Privacy policy

Short and to the point: what data GymCore stores, why it needs it and what happens to it.

What data we store

• Your username and password. The password is stored only as a cryptographic hash — it cannot be recovered.
• Workout data: sets, weights, reps, dates, program templates and body measurements that you enter yourself.
• Uploaded photos and videos — they are hosted in the Cloudinary cloud storage.
• Service cookies: a session identifier and your device time zone (so that dates are shown in your local time).

AI keys

If you connect Gemini, Claude or GPT, your access key is stored in your browser only (in localStorage) and is sent directly to the provider along with the request. We do not store it and do not use it for any other purpose. You can delete the key at any time by clearing the site data in your browser.

Why we need it

The only purpose is to make the app work: signing you in, showing your history, calculating statistics and storing your data so that it is available from any device. We never sell your data or share it with ad networks.

Public links

If you share a program or an exercise yourself, that page becomes available via the link to anyone who has it. All other content is visible to you only.

Storage and deletion

Your data is stored for as long as your account exists. You can export your entire history to JSON in the profile settings at any time. To delete your account and the related data, write to us — we will delete it.

Changes

If this policy changes, we will update this page. The version below is the current document.