other personal data are included. The generated workout is returned to you and is only stored if you start it or save it as a routine.

2.6 Friends, leagues and moderation

• Friends. Other users can find you by username and send you a friend request. We store friend requests and friendships.
• Leagues and leaderboards. Each week you are placed in a league with other real users based on the XP you earn.
• Reports and blocks. If you report or block another user, we store the report or block, the users involved and any reason you give, so we can review it and enforce our Terms of Use.

2.7 Purchases

Pro subscriptions are sold and billed by Apple (App Store) or Google (Google Play). We never receive your card or payment details. RevenueCat, our subscription provider, receives the purchase receipt and your App user ID so it can tell us whether your Pro subscription is active and help you restore purchases.

2.8 Usage analytics

We use Google Firebase Analytics to understand how the App is used, for example which screens are opened and whether a workout was finished. Events are linked to your random App user ID and include device information such as model, operating system, App version, language and approximate region derived from your IP address. We do not send your name, email, workout content or photos to analytics, and we do not use analytics data for advertising.

2.9 Crash reports

When the App or our server hits an error, GlitchTip (an error-tracking service) receives a crash report with technical details such as the error, the App version, device model, operating system and your App user ID, so we can find and fix the problem.

2.10 Push notifications

If you allow notifications, Firebase Cloud Messaging gives us a device push token that we store with your account to send reminders and updates. You can turn notifications off in your device settings at any time.

2.11 Barcode lookups (Pro)

When you scan a barcode, our server sends only the barcode number to Open Food Facts to look up the product's nutrition data. No information about you is sent with the lookup.

2.12 This website

The Website does not use advertising or analytics cookies and does not require an account. It is hosted on Google Firebase Hosting and loads fonts from Google Fonts, so those services receive your IP address and browser information as part of delivering the page. If you switch between light and dark mode, that preference is saved in your browser's local storage and never sent to us.

3. How we use information

• To run the App: store your workouts and logs, calculate ranks, muscle ranks and recovery, run streaks, quests, medals and leagues, and sync your data to your account.
• To provide the AI features you choose to use: workout generation and meal photo estimates.
• To provide Pro: check your subscription status and restore purchases.
• To show your public profile to other users in friends lists and leaderboards (see section 4).
• To send notifications you have allowed.
• To keep the service secure, prevent cheating and abuse, and review reports.
• To measure usage, fix crashes and improve the App.
• To answer you when you contact us, and to comply with the law.

4. What other users can see

Other Gym users can see your display name, username, avatar and weekly XP in leaderboards and leagues, and can find you by username to send a friend request. Your friends can see your weekly XP on their friends leaderboard. Your workouts, body measurements, nutrition logs and photos are never shown to other users.

5. Service providers

We share data only with the service providers below, who process it on our behalf to run Gym, and only as far as each one needs it.

We may also disclose information if required by law, to protect the rights, safety or security of our users or the public, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.

6. What we do not do

• We do not show ads in Gym and do not share your data with advertisers or data brokers.
• We do not track you across other companies' apps or websites.
• We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising.
• We do not use your workouts, measurements or photos to train AI models.

7. Legal bases (EEA, UK and Switzerland)

• Contract: to provide the App and the features you use, including Pro.
• Consent: meal photo analysis, health-related data you choose to enter, and push notifications. You can withdraw consent at any time.
• Legitimate interests: security, preventing cheating and abuse, moderation, crash reporting and usage analytics to improve the App. You can object to this processing by contacting us.
• Legal obligation: where we must keep or disclose information by law.

8. Retention

• We keep your account data for as long as your account exists.
• When you delete a single entry, such as a meal log with its photo, it is removed from our live database right away.
• When you delete your account or your data, everything linked to your account is removed from our live database and file storage right away.
• Database backups are kept for up to 4 weeks and then overwritten, so deleted data disappears from backups within 4 weeks.
• Analytics events and crash reports already sent to Firebase and GlitchTip expire under those services' retention settings and are not linked back to a profile after deletion.
• Apple, Google and RevenueCat keep their own records of store purchases, for example for billing and tax purposes.

9. Your rights and choices

Depending on where you live, you may have the right to access your data, receive a copy of it in a portable format, correct it, delete it, restrict or object to certain processing, and withdraw consent. You can:

• Edit your profile, entries and goals directly in the App.
• Delete your account in the App at Profile > Account > Delete account. If you never added an email, use Profile > Delete my data. See Delete your account and data for all options, including a request by email.
• Request a copy of your data (access and export) by emailing info@pixoby.space.
• Turn off notifications in your device settings.

We answer requests within 30 days. We may need to confirm that the request comes from the account owner, for example by asking you to write from the email address on the account. You also have the right to complain to your local data protection authority.

10. Children

Gym is not directed to children under 13, or under 16 in the European Economic Area, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

11. Security

Data is encrypted in transit, access to our servers is restricted, meal photos are stored as protected files that only your account can access, and your sign-in token is kept in your device's secure storage. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires it.

12. International transfers

Our service providers may process data in countries other than yours, including the United States. Where required, these transfers are covered by safeguards such as the European Commission's Standard Contractual Clauses.

13. California residents

Under the California Consumer Privacy Act, you have the right to know what personal information we collect, to access, correct and delete it, and not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined in that law, and we do not use sensitive personal information to infer characteristics about you. To make a request, email info@pixoby.space.

14. Changes to this policy

We may update this policy when the App or the law changes. We will change the "Last updated" date above and, for material changes, tell you in the App before they take effect.

15. Contact

Pixoby
Email: info@pixoby.space

Related: Terms of Use · Delete your account and data · How ranks work