Privacy
Version of October 14, 2026
Gymios works with no required account, no ads and no ad tracking. Optional services only receive data when you turn them on. This policy applies to the Gymios apps for iPhone, Apple Watch and Mac, distributed on the App Store and TestFlight. For any question: support page.
Data kept on your devices
Your workouts, custom sessions, goals, meals, hydration, blood glucose readings, health profile, check-ins, trophies and routes are kept locally. The iPhone and Apple Watch exchange the information needed for workouts. The Mac keeps the data you import or sync. Temporary workout and GPS recovery data is protected, excluded from backups and expires after seven days.
Apple Health
You choose the categories requested in Gymios, then the final permissions in the Apple Health window. A completed request doesn’t mean all reads are granted. The local log stays usable without this access. Data read isn’t part of Gymios’s CloudKit sync. You can, however, choose to include some of it in a private backup or a coach follow-up profile, as described below. Writing to Health requires your choice; permissions and items written by Gymios are managed in Health. Gymios on Mac doesn’t access Apple Health: it only shows the data contained in a backup you import.
Optional iCloud
Sync is off by default. It uses your Apple Account’s private CloudKit database for custom sessions, custom exercises, favorites and non-medical community settings. Planned routes need a separate permission. Outdoor activity history also needs your consent: only activities identified as GPS-recorded by Gymios are eligible, with their coordinates and GPS stats. Activities imported from Health or of unknown origin, heart readings and zones, completed strength workouts, meals, blood glucose, health profile and check-ins are excluded from this iCloud sharing. Turning the option off stops the exchanges; it doesn’t automatically erase copies already stored in your iCloud account.
Optional community account
Training and the log require no account. If you turn on community and sign in with Apple, Gymios services keep an account identifier, your username, your role, your visibility choices, and the invitations, connections, blocks, reports and events needed for safety. An Apple refresh token is kept encrypted so your sign-in can be revoked when the account is deleted. Your trophy showcase is only shared once you choose to. Community notifications use a device token, sent to Gymios and Apple’s notification service. Every report is reviewed by the Gymios team, which can remove a profile or suspend an account. Signing out is not deleting your account.
Coach follow-up
You choose the recipient, the purpose, the categories and an expiration date. No category is preselected. The profile sent to the Gymios service may contain the selected summaries of workouts, outdoor activities, nutrition, body measurements, sleep, recovery and check-ins. The exact GPS track and check-in notes require an extra confirmation. Profiles are encrypted at rest on the service; they remain readable by the authorized coach and processed by the service to provide that access. This is not end-to-end encryption. Blood glucose, blood type, reproductive health and medical documents aren’t offered in these profiles. If you tick the latest foods category, the card also includes their list with date and quantity.
Coach role
The coach role is declared by the person who chooses it. Gymios verifies neither qualifications nor professional activity and asks for no supporting documents. Only share a profile with someone you know. Verification files created with a previous version of Gymios have been deleted from the service.
Retention and deletion
Local data stays until you delete it in the app or the app’s storage is deleted. On Mac, importing adds missing items, keeps existing data and ignores duplicates; “Erase this Mac’s data” deletes the local file without keeping a copy. Your exports stay where you chose to save them. Accounts, connections and shared profiles stay on Gymios services until the account is deleted. Revoking or expiring access blocks the coach, but doesn’t automatically erase the stored profile; it is deleted with the account. Deletion is requested from Community and sharing and must be confirmed by the service: it deletes the associated data and revokes the Apple authorization. The local log is kept. Copies already received or made by a recipient remain their responsibility. Hosting technical logs and the service’s encrypted technical backups are kept for 30 days at most: a deleted account’s data disappears from them within that time.
Private backup
Before exporting, you see what’s included and choose separately the health profile and its notes, check-ins, weight available from Apple Health and trophies. The JSON file is not encrypted. Anyone who receives it can read it. Importing adds missing items and offers optional personal data separately. It grants no Health permission, turns on neither sync nor reminders, and doesn’t write to Apple Health.
Location, Bluetooth, camera and files
Location is used for outdoor activities you start on iPhone or Apple Watch. On Mac, it’s read only once, when you click Locate me, to center the map. Tracks stay local unless you explicitly turn on iCloud or choose to share with a coach. Bluetooth is used for compatible equipment you choose. Selected food and blood glucose photos are analyzed on device with Apple technologies; Gymios doesn’t keep the originals after analysis. Every file import is your choice.
Maps, weather and terrain
Place search, route calculation and the place names of your outdoor activities use Apple’s mapping services. On Mac, when you click Analyze route, Gymios sends Open-Meteo the route’s center point for the weather and at most 80 sampled coordinates for the elevation, with no name or Health data. Open-Meteo data is published under the CC BY 4.0 license; this service applies its own policy. If you turn on outdoor activity weather on iPhone, Gymios sends Open-Meteo, for each activity, a position rounded to about one kilometer and the start and end times, with no name, track or Health data. Open-Meteo deletes its technical logs after 90 days.
Game Center and Apple Intelligence
Game Center is optional: Gymios sends it achievement identifiers and their progress. The Apple Intelligence module, available on compatible devices, processes on device the observations you select and preview. It doesn’t read Apple Health directly and receives no raw medical documents, free-text notes or detailed GPS tracks. Its prompt and response are not stored in CloudKit.
Open Food Facts and diagnostics
A barcode search sends the product code, and a search by name sends the text you typed or the words read from a photo of the packaging (the photo itself stays on your iPhone), over HTTPS to Open Food Facts to get the product details, without attaching Health data, photos or routes. A search by name is only sent when you start it. If you turn on “Send to Open Food Facts” for a product missing from their database, its barcode, name, brand and nutritional values go through the Gymios server, which publishes them in Open Food Facts under Gymios's name, visible to everyone under the ODbL license. Nothing in the published entry identifies you, and the server keeps neither the product nor your IP address, apart from a temporary submission counter in memory. This service applies its own policy. The services contacted may receive the ordinary technical information of an internet connection. If a storage error occurs, you can view and choose to share a technical diagnostic, including the available disk space. This storage diagnostic is only sent at your request.
Purposes and contact
The data is used for the features you choose: personal log, sync, community, coach follow-up, safety and support. Gymios doesn’t sell this data, doesn’t use it for advertising and includes no ad tracking. Gymios is a personal Lulab project. For any support request or question about your personal data, write to app@lulab.fr. The app doesn’t replace a diagnosis or a health, sports or nutrition professional.
TestFlight beta
If you test Gymios with TestFlight, Apple automatically collects crash reports and usage data, then shares them with the Gymios team. This information may be linked to your name and email address. Your feedback and any screenshots you choose to attach are also sent to Apple and Gymios to improve the app. See the TestFlight privacy information published by Apple.
This website
This website has no forms, analytics scripts or ad tracking. Hosting produces technical connection logs, kept for 30 days at most.