Privacy Policy

1. Introduction

Gym Clock Inc. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we handle information when you use the Gym Clock mobile application (the "App"), our websites (including gymclock.app and related subdomains), and any optional online features that require a Gym Clock Account (such as sign-in, leaderboard, and community features accessed through Locker or other Gym Clock properties).

Using Gym Clock without an account. You can use core App features without creating an account. In that mode, your workout history, alarms, and fitness data stay on your device as described in Section 2.1.

Creating a Gym Clock Account is optional. If you choose to create an account, additional information is collected and stored on our servers as described in Section 2.2. By creating an account, you agree to this Privacy Policy as it applies to account and online features.

By using the App, you agree to this Privacy Policy. If you create a Gym Clock Account, you also agree to the account-related practices in this policy.

2. Information We Collect

2.1 Information Stored Locally on Your Device

Gym Clock is designed with privacy in mind. The following information is stored locally on your device:

• Workout history and exercise data
• Fitness metrics and statistics
• Alarm settings and preferences
• Application settings and user preferences
• Medals, achievements, and progress tracking data

If you use the App without signing in, this locally stored information is not transmitted to our servers, except that you may optionally choose to sign in later and sync certain data (see Section 2.2).

When you are signed in, the App may send your cumulative lifetime rep total to our servers for leaderboard and account features. Individual workouts, sets, exercises, and workout history are not uploaded by the account service.

2.2 Information We Collect When You Create a Gym Clock Account

Account and profile information:

• Email address
• Username (public handle)
• Display name (public)
• Password (stored only as a cryptographic hash; we never store plain-text passwords)
• Optional profile image URL (if provided via sign-in provider or profile settings)
• Email verification status

Sign-in and session information:

• Session identifiers (HTTP-only cookies)
• IP address and browser/device user agent (stored with active sessions)
• Sign-in method (email/password, Google, and/or Apple)

Cookies and sessions. If you sign in on auth.gymclock.app or related Gym Clock websites, we use HTTP-only session cookies to keep you signed in (typically up to 7 days). On production Gym Clock domains, session cookies may be shared across *.gymclock.app subdomains so you remain signed in across Gym Clock services. You can end a session by signing out.

Synced fitness metric (account holders only):

• Total lifetime rep count, a single cumulative number synced from the App. We do not receive per-workout, per-exercise, or per-set details through the account service.

Communications:

• One-time verification codes and password-reset codes sent to your email (processed via our email provider)

Sign-in with Google or Apple:

If you choose Google or Apple sign-in, we receive information from that provider needed to authenticate you (such as email address and, where available, name and profile image), subject to that provider's own privacy policy.

2.3 Information We Do Not Collect

We do not collect or store on our account servers:

• Workout history, exercise logs, or per-session fitness data
• Camera video or images (pose detection remains on-device; see Section 2.4)
• Precise location data
• Health records or medical information

Other Gym Clock apps or future features may collect additional information; if so, we will describe that in an updated policy.

2.4 Camera Access

The App uses your device's camera for real-time pose detection and rep counting during workouts. Important: No video or images are recorded, stored, or transmitted. The camera feed is processed in real-time for pose detection only and immediately discarded. No visual data leaves your device. Camera data is not uploaded when you create an account or use online features.

3. How We Use Information

3.1 How We Use Local (On-Device) Information

The locally stored information is used solely for:

• Providing workout tracking and fitness metrics within the App
• Enabling alarm functionality and notifications
• Displaying your progress, statistics, and achievements
• Enhancing your user experience within the App

3.2 How We Use Account and Online Information

If you create a Gym Clock Account, we use your information to:

• Create and manage your account and authenticate you across Gym Clock services
• Send transactional emails (verification codes, password resets)
• Sync and display your cumulative rep total
• Operate the leaderboard and related competitive features
• Display your public username and display name in leaderboard and community features (e.g. Locker forum)
• Enforce our Terms, including username/display-name rules and abuse prevention
• Maintain security, prevent fraud, and troubleshoot technical issues
• Comply with legal obligations

4. Data Sharing and Disclosure

4.1 Service Providers

We use infrastructure providers to operate account and online features. Account and rep data are stored on our servers. These providers process data on our behalf and only as needed to provide the service.

We do not sell your personal information. We do not share your data with third parties for their own advertising or marketing.

4.2 Public Information

If you have an account, your username, display name, and total rep count may be visible to other signed-in Gym Clock users through the leaderboard and may appear in community features (such as forum posts on Locker). Your email address is not shown on the leaderboard or in public profile listings.

Leaderboard. The leaderboard shows signed-in users ranked by cumulative rep total. Some leaderboard entries may be synthetic or demonstration profiles used to populate the leaderboard, especially during early release. These entries are not real individuals.

4.3 Legal Disclosure

We may disclose information if required by law, court order, or governmental authority.

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Privacy Policy.

5. Data Security

We take data security seriously. For locally stored App data, the security of your information depends primarily on your device's security measures:

• Use device passcodes, biometric authentication, or other security features
• Keep your device's operating system updated
• Avoid jailbreaking or rooting your device, as this can compromise security
• Be cautious when granting permissions to other applications

For Gym Clock Account data, we use industry-standard measures including encrypted connections (HTTPS), hashed passwords, HTTP-only session cookies, and access controls on our infrastructure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security of account data.

While we implement security measures within the App, we cannot guarantee absolute security. You use the App at your own risk.

6. Permissions and Device Access

This section applies to the mobile App regardless of whether you have an account.

The App requires certain permissions to function properly. Here's how we use each permission:

• Camera: Used exclusively for real-time pose detection and rep counting. No video or images are recorded, stored, or transmitted. You can revoke camera access at any time through your device settings.
• Notifications: Required to alert you when workout alarms are triggered. You can manage notification settings through your device settings.
• Alarm/Critical Alerts (iOS): Allows alarms to play even when your device is in silent mode. This is essential for the App's core alarm functionality.

You can review and manage all permissions granted to the App through your device's settings at any time.

7. Data Retention and Deletion

7.1 Local App Data

All local App data is stored on your device. You can delete it at any time by:

• Uninstalling the App from your device
• Using your device's settings to clear App data (if available)
• Resetting your device (which will delete all data, not just App data)

Once you delete the App or its data from your device, the local data is permanently removed.

7.2 Gym Clock Account Data

If you create an account, we retain your account information for as long as your account is active or as needed to provide services to you.

Account deactivation: You may deactivate your account through account settings. Deactivation signs you out, revokes active sessions, removes you from the leaderboard, and prevents sign-in until you reactivate. Deactivation does not automatically delete all account data from our servers.

Account deletion: To request permanent deletion of your account and associated server data, contact us at team@gymclock.app. We will process verified requests in accordance with applicable law.

We may retain certain information where required by law or for legitimate purposes such as fraud prevention, dispute resolution, or enforcement of our Terms.

Incomplete sign-ups: If you begin account creation (for example via Google or Apple) but do not complete username setup, we may delete incomplete account records.

8. Children's Privacy

The App is not intended for use by children under the age of 13 (or the age of majority in your jurisdiction, whichever is higher). We do not knowingly collect personal information from children.

Account creation and online features (leaderboard, community) are intended for users who meet the minimum age required in their jurisdiction. We do not knowingly collect account information from children under 13 (or the applicable age of consent in your region).

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information.

9. Your Rights and Choices

Under Canadian privacy law (Personal Information Protection and Electronic Documents Act, PIPEDA) and applicable provincial privacy laws, you have certain rights regarding your personal information:

Local device data:

• Right to Access: Since local data is stored on your device, you have direct access to it through the App.
• Right to Correction: You can update or correct information directly within the App.
• Right to Deletion: You can delete all local App data by uninstalling the App or clearing its data through device settings.
• Right to Withdraw Consent: You can withdraw consent for permissions (such as camera access) at any time through your device settings.
• Right to Object: You can stop using the App at any time by uninstalling it.

If you have a Gym Clock Account, you may also:

• Access account information through signed-in account features or by contacting us
• Correct your email/password through account settings; username and display name changes may be subject to availability, moderation, and a change cooldown
• Deactivate your account at any time
• Request deletion of account data by contacting team@gymclock.app
• Withdraw consent for optional online features by deactivating your account and/or not signing in (core offline App use can continue where available)
• Manage linked sign-in access through your Google or Apple account settings

To exercise any of these rights or if you have questions, please contact us using the contact information provided at the end of this Privacy Policy.

10. International Data Transfers

Gym Clock is based in Canada. If you create an account, your information may be stored and processed in Canada and in other countries where our infrastructure is hosted, which may have different data protection laws than your country. Where required, we take steps designed to protect your information in accordance with this Privacy Policy and applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Updating the "Last updated" date at the top of this Privacy Policy
• Posting a notice in the App (if applicable)
• Other reasonable means as appropriate

Continued use of the App after changes constitutes acceptance for offline use. Material changes to account-related practices may require renewed acknowledgment when you next sign in or use account features, where required by law.

12. Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario, Canada, and applicable Canadian federal laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy legislation.

If you are located outside of Canada, please note that this Privacy Policy is designed to comply with Canadian privacy law. Your local privacy laws may provide you with additional rights.

13. Contact Us

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Gym Clock Inc.
Windsor, Ontario, Canada
Email: team@gymclock.app

We will respond to your inquiries in a timely manner, typically within 3 days, in accordance with applicable privacy laws.

14. Consent

By using the App, you agree to this Privacy Policy, including on-device processing described in Sections 2.1 and 3.1. If you create a Gym Clock Account, you also agree to the collection, use, and disclosure of your account information as described in this policy, including public display of your username, display name, and rep total where applicable.