Gymsoft Move Privacy Policy

Effective 10.10.2026 · Version 1.3

Gymsoft Move is a workout journal. Your journal lives on your phone. Some features can, if you turn them on, share specific data with Apple Health (iPhone), Health Connect (Android), a Gymsoft account or your gym. This policy describes every such feature, what data it uses and where that data goes. Nothing is shared until you switch a feature on and confirm it in the app.

What this version includes

Features are added over time. This list is updated with each release so you can see which parts of the policy currently apply.

FeatureStatus
Workout journal, plans, exercises, historyIncluded always on your device
Local notificationsIncluded
Apple Watch app (iPhone)Included
Apple Health integration (iPhone)Included off until you turn it on
Health Connect integration (Android)Included off until you turn it on
Workout location and weather (iPhone)Included only if you allow location access
Export and import to a fileIncluded
Links in notes, with their titlesIncluded only when you add a link
Workout playlists (Spotify, Apple Music on iPhone, YouTube)Included only if you add one
Sharing a plan as a fileIncluded only when you share
Calorie estimate without a watchIncluded on your device
Home-screen widgetsIncluded only if you add them
Gymsoft account and cloud backupNot yet available
Link to your gym (Gymsoft Club)Not yet available
Paid subscription (Move Pro)Not yet available

Who is responsible

Gymsoft sp. z o.o.
ul. Kościuszki 14, 33-200 Dąbrowa Tarnowska, Polska
NIP: 8711785761 | KRS: 0001184498
Email: privacy@gymsoft.com

We are the controller of the personal data described in this policy within the meaning of the EU General Data Protection Regulation (GDPR), except where the "Link to your gym" section says otherwise.

Your journal — always on your device

The app stores what you type into it: workout plans, exercises, sets, repetitions, weights, session dates and times, notes, links and their titles, playlist links, app settings, and — if you enter them — your name, profile picture and body measurements. This is saved in the app's private storage on your device. Before each update the app keeps a safety copy there too. Deleting the app deletes both.

We do not have access to your journal. It is not sent to us or to anyone else unless you send it yourself (see "When you send us something") or turn on one of the optional features below.

What we never do

  • We do not show ads and do not share data with advertisers or data brokers.
  • We do not track you across other apps or websites.
  • We do not sell personal data.
  • We do not use health data for advertising, marketing or any purpose other than the feature you enabled.

Notifications

The app can show local notifications, for example when a rest break is over, when a workout has been left open for an hour, or with your next exercise. During a workout it can show the session on the lock screen (on iPhone also in the Dynamic Island, on Android as an ongoing notification). All of this is generated on your device and does not leave your phone, but anyone who can see your screen can read it.

If you add Move's widgets to your home screen (and, on iPhone, the lock screen), they show your next workout, a workout in progress and this week's numbers. They are drawn on your device from data in the app; anyone who can see your screen can read them.

Apple Watch

On iPhone, Gymsoft Move has an Apple Watch app. During a workout the watch measures your heart rate and the calories you burn, and the watch and the iPhone exchange the workout (sets, breaks, heart rate, calories) directly with each other. Nothing is sent to us. If Apple Health is turned on, the finished workout is saved there (see below).

Calorie estimate

When a workout has no calories from a watch, Move estimates them on your phone from your newest body weight measurement, the workout's length and its type. The estimate is marked "~" and "estimate" and is calculated each time it is shown. It is not stored, not saved to Apple Health or Health Connect, and not sent to us or anyone else. Without a body weight measurement no estimate is shown.

Workout location and weather (iPhone)

If you allow location access (while using the app), the app takes one location reading when a workout starts, and may refresh it when you open the app, at most every 30 minutes. It uses it to look up the temperature and humidity through Apple's weather service (WeatherKit), which receives the location for that lookup under Apple's own privacy policy. The location and weather stay on your device and, if Apple Health is turned on, are saved with the workout there (the location as a single map point, so Apple Fitness can show where you trained). We never receive your location. You can turn location access off in the iOS Settings at any time; workouts are then saved without it.

Export and import

You can export your plans, history and measurements to a file and import it again, on the same or another phone (iPhone and Android use the same format). You choose where the file goes, for example Files, Google Drive or a message to yourself. We do not receive it unless you send it to us.

You can also share a single plan as a file (".moveplan") with the share sheet, for example by message, email, AirDrop or Quick Share. The file contains only that plan: its name, note, days, exercises and targets, and any custom exercises it uses. It does not contain your starting weights, your workout history, your measurements or your name. Whoever receives the file can see what is in it. Opening a plan file adds it as a new plan; nothing is sent to us.

Links and playlists

You can add links (for example a YouTube video) to notes on an exercise or a workout, and a playlist link (for example a Spotify playlist) to a plan or a training day. When you add a link, the app fetches its title once, so it can show the title instead of the address: for YouTube and Spotify links from their public title service, for other links from the linked page itself. That service or website receives the link's address and, as with any visit to a website, your phone's IP address. The app sends nothing else, and we receive nothing. The title is saved with the link in your journal on your device and is not fetched again. Without a connection the link is saved without a title. Opening a link opens it in its own app or in your browser.

If a plan or a training day has a playlist, the app can start it when the workout starts. For Spotify playlists the app connects to the Spotify app on your phone; the first time, Spotify asks you to agree. Spotify then plays the playlist and tells the app what is playing, so the workout screen can show the song and let you pause or skip it. This happens between the two apps on your phone, the access Spotify grants is not saved, and Spotify handles your listening under its own privacy policy. On iPhone, Apple Music playlists play through the iPhone's music player after you allow access to "Media & Apple Music". Other playlists, such as YouTube, open in their own app. Nothing about your music is sent to us.

When you send us something

If you write to us (for example at move@gymsoft.com) or send feedback, we receive what you send: your email address, your message and any screenshots.

The app's "Send feedback" button (in Profile, and at most once a week after a saved workout) opens your own email app with a message to move@gymsoft.com. Below your text it adds one line we need to understand the report: the app version, the system version, the phone model, the app language and where you started the message. You see the whole message before sending, and nothing is sent unless you press Send.

If the app ever cannot open your data, its recovery screen lets you email a copy of your journal to move@gymsoft.com so we can help you get it back. That copy contains everything in the app, including body measurements and the heart rate and calories of your workouts. It is sent only if you choose to, from your own email app. We use it only to recover your data and fix the problem, do not share it, and delete it once the problem is solved, at the latest 90 days after we receive it.

Optional features

Each feature below is off by default. The app asks for your permission before it is enabled, explains what it will do, and lets you turn it off again in Settings at any time.

Apple Health

If you turn it on (iPhone), the app writes your finished workouts to Apple Health (type, start and end time, the calories and heart rate measured by your Apple Watch, and the location and weather if you allowed them) and can write the body weight, body fat, height and waist measurements you log. It can read from Apple Health your weight, body fat, height and waist, and the heart rate and calories of your workouts, to show them in your journal. You choose in the iOS permission sheet exactly which data types are allowed. Health data is used only for these purposes, is not sent to our servers, and is never used for advertising or sold.

Health Connect (Android)

If you connect it (Android), the app can read from and write to Health Connect your body weight, body fat and height, and your workouts as exercise sessions (type, start and end time, title). Saving workouts has its own switch in Settings. You choose in the Health Connect permission screen which data types are allowed, and you can withdraw them there at any time. Data from Health Connect is used only to show it in your journal, is not sent to our servers, and is never used for advertising or sold. Its use follows the Health Connect Permissions policy, including the Limited Use requirements.

Gymsoft account and cloud backup

If you create a Gymsoft account and enable backup, your journal, plans and measurements are copied to servers we operate in the European Union so you can restore them on another device. We store your email address and a password hash for the account. We access your synced data only to provide the service, to fix problems you report, and as required by law. You can export your data and delete your account, together with all synced data, from within the app; deletion is completed within 30 days.

Link to your gym (Gymsoft Club)

If your gym uses Gymsoft and you link the app to your membership, your gym becomes the data controller for the data shared through that link, and we process it on the gym's behalf under our agreement with the gym. Two things can be shared, each with its own separate consent that you can withdraw at any time:

  • Using your date of birth and sex from your membership profile to improve calorie estimates.
  • Letting your gym's trainer see your workout journal.

Neither happens without your explicit choice in the app. Your gym's own privacy notice explains how it handles your membership data.

Paid subscription (Move Pro)

Subscriptions are handled by Apple through the App Store and by Google through Google Play. We do not receive your payment details. The store tells us only whether a subscription is active so the app can unlock the paid content.

Data handled by Apple and Google

If you install the app through the App Store or TestFlight, Apple may collect crash reports, diagnostics and basic usage information according to your device settings and Apple's own privacy policy. Where Apple shares aggregated crash or diagnostic data with us, it does not identify you and is used only to fix problems. Feedback you send through TestFlight reaches us via Apple and is used only to improve the app.

If you install the app through Google Play (including closed testing), Google may collect crash reports and diagnostics according to your device settings and Google's own privacy policy. We use them only to fix problems. Feedback you leave on the app's Play Store page reaches us via Google and is used only to improve the app.

Legal basis and retention

Where we process your personal data, we do so to provide the feature you asked for (performance of a contract, Art. 6(1)(b) GDPR) or on the basis of your consent (Art. 6(1)(a), and Art. 9(2)(a) for health data), which you can withdraw at any time. We keep account data for as long as your account exists and delete it within 30 days of account deletion, unless we are legally required to keep specific records for longer.

Data you send us yourself (messages, feedback, a copy of your journal from the recovery screen) is processed to answer you and fix the problem (Art. 6(1)(b) and (f) GDPR); health data in a journal copy is processed on the basis of your explicit consent, given by sending it (Art. 9(2)(a)). We keep messages as long as needed to handle them, and journal copies for no more than 90 days.

Your rights

For data that stays on your device, you have full control inside the app. Where we hold personal data about you, you have the right under the GDPR to access it, correct it, have it deleted, restrict or object to its processing, and to receive it in a portable format. Write to the address above. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland or with the supervisory authority in your own EU member state.

Children

Gymsoft Move is intended for adults and is not directed at children under 16. We do not knowingly collect data from children.

Changes to this policy

New versions are published at this address with an updated effective date. When a change affects how your data is handled, the app will tell you the next time you open it, and any newly added sharing will remain off until you enable it.

Contact

Questions about privacy: privacy@gymsoft.com.