Privacy policy
Effective 7 October 2026. This describes what the GymPal app collects, why, and what you control.
Who we are
GymPal is operated by Brian Fernando Nuesi ("GymPal", "we"). Contact: support@getgympal.com.
What we collect
- Account: your email address, or your Apple ID identifier if you use Sign in with Apple, and a confirmation that you are 18 or older. Your date of birth is used once for that check and is not shown to anyone.
- Profile: first name, bio, neighborhood and city, how you like to train, the gyms you list, your availability, your photos, and your gym-date status. You choose what others see.
- Activity: waves, connections, planned sessions, messages, bookings, reviews and reports you send. Messages are visible only to the two people in the conversation and to our team when a report is filed.
- Payments: handled by Stripe. We store Stripe identifiers and booking amounts, never card numbers. Trainers' identity and bank details are collected by Stripe directly.
- Location: only the neighborhood you choose. If you tap "Use my approximate location", we resolve your position to a neighborhood name once and store only that name.
- Analytics: off by default. If you turn it on, we record which features are used, never names, messages or location. Nothing is used for advertising or tracking.
How we use it
To show you compatible people and trainers, to run bookings and payments, to send reminders you asked for, and to keep the community safe. When you book a trainer, or a client books you, we email both of you the confirmation, a reminder the day before, any cancellation, and a receipt. We do not sell personal data and we do not use it for advertising.
Who sees it
- Other members see your public profile and whatever you choose to share in conversations.
- Trainers you book see your first name, your booking details and any note you add.
- Service providers: Supabase (database and sign-in), Stripe (payments), Resend (booking and sign-in emails), Apple (sign-in, notifications, App Store). Each processes data under its own terms.
- Authorities when the law requires it.
Your controls
- Hide from Discover at any time; existing conversations continue.
- Block anyone; they are never told.
- Export your profile from You → Export my data.
- Delete your account from You → Delete account. This removes your profile, listing, photos, messages, sessions and connections. Payment records are kept as required for accounting and disputes.
Retention
Account data is kept while your account exists. Payment records are kept for seven years. Safety reports are kept for two years after resolution.
Children
GymPal is for people 18 and older. We do not knowingly collect data from anyone younger.
Changes
We will post updates here and change the effective date. Material changes are announced in the app.