Privacy Policy

Last updated: September 27, 2026

The short version. Your profile, programs and workout history stay on your iPhone. Gym.exe has no account and no ads, and it does not sell your data or track you across other apps. We collect pseudonymous usage analytics only if you agree (where the law requires consent) and crash reports to fix bugs. You can switch both off in the app at any time: Themes → Privacy.

Who we are

Gym.exe (“the app”, “we”, “us”) is developed and published by Matvey Pirogov, the controller of the personal data described in this policy. Contact: support@gymexe.app.

Data that stays on your device

Everything you enter to train is stored only on your iPhone, in the app’s local storage:

We do not receive this data. It is included in your device backups according to your iCloud or computer backup settings. Deleting the app deletes it from your iPhone. When you use “Copy for AI”, “Paste” or “Share”, the text goes only to your clipboard or to the app you choose.

Data processed by services we use

ServiceWhat and whyYour choice
Apple (App Store, StoreKit) Payments for Gym.exe Pro are handled by Apple under Apple’s privacy policy. We never see your payment details. —
Paddle.com Market Ltd (UK) If you buy Gym.exe Pro on gymexe.app, Paddle sells it to you as the Merchant of Record and processes your name, email, billing country, payment details and order history under Paddle’s privacy policy. We receive the order details — email, country, plan, amounts and dates — to unlock Pro, answer support requests and meet accounting obligations. We never see your card details. Needed to sell Pro on the web (contract).
RevenueCat, Inc. (USA) Manages Pro subscriptions and purchases: a random app user ID, purchase and subscription records, app version and device type. For web purchases it also receives the order from Paddle, including your email, and sends the link that unlocks Pro in the app. Used to unlock Pro, restore purchases and count subscriptions. Needed to sell and restore Pro (contract).
Apple Ads attribution (Apple, via RevenueCat) If you install Gym.exe after tapping one of our ads on the App Store, the app gets an attribution token from Apple’s AdServices framework, and RevenueCat exchanges it with Apple for the campaign, ad group, keyword and country of that ad. No advertising identifier (IDFA) is used, and Apple does not treat this as tracking. Used only to see which of our ads pay off. Legitimate interest (measuring our own ads). You can object at any time: support@gymexe.app.
Google Firebase Analytics (Google LLC / Google Ireland) Pseudonymous usage events: screens opened, setup finished, workout started or finished, program added, theme changed, paywall shown or purchase made, plus device model, OS version, app version and approximate country. No advertising ID is collected and the data is not used for ads. In the EEA, the UK and Switzerland — only if you say yes during setup (consent). Elsewhere — on by default (legitimate interest). Off at any time: Themes → Privacy.
Google Firebase Crashlytics Crash reports: the error, the state of the app when it crashed, device model, OS and app version. Used only to find and fix bugs. On by default (legitimate interest). Off at any time: Themes → Privacy.

Notifications (rest timer, trial reminder, workout reminders) are local notifications scheduled on your device; no push service is involved.

Our website and the plan quiz

gymexe.app is hosted by Cloudflare, Inc. (USA), which processes your IP address and request details to deliver pages and protect the site. On the plan quiz at gymexe.app/start we use your approximate country from Cloudflare to show prices in your currency and weights in kilograms or pounds; we don’t store it. Your quiz answers stay in your browser’s storage for the current tab and are not sent to us. The website sets no cookies and has no tracking pixels.

Links to the App Store

Links to Gym.exe on our website and in our posts carry a campaign name, for example “hn-launch”. Apple reports to us, in aggregate, how many people downloaded or subscribed after following each link.

What we don’t do

How long data is kept

On-device data stays until you delete it or the app. Analytics data is kept for up to 14 months and crash reports for up to 90 days. Purchase records are kept by RevenueCat and, for web orders, by Paddle while needed to provide Pro and to meet legal accounting obligations.

International transfers

RevenueCat, Google and Cloudflare may process data in the United States. These transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. Paddle is based in the United Kingdom, which the European Commission recognises as providing adequate protection.

Your rights

Depending on where you live (for example under the GDPR or US state laws), you may have the right to access, correct or delete your data, to object to or restrict processing, to data portability and to withdraw consent at any time. Most data never leaves your device, so you control it directly. For analytics, crash or purchase data, write to support@gymexe.app — include the approximate date of purchase if your request is about a subscription. You can also complain to your local data protection authority.

Children

Gym.exe is not directed at children under 16, and we do not knowingly collect data from them.

Changes

If this policy changes, we will update this page and the date above. Significant changes will also be noted in the app’s release notes.