Privacy policy
Privacy policy
Last updated: 25 June 2026
————————————————————————————
This Privacy Policy explains how Gymbro AI (“Gymbro,” “we,” “us,” or “our”) collects, uses, and protects your information when you use the Gymbro mobile application and the website at gymbro.social (together, the “Service”).
We are based in the Republic of Cyprus and act as the data controller for your personal data. Until our company is formally incorporated, the Service is operated by its founders under the Junior Achievement Cyprus framework. If you have any questions, contact us at ceo@gymbro.social.
1. Information We Collect
We collect only what we need to run the Service:
Account information — your email address and login credentials.
Onboarding details — information you give us during the setup quiz, such as your bodyweight, training experience, and goal (“dream PR”). We use this to calibrate your analysis and rankings.
Lift videos and images — the recordings you upload or capture so the Service can analyse your form and performance.
Performance data — lifts you log, estimated 1RM, form scores, percentile rankings, and progress over time.
Payment information — if you subscribe, your payment is processed by our payment provider. We do not see or store your full card details.
Device and technical data — device type, operating system, app version, and crash or diagnostic logs.
Usage data — how you interact with the Service, used to improve it.
2. How We Use Your Information
We use your information to:
Provide the core Service — analyse your lifts, generate feedback, rank you, and track your progress.
Create and manage your account and subscription.
Respond to your requests and provide support.
Maintain the security, stability, and integrity of the Service.
Improve our features and understand how the Service is used.
Send you service-related messages, and (only with your consent) marketing emails.
3. Legal Bases (GDPR)
If you are in the European Economic Area or the UK, we rely on the following legal bases:
Last updated: 25 June 2026
————————————————————————————
This Privacy Policy explains how Gymbro AI (“Gymbro,” “we,” “us,” or “our”) collects, uses, and protects your information when you use the Gymbro mobile application and the website at gymbro.social (together, the “Service”).
We are based in the Republic of Cyprus and act as the data controller for your personal data. Until our company is formally incorporated, the Service is operated by its founders under the Junior Achievement Cyprus framework. If you have any questions, contact us at ceo@gymbro.social.
1. Information We Collect
We collect only what we need to run the Service:
Account information — your email address and login credentials.
Onboarding details — information you give us during the setup quiz, such as your bodyweight, training experience, and goal (“dream PR”). We use this to calibrate your analysis and rankings.
Lift videos and images — the recordings you upload or capture so the Service can analyse your form and performance.
Performance data — lifts you log, estimated 1RM, form scores, percentile rankings, and progress over time.
Payment information — if you subscribe, your payment is processed by our payment provider. We do not see or store your full card details.
Device and technical data — device type, operating system, app version, and crash or diagnostic logs.
Usage data — how you interact with the Service, used to improve it.
2. How We Use Your Information
We use your information to:
Provide the core Service — analyse your lifts, generate feedback, rank you, and track your progress.
Create and manage your account and subscription.
Respond to your requests and provide support.
Maintain the security, stability, and integrity of the Service.
Improve our features and understand how the Service is used.
Send you service-related messages, and (only with your consent) marketing emails.
3. Legal Bases (GDPR)
If you are in the European Economic Area or the UK, we rely on the following legal bases:
Last updated: 25 June 2026
————————————————————————————
This Privacy Policy explains how Gymbro AI (“Gymbro,” “we,” “us,” or “our”) collects, uses, and protects your information when you use the Gymbro mobile application and the website at gymbro.social (together, the “Service”).
We are based in the Republic of Cyprus and act as the data controller for your personal data. Until our company is formally incorporated, the Service is operated by its founders under the Junior Achievement Cyprus framework. If you have any questions, contact us at ceo@gymbro.social.
1. Information We Collect
We collect only what we need to run the Service:
Account information — your email address and login credentials.
Onboarding details — information you give us during the setup quiz, such as your bodyweight, training experience, and goal (“dream PR”). We use this to calibrate your analysis and rankings.
Lift videos and images — the recordings you upload or capture so the Service can analyse your form and performance.
Performance data — lifts you log, estimated 1RM, form scores, percentile rankings, and progress over time.
Payment information — if you subscribe, your payment is processed by our payment provider. We do not see or store your full card details.
Device and technical data — device type, operating system, app version, and crash or diagnostic logs.
Usage data — how you interact with the Service, used to improve it.
2. How We Use Your Information
We use your information to:
Provide the core Service — analyse your lifts, generate feedback, rank you, and track your progress.
Create and manage your account and subscription.
Respond to your requests and provide support.
Maintain the security, stability, and integrity of the Service.
Improve our features and understand how the Service is used.
Send you service-related messages, and (only with your consent) marketing emails.
3. Legal Bases (GDPR)
If you are in the European Economic Area or the UK, we rely on the following legal bases:
4. Your Videos and AI Analysis
The videos you upload are sent to our AI processing provider(s) solely to generate your form analysis, scores, and rankings. We do not use your videos to train AI models, and we do not sell them. While we store your results so you can view your history; we delete all clips uploaded immediately, video (see Section 9).
5. How We Share Your Information
We do not sell your personal data. We share it only with service providers who help us run the Service, and only as needed:
Payments — Stripe to process subscriptions.
Hosting and database — Firebase to store your account and data.
AI analysis — MediaPipe to analyse your lifts.
App stores — Apple and Google, for delivery and in-app purchases.
We may also disclose information where required by law, or to protect our rights and the safety of our users.
6. International Transfers
Some of our providers are located outside the EEA, including in the United States. Where we transfer your data internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
7. Data Retention
We keep your personal data only as long as needed:
Account and performance data — for as long as your account is active.
Videos — until you delete them or close your account.
Payment and accounting records — for as long as required by law.
When you delete your account, we delete or anonymise your personal data within [30] days, except where we must keep certain records to meet legal obligations.
8. Your Rights
Under the GDPR you have the right to: access your data; correct it; delete it; restrict or object to processing; receive a copy in a portable format; and withdraw consent. To exercise any of these, email ceo@gymbro.social.
You also have the right to lodge a complaint with your local data protection authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy).
9. Deleting Your Account
You can delete your account and associated personal data directly in the app via Settings → Delete Account, or by emailing ceo@gymbro.social. We will action your request within [30] days.
10. Children
The Service is intended for users aged 13 and over. We do not knowingly collect personal data from anyone under this age. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Data Security
We use reasonable technical and organisational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12. Third-Party Links
The Service may link to third-party sites or services. We are not responsible for their privacy practices, and we encourage you to read their policies.
13. Changes to This Policy
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app.
14. Contact Us
Gymbro AI
Email: ceo@gymbro.social
Website: gymbro.social
Republic of Cyprus
4. Your Videos and AI Analysis
The videos you upload are sent to our AI processing provider(s) solely to generate your form analysis, scores, and rankings. We do not use your videos to train AI models, and we do not sell them. While we store your results so you can view your history; we delete all clips uploaded immediately, video (see Section 9).
5. How We Share Your Information
We do not sell your personal data. We share it only with service providers who help us run the Service, and only as needed:
Payments — Stripe to process subscriptions.
Hosting and database — Firebase to store your account and data.
AI analysis — MediaPipe to analyse your lifts.
App stores — Apple and Google, for delivery and in-app purchases.
We may also disclose information where required by law, or to protect our rights and the safety of our users.
6. International Transfers
Some of our providers are located outside the EEA, including in the United States. Where we transfer your data internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
7. Data Retention
We keep your personal data only as long as needed:
Account and performance data — for as long as your account is active.
Videos — until you delete them or close your account.
Payment and accounting records — for as long as required by law.
When you delete your account, we delete or anonymise your personal data within [30] days, except where we must keep certain records to meet legal obligations.
8. Your Rights
Under the GDPR you have the right to: access your data; correct it; delete it; restrict or object to processing; receive a copy in a portable format; and withdraw consent. To exercise any of these, email ceo@gymbro.social.
You also have the right to lodge a complaint with your local data protection authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy).
9. Deleting Your Account
You can delete your account and associated personal data directly in the app via Settings → Delete Account, or by emailing ceo@gymbro.social. We will action your request within [30] days.
10. Children
The Service is intended for users aged 13 and over. We do not knowingly collect personal data from anyone under this age. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Data Security
We use reasonable technical and organisational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12. Third-Party Links
The Service may link to third-party sites or services. We are not responsible for their privacy practices, and we encourage you to read their policies.
13. Changes to This Policy
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app.
14. Contact Us
Gymbro AI
Email: ceo@gymbro.social
Website: gymbro.social
Republic of Cyprus
4. Your Videos and AI Analysis
The videos you upload are sent to our AI processing provider(s) solely to generate your form analysis, scores, and rankings. We do not use your videos to train AI models, and we do not sell them. While we store your results so you can view your history; we delete all clips uploaded immediately, video (see Section 9).
5. How We Share Your Information
We do not sell your personal data. We share it only with service providers who help us run the Service, and only as needed:
Payments — Stripe to process subscriptions.
Hosting and database — Firebase to store your account and data.
AI analysis — MediaPipe to analyse your lifts.
App stores — Apple and Google, for delivery and in-app purchases.
We may also disclose information where required by law, or to protect our rights and the safety of our users.
6. International Transfers
Some of our providers are located outside the EEA, including in the United States. Where we transfer your data internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
7. Data Retention
We keep your personal data only as long as needed:
Account and performance data — for as long as your account is active.
Videos — until you delete them or close your account.
Payment and accounting records — for as long as required by law.
When you delete your account, we delete or anonymise your personal data within [30] days, except where we must keep certain records to meet legal obligations.
8. Your Rights
Under the GDPR you have the right to: access your data; correct it; delete it; restrict or object to processing; receive a copy in a portable format; and withdraw consent. To exercise any of these, email ceo@gymbro.social.
You also have the right to lodge a complaint with your local data protection authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy).
9. Deleting Your Account
You can delete your account and associated personal data directly in the app via Settings → Delete Account, or by emailing ceo@gymbro.social. We will action your request within [30] days.
10. Children
The Service is intended for users aged 13 and over. We do not knowingly collect personal data from anyone under this age. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Data Security
We use reasonable technical and organisational measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12. Third-Party Links
The Service may link to third-party sites or services. We are not responsible for their privacy practices, and we encourage you to read their policies.
13. Changes to This Policy
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app.
14. Contact Us
Gymbro AI
Email: ceo@gymbro.social
Website: gymbro.social
Republic of Cyprus