Privacy Policy
Last updated: September 27, 2026
Who we are
Gym.exe (“the app”, “we”, “us”) is developed and published by Matvey Pirogov, the controller of the personal data described in this policy. Contact: support@gymexe.app.
Data that stays on your device
Everything you enter to train is stored only on your iPhone, in the app’s local storage:
- your answers from the setup (goal, place, experience, days per week, units);
- your programs, progression settings and weights;
- your workout history, notes, records, ranks and achievements;
- app settings such as the theme and your privacy choices.
We do not receive this data. It is included in your device backups according to your iCloud or computer backup settings. Deleting the app deletes it from your iPhone. When you use “Copy for AI”, “Paste” or “Share”, the text goes only to your clipboard or to the app you choose.
Data processed by services we use
| Service | What and why | Your choice |
|---|---|---|
| Apple (App Store, StoreKit) | Payments for Gym.exe Pro are handled by Apple under Apple’s privacy policy. We never see your payment details. | — |
| Paddle.com Market Ltd (UK) | If you buy Gym.exe Pro on gymexe.app, Paddle sells it to you as the Merchant of Record and processes your name, email, billing country, payment details and order history under Paddle’s privacy policy. We receive the order details — email, country, plan, amounts and dates — to unlock Pro, answer support requests and meet accounting obligations. We never see your card details. | Needed to sell Pro on the web (contract). |
| RevenueCat, Inc. (USA) | Manages Pro subscriptions and purchases: a random app user ID, purchase and subscription records, app version and device type. For web purchases it also receives the order from Paddle, including your email, and sends the link that unlocks Pro in the app. Used to unlock Pro, restore purchases and count subscriptions. | Needed to sell and restore Pro (contract). |
| Apple Ads attribution (Apple, via RevenueCat) | If you install Gym.exe after tapping one of our ads on the App Store, the app gets an attribution token from Apple’s AdServices framework, and RevenueCat exchanges it with Apple for the campaign, ad group, keyword and country of that ad. No advertising identifier (IDFA) is used, and Apple does not treat this as tracking. Used only to see which of our ads pay off. | Legitimate interest (measuring our own ads). You can object at any time: support@gymexe.app. |
| Google Firebase Analytics (Google LLC / Google Ireland) | Pseudonymous usage events: screens opened, setup finished, workout started or finished, program added, theme changed, paywall shown or purchase made, plus device model, OS version, app version and approximate country. No advertising ID is collected and the data is not used for ads. | In the EEA, the UK and Switzerland — only if you say yes during setup (consent). Elsewhere — on by default (legitimate interest). Off at any time: Themes → Privacy. |
| Google Firebase Crashlytics | Crash reports: the error, the state of the app when it crashed, device model, OS and app version. Used only to find and fix bugs. | On by default (legitimate interest). Off at any time: Themes → Privacy. |
Notifications (rest timer, trial reminder, workout reminders) are local notifications scheduled on your device; no push service is involved.
Our website and the plan quiz
gymexe.app is hosted by Cloudflare, Inc. (USA), which processes your IP address and request details to deliver pages and protect the site. On the plan quiz at gymexe.app/start we use your approximate country from Cloudflare to show prices in your currency and weights in kilograms or pounds; we don’t store it. Your quiz answers stay in your browser’s storage for the current tab and are not sent to us. The website sets no cookies and has no tracking pixels.
Links to the App Store
Links to Gym.exe on our website and in our posts carry a campaign name, for example “hn-launch”. Apple reports to us, in aggregate, how many people downloaded or subscribed after following each link.
What we don’t do
- No account and no sign-in. No ads in the app and no advertising SDKs.
- No tracking across apps and websites owned by other companies, and no advertising identifier (IDFA).
- We don’t sell or share your personal data for advertising.
- We don’t collect health data from Apple Health.
How long data is kept
On-device data stays until you delete it or the app. Analytics data is kept for up to 14 months and crash reports for up to 90 days. Purchase records are kept by RevenueCat and, for web orders, by Paddle while needed to provide Pro and to meet legal accounting obligations.
International transfers
RevenueCat, Google and Cloudflare may process data in the United States. These transfers rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. Paddle is based in the United Kingdom, which the European Commission recognises as providing adequate protection.
Your rights
Depending on where you live (for example under the GDPR or US state laws), you may have the right to access, correct or delete your data, to object to or restrict processing, to data portability and to withdraw consent at any time. Most data never leaves your device, so you control it directly. For analytics, crash or purchase data, write to support@gymexe.app — include the approximate date of purchase if your request is about a subscription. You can also complain to your local data protection authority.
Children
Gym.exe is not directed at children under 16, and we do not knowingly collect data from them.
Changes
If this policy changes, we will update this page and the date above. Significant changes will also be noted in the app’s release notes.