Koodiversity Oy

GymRat – Privacy Policy

Updated: 30 September 2026

This policy explains what data the GymRat app (iPhone and Apple Watch) processes, what it is used for and where it is stored.

In short: GymRat has no user account, no ads, no analytics and no tracking. Your workouts and profile are stored only on your own device. Data leaves your device only if you use the GymRat coach in a language whose message is generated on the app's server (see section 4). The coach can be switched off in Settings.

1. Data controller

Koodiversity Oy (Business ID 3296141-2), Helsinki, Finland
Email: [email protected]

2. What data the app processes

Workout data

  • Logged sets: exercise, weight, reps and time
  • Cardio sessions: duration, distance, intensity, average heart rate (if you enter it) and estimated calorie burn
  • Workout sessions (start and end time), workout templates and exercises you add yourself

Profile data, all optional

  • Name, year of birth, weight, height and gender
  • Used to estimate calorie burn in cardio and for the name in the greeting

Settings

  • Language, weight unit, weekly goal, rest timer settings and whether the coach is on or off

Coach messages

  • The five most recent motivational messages, so the next message does not repeat earlier ones

Average heart rate, weight and calorie burn may be health-related data. They stay on your device and are not sent to the coach server.

3. Where the data is stored

All data in section 2 is stored only on your device, in the app's own storage. The developer has no access to it.

  • Apple Watch: the phone and watch exchange workout templates, the workout in progress and the day's sets directly with each other over Apple's WatchConnectivity. The data does not pass through the developer's server.
  • Notifications: the rest timer notification is scheduled on the device as a local notification. The app does not use remote (push) notifications.
  • Backups: if iCloud or computer backup is enabled on your device, the app's data may be included in the backup according to Apple's policies. The app itself does not sync data to iCloud.

4. GymRat coach (AI motivational messages)

When a workout ends, the coach writes a short motivational message. The message is generated in one of the following ways:

Apple Intelligence on device (English and Swedish, on supported devices)

  • The message is generated entirely on your device using Apple's on-device language model.
  • No data is sent anywhere.

App server (Finnish, and as a fallback for other languages if Apple Intelligence is not available)

  • A summary of one workout is sent to the server:
    • workout template name, duration and time of day
    • exercise names, number of sets and total weight lifted
    • cardio duration, workouts this week, weekly goal and weekly streak
    • days since the previous workout
    • a possible record or improvement (e.g. "Back squat 85 kg, previous best 82.5 kg")
    • your first name, if you have entered it in your profile
  • Weight, height, year of birth, gender, heart rate or calorie burn are not sent.
  • The data is used only to generate the message. The server does not store the workout summary after the message has been generated. It stores only technical log data (IP address, timestamp and error code) for security and troubleshooting, for at most 30 days. Logs do not contain workout data or your name.
  • The server is located in an environment administered by Koodiversity Oy in Finland. The connection is encrypted (HTTPS).

You can switch the coach off under Settings → Coach. Pre-written messages built into the app are then shown on the home screen, and no workout data is used to generate messages. Settings also show whether the message is generated on the device or on the server in the chosen language.

Legal basis: the data sent to the server is processed to provide the feature you use (the motivational message). You can stop the processing at any time by switching the coach off.

5. What the app does not do

  • Does not require a user account or login.
  • Does not show ads.
  • Does not use analytics or tracking tools.
  • Does not sell or share data with third parties.
  • Does not use location, camera, contacts or Apple Health (HealthKit) data.

6. Retention and deletion

  • Data on your device is kept until you delete it.
    • Individual sets and workout sessions can be deleted in the app.
    • Profile data can be deleted under Profile → Delete profile data.
    • All data is removed when you delete the app from your device.
  • Data sent to the server: the workout summary is not kept after the message has been generated. Technical log data is deleted after 30 days.

7. Your rights

Under the EU General Data Protection Regulation (GDPR) you have the right to:

  • obtain information about the data concerning you and how it is processed
  • request rectification or erasure of your data
  • object to or restrict processing
  • lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman, tietosuoja.fi.

Because the data is mostly only on your device, you can view, edit and delete it yourself in the app. For matters concerning data sent to the server, contact the address in section 1.

8. Children

The app is not directed at children under 13, and it does not knowingly collect their data.

9. Changes

If the app gains features that change how data is processed (e.g. an Apple Health connection or iCloud sync), we will update this policy before they are introduced. The update date is shown at the top of the policy.

10. Contact

Privacy questions: [email protected]