Privacy policy

Last updated 24 September 2026 · applies to Gym Buddy 2.0.0 for Android

Gym Buddy is built so that your training data stays on your phone. There is no Gym Buddy account and no Gym Buddy server, so we (the developer) never receive, store or see your data. This page lists everything the app stores and every case in which it talks to the network.

What the app stores on your phone

• Your training log: routines, workouts, sets, body weight, notes, settings and any custom exercises. It's kept in the app's private storage, which other apps can't read.
• Gym membership card codes, if you add them. Only the code's text is stored; photos you scan from are not kept.
• If you set up the AI Coach with your own provider key, that key is kept in Android's encrypted keystore, never in the training log or in a backup file.

Uninstalling Gym Buddy deletes all of this. Backup files you exported yourself stay wherever you saved them.

When the app uses the network

• Exercise images and animations are downloaded from jsDelivr, a public content delivery network, when you view an exercise. The request contains only the image's address. Like any web server, jsDelivr sees your IP address; see the jsDelivr privacy policy.
• Hevy import (optional). If you import your history with a Hevy API key, the app calls Hevy's API with that key to download your workouts. Nothing is uploaded to Hevy.
• AI Coach (optional, off by default). If you turn it on with your own API key, the app sends the training data the Coach needs (your plan, recent workouts and the message you write) directly to the provider you chose, such as Anthropic, OpenAI, Google or an endpoint you enter. That provider's terms and privacy policy apply, and requests are charged to your account with them. Setup shows which categories of data are included before anything is sent.

Gym Buddy contains no advertising, analytics, crash-reporting or tracking code.

Permissions

• Camera, only when you choose to scan a gym membership card.
• Notifications, only if you turn on workout-day reminders or rest-timer alerts. They're scheduled on your phone; no push service is involved.
• Exact alarms (Android), so a reminder fires at the minute you set.

Backups and exports

Export and auto-backup write a JSON file containing your training log to a place you choose. What happens to that file afterwards, for example if you sync it with a cloud drive, is up to you and that service.

Children

Gym Buddy doesn't collect personal data from anyone, including children.

Changes

If a future version changes any of the above, this page will be updated before that version is released, and the date at the top will change.

Contact

Questions about this policy: hyattherate2005@gmail.com.