Privacy Policy
Last updated October 14, 2026
GymPal is made by Build Momentum Lab LLC. This page explains what the app collects, why, who helps us run it, and how to get your data deleted. The short version: we keep what the app needs to hold you accountable with your squad, and we never sell your data.
What we collect
- Account: email address, name, username, date of birth (to confirm you are 13 or older).
- Workouts: the two photos you take in the app, the day, and an optional caption. Photos are visible only to your squad and are deleted after 90 days.
- Messages and reactions: the nudges and chat messages you send to your squad, and the emoji or selfie reactions you leave on their workouts. They are visible only to its members; selfie reactions are deleted with the workout photos after 90 days.
- Pinky promises: when you forgot to take your photos, the day you say you worked out and your squad's answer.
- Health workouts: only if you use an Apple Health or Health Connect workout as proof for a missed photo, that one workout's type (for example "Strength Training"), duration and start time. It is shown to your squad and never used for advertising, marketing or analytics.
- Challenges: the name of a challenge your squad starts or joins, its team names and scores. Anyone with the challenge link can see its name, dates, team names and member counts, never your name or photos.
- Lock-In Mode: if you turn it on, which apps you lock stays on your phone. We only keep whether Lock-In is on, your schedule, and who in your squad locked your apps that day.
- Gym arrival: when the app detects you arrived at your saved gym, it tells our server "arrived" (never your location) so we can show your live gym status on your lock screen.
- Daily steps: only if you connect Apple Health or Health Connect for the steps battle, the total number of steps for each of the last seven days. Today's total is shown to your squad. Step totals are deleted after 30 days and are never used for advertising, marketing or analytics. See our Consumer Health Data Privacy Policy.
- Gym location: the gym you picked, if you chose to save it. Your live location never leaves your phone.
- Notifications: a device token so we can deliver reminders, nudges and weekly recaps.
- Subscription: purchase status from Apple, never your payment details.
- Usage: how you use the app (for example the screens you open and the actions you take), and crash and performance reports, so we can fix bugs and improve GymPal.
Advertising and tracking
We advertise GymPal on TikTok. To know which ads bring people to the app, GymPal shares a limited set of events with TikTok (for example that an account was created, onboarding was completed or a subscription started), together with a hashed account identifier and, only if you allow tracking when iOS asks, your device's advertising identifier (IDFA). If you decline, no advertising identifier is shared. You can change this at any time in iOS Settings, under Privacy & Security, Tracking.
Your photos, captions, messages, location and step counts are never shared with advertisers. We do not read your contacts: invitations go through the iOS share sheet.
Who helps us run GymPal
These service providers process data on our behalf, only for the purposes below:
- Mixpanel: product analytics (usage events linked to your account).
- TikTok: ad attribution, as described above.
- Apple: sign-in, in-app purchases, push notifications and, if you connect it, Apple Health.
- Superwall and RevenueCat: subscription offers and purchase status.
- Railway: hosting of our servers, database and file storage.
- Resend: delivery of sign-in codes and account emails.
We never sell your personal data.
Your rights
From the app you can export everything we hold about you and delete your account. Deletion removes your photos from storage and anonymizes your records. You can also write to us at the address below.