Privacy Policy

1. Who We Are

Gym Manager is a SaaS platform for fitness management, developed by Individual Entrepreneur Shpak Nazar Andriiovych (hereinafter — "Provider" or "We"). Contact email: gym.manager.support@gmail.com.

2. Data We Collect

Account data

• Name, email address, role in the system (coach / client), registration date and last activity time

Workout data

• Exercise records: sets, working weights and repetitions
• Workout templates and programs
• Workout session duration and start time

Nutrition data (optional)

• Data synced from fatsecret — only if you enabled this integration yourself

Technical data

• IP address, browser/device type, operating system
• Internal activity logs for platform security

Payment data

We do not collect or store your payment card data. All transactions are securely processed by WayForPay and Paddle in accordance with their respective security policies.

3. Legal Bases and Purpose of Data Processing

We process your data on the following grounds:

• Contract performance — to provide access to Platform features, display progress analytics, and enable coach-client communication
• User consent — for third-party integrations (e.g., fatsecret)
• Legitimate interest — for technical support, bug fixing, and protection against fraud

4. Who We Share Data With

We do not sell or share your personal data with third parties, except:

• Payment systems (WayForPay, Paddle) — only the minimum technical data required to initiate and confirm a transaction
• fatsecret — only if you connected the sync yourself
• Cloud infrastructure — server providers that ensure encrypted data storage
• Legal requirements — upon receiving an official lawful request from government or law enforcement authorities

5. Cookies

The Platform uses a minimal set of cookies:

• Functional cookies — required to maintain your active session and interface language settings. Essential for the Platform to work
• Analytics cookies — not currently used
• Advertising cookies — not used

6. Data Storage and Security

Data is stored on secure encrypted servers. Data transmission is protected by HTTPS (TLS).

Personal data is stored for the duration of your account. After account deletion, all associated data is permanently removed from our active databases within 30 days.

7. Your Rights

You have the right to:

• obtain a copy of your data
• correct inaccurate data in your profile settings
• delete your account and all associated data — directly via the settings menu in the app or by sending a request to our email
• withdraw consent for data processing (e.g., by disabling the fatsecret integration)
• file a complaint with your local data protection authority or the Ukrainian Parliament Commissioner for Human Rights

To exercise any of these rights, email us at gym.manager.support@gmail.com. Response time — up to 30 days.

8. Changes to This Policy

We reserve the right to update this document. For significant changes, we will notify you by email or via the Platform interface at least 14 days before the changes take effect.

9. Contacts & Details