Effective Date: August 27, 2026
Privacy matters to GymBuddy: Guided Strength. We aim to collect only the information needed to provide, secure, maintain, and improve the GymBuddy: Guided Strength experience, and to explain clearly what information we process, why we use it, how long it may be retained, and what choices you have.
This Global Privacy Center provides a plain-language overview of GymBuddy: Guided Strength's privacy practices and regional privacy rights.
For complete legal information, please read our:
If there is any conflict between this Privacy Center and the Privacy Policy, the Privacy Policy governs.
1. Privacy at GymBuddy: Guided Strength
GymBuddy: Guided Strength is a strength-training application that generates and schedules training recommendations, allows users to record completed workouts, provides progress information, and may adapt future training recommendations based on recorded training data.
GymBuddy: Guided Strength is intended to be available worldwide through supported distribution channels, subject to applicable law, Google Play availability, local restrictions, network availability and third-party service availability.
The current release contains no advertising, subscriptions, in-app purchases, payment processing or paywall. Monetization is planned only as a future product direction and is not implemented in the current release. Possible future paid features may include interpretation, AI-assisted analysis, enhanced adaptation, longer-term trends or Weekly Review features, and report export; pricing, trials, subscription terms and a payment mechanism have not yet been defined.
To provide these features, GymBuddy: Guided Strength may process information such as:
account and authentication information;
profile and onboarding information;
training experience and calibration information;
selected training days and programme settings;
equipment availability;
generated programmes and programme versions;
workout sessions, exercises, sets, repetitions and loads;
exercise substitutions;
estimated strength and progression information;
optional workout-difficulty and recovery feedback;
optional menstrual-cycle information;
research ratings and optional feedback;
device, app, analytics, crash-diagnostic and limited technical information necessary to operate, secure and improve the App, as described below.
GymBuddy: Guided Strength does not sell personal information and does not currently use personal information for third-party advertising.
For a detailed description of the information we collect and the purposes for which it is used, see our Privacy Policy.
2. Fitness, wellbeing and sensitive information
GymBuddy: Guided Strength processes information related to training and physical activity in order to provide the App's core functionality.
Training information may include, for example:
exercises performed;
sets and repetitions;
training loads;
completed workouts;
estimated strength values;
programme progression;
workout difficulty.
Some optional information may be more sensitive.
Menstrual-cycle information
If cycle tracking is enabled, a user may choose to provide information such as:
start date of the last period;
typical period length;
typical cycle length.
Providing this information is optional.
Where applicable law requires explicit consent for processing sensitive information, GymBuddy: Guided Strength must obtain that consent separately from general acceptance of the Terms of Use or Privacy Policy.
Users who do not wish to provide cycle information can use GymBuddy: Guided Strength without enabling this feature.
Cycle-related features are intended only to provide optional fitness context. They are not intended for fertility planning, contraception, pregnancy detection, diagnosis, treatment, or other medical purposes.
Recovery and wellbeing information
GymBuddy: Guided Strength may also allow users to provide optional information about workout difficulty or recovery.
This information is used as limited training context and is not interpreted as a medical diagnosis.
3. How GymBuddy: Guided Strength uses information
Depending on the feature, GymBuddy: Guided Strength may use information to:
create and maintain your account;
authenticate you;
generate a training programme;
calibrate initial training recommendations;
schedule workouts;
record what you actually performed;
display training history and progress;
calculate estimated training or strength indicators;
adapt future training recommendations;
provide reminders and notifications you enable;
restore your account data across supported devices or reinstalls;
maintain security and integrity of the service;
investigate technical problems;
conduct limited product research;
improve the usability and reliability of GymBuddy: Guided Strength;
comply with applicable legal obligations.
GymBuddy: Guided Strength does not use health, fitness or cycle information for third-party advertising.
4. Product research and feedback
GymBuddy: Guided Strength may occasionally ask users for optional feedback about their experience with the App or a generated programme.
Research information may include:
numerical ratings;
optional written comments;
limited context about the programme being evaluated;
whether the feedback was submitted before or after completed workouts.
Research participation is optional.
Account-linked research responses are handled according to the Privacy Policy.
If an account is deleted:
account-linked research records are deleted;
free-text research answers are deleted;
GymBuddy: Guided Strength may retain irreversibly anonymised numerical research ratings where they can no longer reasonably be associated with the deleted user.
Anonymised research information is used only in aggregated or non-identifying form.
5. Service providers and international processing
GymBuddy: Guided Strength relies on third-party infrastructure and service providers to operate the App, including authentication, cloud-backed account storage and restore, analytics, crash diagnostics, app/device integrity checks and application distribution.
Depending on the released version of GymBuddy: Guided Strength, these may include services used for:
authentication;
cloud storage;
application distribution;
notifications;
technical diagnostics;
analytics or product research.
For the current release, the material providers described in the Privacy Policy include Google Firebase / Google Cloud (Firebase Authentication, Cloud Firestore, Firebase Analytics, Firebase Crashlytics, scheduled Firestore backups where enabled, and where enabled Firebase App Check / Google Play Integrity), Google Sign-In, Resend for transactional account and deletion emails and related delivery metadata, and Netlify for static website hosting and possible website infrastructure logs. The current release does not use AppsFlyer, Adjust, Facebook/Meta SDK, AdMob or another third-party advertising SDK.
Some providers may process information in countries other than the country where the user lives.
Where required by applicable law, GymBuddy: Guided Strength uses or relies on appropriate legal mechanisms and safeguards for international transfers.
GymBuddy: Guided Strength's public privacy disclosures must always correspond to the third-party SDKs and services actually included in the shipped application.
6. Account deletion
You may request deletion of your GymBuddy: Guided Strength account through the mechanisms described in our Privacy Policy and Account Deletion page.
When a deletion request has been verified and successfully completed, GymBuddy: Guided Strength deletes the account-linked data covered by the deletion process, including, as applicable:
Firebase Authentication account information;
profile and onboarding data;
calibration and prior-load information;
cycle profile information;
equipment selections;
generated programmes;
ProgramVersions;
programme weeks, days and exercises;
workout sessions;
workout exercises and recorded sets;
derived strength state;
scheduled workout information;
account-linked research responses;
research free-text answers;
locally stored GymBuddy: Guided Strength application data;
application preferences;
GymBuddy: Guided Strength notification state;
scheduled GymBuddy: Guided Strength background jobs.
After verified deletion, GymBuddy: Guided Strength uses the following wording:
“All account-linked data listed below has been deleted.”
This wording does not mean that the limited retention exceptions described in the Privacy Policy disappear immediately.
The Privacy Policy explains the limited retention exceptions and their maximum periods.
Limited information that may remain
After verified account deletion, limited records may remain only as described in the Privacy Policy, including:
pseudonymous Firebase/Google Analytics usage and event-level data for up to 14 months from collection;
de-identified numerical research ratings for up to 14 months from collection;
a minimal non-identifying deletion audit record for up to 14 months after verified deletion;
operational logs for up to 30 days, scheduled Firestore backups (if enabled) for up to 14 days after verified deletion, and provider-required audit records for the provider-controlled period;
These records are not retained to reactivate the deleted account, continue account-linked profiling or deliver third-party advertising.
The Privacy Policy contains the detailed retention schedule and purposes.
7. Your privacy rights
Privacy rights differ depending on where you live and which laws apply.
Rights may include the ability to:
request access to personal information;
request correction of inaccurate information;
request deletion;
withdraw consent where processing is based on consent;
object to or restrict certain processing;
request portability of certain information;
obtain information about how personal data is used or shared;
lodge a complaint with an applicable supervisory or regulatory authority.
Some rights may be subject to exceptions provided by law.
To submit a privacy request, contact:
Privacy contact: gymbuddy.support@katethought.xyz
We may need to verify your identity before completing certain requests.
Regional Privacy Information
8. European Economic Area
General Data Protection Regulation — GDPR
Where the General Data Protection Regulation (EU) 2016/679 (GDPR) applies, users may have rights including:
access;
rectification;
erasure;
restriction of processing;
objection;
data portability;
withdrawal of consent;
complaint to a supervisory authority.
GymBuddy: Guided Strength processes personal information only where an applicable legal basis exists.
Depending on the purpose, this may include:
performance of a contract;
consent;
legitimate interests;
compliance with legal obligations.
Where GymBuddy: Guided Strength processes special-category information and applicable law requires explicit consent, that consent must be obtained separately.
For more information about specific processing purposes and legal bases, see the Privacy Policy.
International transfers
Where European data protection law applies to an international transfer, GymBuddy: Guided Strength will rely on an applicable transfer mechanism or safeguard where required.
The specific transfer mechanism must correspond to the actual service providers and contractual arrangements used by GymBuddy: Guided Strength.
9. United Kingdom
Where applicable, GymBuddy: Guided Strength processes personal information in accordance with the:
UK General Data Protection Regulation;
Data Protection Act 2018.
Users in the United Kingdom may have rights similar to those available under the EU GDPR, including access, correction, deletion, restriction, objection, portability and withdrawal of consent.
Users may also have the right to lodge a complaint with the UK Information Commissioner's Office.
The Privacy Policy provides further details.
10. United Arab Emirates
Where applicable, GymBuddy: Guided Strength processes personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data.
Depending on the circumstances and applicable law, users in the UAE may have rights concerning their personal data, including rights relating to:
access;
correction;
deletion;
restriction of certain processing;
objection to certain processing;
information about data transfers or processing.
GymBuddy: Guided Strength may use service providers located outside the UAE.
Where UAE law imposes requirements on international processing or transfers, GymBuddy: Guided Strength will apply the required safeguards or mechanisms.
Health-related information
GymBuddy: Guided Strength is a fitness application and is not a medical device or healthcare provider.
Before public launch in the UAE, GymBuddy: Guided Strength will separately assess whether any additional UAE rules relating specifically to health information or health-sector technology apply to the features included in the released version.
11. Saudi Arabia
Where applicable, GymBuddy: Guided Strength processes personal data in accordance with the Saudi Arabia Personal Data Protection Law (PDPL) and its applicable implementing regulations.
Relevant requirements may include those contained in:
the Personal Data Protection Law;
its Implementing Regulations;
applicable rules governing transfers of personal data outside the Kingdom.
Depending on applicable law, users may have rights relating to:
being informed about processing;
access to personal data;
obtaining copies of personal data;
correction;
deletion or destruction where applicable;
withdrawal of consent where processing is based on consent.
Sensitive information and consent
Certain information may qualify as sensitive personal data under applicable Saudi law.
Where explicit consent is required for optional sensitive information, GymBuddy: Guided Strength must obtain that consent separately and clearly.
Users are not required to provide optional menstrual-cycle information in order to use the core GymBuddy: Guided Strength training experience.
International processing
GymBuddy: Guided Strength may rely on service providers that process information outside Saudi Arabia.
Where Saudi data-transfer requirements apply, GymBuddy: Guided Strength will assess and implement the required legal safeguards before transferring covered personal data.
12. United States
Privacy requirements in the United States vary by state.
Residents of certain U.S. states may have additional rights under applicable state privacy laws.
Depending on the law and whether it applies to GymBuddy: Guided Strength, those rights may include:
access or confirmation of processing;
correction;
deletion;
obtaining a copy of personal information;
opting out of certain uses of personal information;
rights relating to sensitive personal information;
protection against unlawful discrimination for exercising privacy rights.
GymBuddy: Guided Strength does not currently claim that every U.S. state privacy law applies to it.
Where a particular U.S. privacy law applies to GymBuddy: Guided Strength, GymBuddy: Guided Strength will provide and honour the rights required by that law.
GymBuddy: Guided Strength does not currently sell personal information or use personal information for third-party behavioural advertising.
13. Children
GymBuddy: Guided Strength is intended for adults aged 18 or over.
The App is not directed to children and GymBuddy: Guided Strength does not knowingly collect personal information from children.
If we learn that personal information has been collected from a child contrary to this policy, we will take appropriate steps to delete it.
14. Security
GymBuddy: Guided Strength uses reasonable technical and organisational measures designed to protect personal information.
These may include:
authenticated access;
access controls;
encrypted network connections;
security controls provided by infrastructure providers;
separation between users' account data;
restricted administrative access.
No system can guarantee absolute security.
If a personal-data incident occurs, GymBuddy: Guided Strength will assess and handle it in accordance with applicable legal requirements.
15. Analytics, diagnostics and session recording
GymBuddy: Guided Strength uses Firebase Analytics in the released App for pseudonymous usage and event-level analysis of product, onboarding, workout-flow, reliability and release performance. Analytics collection is disabled in debug builds and bounded in released builds by the approved event contract. A separate user-facing analytics consent flow is not currently evidenced. Firebase Analytics is not used for third-party advertising.
AI is not used in the user-facing product. The current release does not send personal data to OpenAI or another AI provider for a user-facing AI feature.
The current analytics contract does not send GymBuddy: Guided Strength account IDs, email addresses, profile or onboarding answers, workout content, weights, repetitions, sets, body measurements, free text or exact dates to the analytics gateway.
GymBuddy: Guided Strength may use Firebase Crashlytics for crash and diagnostic reporting. Crash reports may include app version, device/operating-system information, stack traces and crash context needed to investigate failures. GymBuddy: Guided Strength does not intentionally attach email, account IDs, workout content or profile answers to crash reports.
GymBuddy: Guided Strength does not use session replay or other third-party behavioural recording;
Firebase App Check / Google Play Integrity may process app or device integrity signals where enabled to protect the service and prevent abuse;
these integrity signals are not used for third-party advertising;
the Privacy Policy will be updated if these services or their material data practices change.
16. How to submit a privacy request
You can exercise applicable privacy rights by:
using available controls within the GymBuddy: Guided Strength App;
using the Account Deletion page at https://gymbuddy.katethought.xyz/delete-account;
contacting us at gymbuddy.support@katethought.xyz
Your request should contain enough information for us to identify the relevant account and understand your request.
We may request additional information where reasonably necessary to verify identity and protect the account from unauthorised requests.
We will respond within the timeframe required by applicable law.
17. Changes to this Privacy Center
We may update this Privacy Center when:
GymBuddy: Guided Strength features change;
data-processing practices change;
new service providers are introduced;
applicable laws or regulatory requirements change.
The current version will display its latest revision date.
Material changes will also be reflected in the Privacy Policy and, where required, communicated through the App or another appropriate channel.
18. Contact
Data Controller and Operator: an individual developer operating under the public developer name KateThought Studio. KateThought Studio is not a separate company or legal entity.
Privacy contact: gymbuddy.support@katethought.xyz
Website: https://gymbuddy.katethought.xyz/
General support: gymbuddy.support@katethought.xyz
Account deletion: https://gymbuddy.katethought.xyz/delete-account
Important relationship to the Privacy Policy
This Global Privacy Center is intended to make GymBuddy: Guided Strength's privacy practices easier to understand.
It does not replace the Privacy Policy and does not create additional contractual or statutory rights beyond those provided by applicable law.
The Privacy Policy remains the primary detailed notice describing GymBuddy: Guided Strength's processing of personal information.
Regional privacy rights apply only where the relevant law applies to GymBuddy: Guided Strength and to the particular processing activity.