Your data.
Your control.

01Who we are

GymLock is an iOS app made by Velentis Labs ("we", "us"). This policy explains what data the app collects, how it's used, and the choices you have. If anything here is unclear, email us at support@gymlock.co—a human reads it.

02What we collect

Depending on the features you use, GymLock collects:

• Account details—your name or display name, email address, and the user ID / authentication identifiers created when you sign up or sign in.
• Training data—workouts, exercises, sets, reps, weights, progress, streaks, goals, body-weight entries and personal records.
• Profile settings and preferences—such as your training schedule, units, and in-app options.
• Subscription status—whether your GymLock subscription is active, so we can unlock the right features. We do not receive or store your card details (payments are handled by Apple—see section 7).
• Crash logs and diagnostics—stack traces, device model, iOS version and basic app usage/performance data, used to fix bugs and improve the app.
• Gym reminder settings (optional)—if you enable gym arrival reminders, the gym location and radius you choose are saved as part of your settings.
• App-blocking selections (optional)—the apps or categories you choose to block, represented only as Apple-provided opaque tokens. These tokens are not readable app names.

03How we use your data

• Creating your account and signing you in.
• Syncing your data across your devices and backing up your workout progress, so a new phone never means starting over.
• Managing your subscription and access to features.
• Making the app work—sessions, reminders, app blocking, widgets and Live Activities.
• Fixing crashes and improving the app based on diagnostics and usage patterns.

We do not sell your data, and we do not use it for third-party advertising.

04Accounts & cloud sync

GymLock accounts and cloud data are hosted with Supabase, our authentication and database provider. When you're signed in, your profile, settings and training data are stored in your private account record and synced between the app and the cloud. This data is used to run your account—it is not shared with other users or sold.

05Sign-in options

You can sign in with an email address and password, with Google Sign-In, or with Sign in with Apple. When you use Google or Apple, we receive basic account information (such as your email address, or Apple's private relay address if you choose to hide your email) to create and identify your GymLock account. Your GymLock password, if you use one, is handled by our authentication provider—we never see it in plain text.

06Screen Time & app blocking

GymLock uses Apple's Screen Time technology (the Family Controls framework) to shield distracting apps during your workouts and focus sessions.

• You choose the apps or categories to block using Apple's own picker.
• GymLock does not receive readable app names, app lists or browsing history—your selection reaches us only as opaque tokens that Apple generates, which we cannot decode.
• We may store these tokens (on your device, and where applicable in your account data) solely so your blocking choices persist and can be applied when a session starts.
• This capability is used for one thing only: blocking distractions while you train. It is never used to monitor what you do on your phone.

07Subscriptions & payments

GymLock Pro purchases are processed by Apple through the App Store—we never see or store your payment details. We use RevenueCat to check and manage your subscription status (for example, whether your trial or plan is active), which involves processing purchase receipts and subscription identifiers.

Important: deleting your GymLock account does not cancel your subscription. Apple handles billing separately—to stop being charged, cancel in iOS Settings → your Apple account → Subscriptions before or after deleting your account.

08Crash reporting & diagnostics

The app includes Firebase Crashlytics (a Google service) for crash reporting and diagnostics. When the app crashes or misbehaves, it sends stack traces, device information (model, iOS version) and basic performance data so we can find and fix the problem. This data is not used for advertising, and we do not track you across other companies' apps or websites. Google processes this data on our behalf; their practices are described in the Google Privacy Policy.

09Location (optional)

Location access is optional—the entire app works without it. If you enable gym arrival reminders, GymLock uses geofencing on your device to notice when you arrive at the gym boundary you set yourself, so it can remind you to start your session.

• The only location information we save is your chosen gym location and reminder settings—the pin and radius you picked. It stays on your device and is used only for the gym-arrival reminder you enable.
• We do not collect a history of your movements, and the geofence check happens on your device.
• Your location is never sold, never used for advertising, and never used to track you.
• You can revoke location access at any time in iOS Settings → GymLock.

10Notifications (optional)

Reminders—gym arrival nudges, streak reminders and session alerts—are delivered as notifications on your device. Notifications are optional, and you can turn them off at any time in iOS Settings → GymLock.

11Third-party services

GymLock relies on a small set of providers to run. Each processes only what it needs for its role:

• Supabase—authentication, database and cloud sync for your account and training data.
• RevenueCat—subscription status and purchase management.
• Apple App Store—billing and subscription processing.
• Firebase / Google—crash reporting and diagnostics.
• Sign in with Apple and Google Sign-In—authentication, if you choose those sign-in methods.

We do not share your data with data brokers or advertising networks.

12Deleting your account

You can delete your GymLock account from inside the app (Settings → Account). Deletion removes your GymLock account and the associated cloud data, where required by law and our providers' processes.

• If you signed up with Sign in with Apple, you'll be asked to re-authenticate during deletion so the app can revoke GymLock's access to your Apple ID.
• Some records may be retained where required for legal, fraud-prevention, security or accounting reasons.
• Remember: account deletion does not cancel Apple billing—see section 7.

13Your choices

• Update or delete your data—edit your profile in the app, or delete your account entirely (section 12).
• Permissions—revoke location, notifications or Screen Time access at any time in iOS Settings → GymLock.
• Subscription—manage or cancel through Apple: iOS Settings → your Apple account → Subscriptions.
• Questions or requests—contact support@gymlock.co for anything privacy-related, including data requests.

14Children

GymLock is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we'll remove it.

15Changes to this policy

If we change how the app handles data, we'll update this page and the effective date above before the change ships. Meaningful changes may also be highlighted in the app.

16Contact

Questions, concerns, or data requests: support@gymlock.co