Privacy policy
Draft version, to be reviewed by a lawyer before the public launch. It describes what the app actually does today.
Last updated: November 5, 2026 · Français
In short
GymBroz helps you log your workouts, follow your programs and your nutrition, talk with a coach, human or AI, and train in your box. We collect the minimum to do so, we sell nothing to anyone, and you can export or delete your data from the app.
Who is responsible
GymBroz is published by Solutions G-Broz, a sole proprietorship registered in Quebec (NEQ 2282673948), operated by Xavier Martinon.
Xavier Martinon is the person in charge of the protection of personal information. For any question or request (access, correction, withdrawal of consent, deletion), write to him at the address given in Settings › Privacy.
What we collect, and why
| Information | Why |
|---|---|
| Account: your email, and your first and last name sent by Google or Apple if you sign in with them. With an email and a password, the password is kept hashed, never in clear. | Signing you in and identifying you to your coaches, your box and your contacts. |
| Profile: first name, last name, photo, age, sex, country, level, goals, units | Adapting the workouts, the programs, the nutrition and the advice of GymBroz AI. |
| Health information: weight, weigh-ins, height, notes (injuries, constraints) | Only with your explicit consent. You can withdraw it in Settings › Privacy: these fields are then erased, along with your weigh-in history. |
| Workouts, results, how they felt, records, programs, sports | The heart of the service: your training log. |
| Nutrition: meal log, targets, target weight, custom foods, favourite meals, recipes | Only with your consent, asked before your first meal. Calculating your intake, your daily target and your summaries. You choose the coaches who see your averages, never the detail of your meals. Settings › Privacy › Nutrition tracking: withdraw your consent, export or erase this data. |
| Watch (Google Health, if you connect it): exercise sessions, duration, distance, calories, steps, average heart rate, elevation | Adding your watch's sessions to your log. Read only. You disconnect it in Settings › Watch and health: access is removed at Google, the sessions already imported stay. |
| Conversations with GymBroz AI, voice dictation | Answering your questions and acting in your log. The message counter is used for your plan's quota. |
| Messaging with your coaches, athletes and contacts: texts, photos, files, voice messages, videos | Talking. End-to-end encrypted: see "Messaging". |
| Community, if you join it: handle, posts, reactions, comments, follows, challenges, videos | Sharing your workouts and records with other members. See "The community". |
| Content from a coach or a box: albums of photos and videos, cover and attachments of an event, where a person may appear, even without a GymBroz account; PDF files; the fact of having read an instruction or opened a file | Sharing memories and documents with their athletes or members, and showing them the result. See "The community". |
| Box: membership, bookings, attendance, absences, WOD scores, session packs, payments, no-show fees | Booking your classes and managing your box membership. See "Your coaches and your box". |
| GymBroz subscription (plan, period, due date), invoices, referrals and promo codes | Managing your plan and your rewards. Your credit card is entered at Stripe, or paid through the App Store or Google Play; GymBroz never sees it. |
| Devices: browser notification subscription or app token, language, time zone | Sending you the notifications and emails you chose (Settings › Notifications). |
| Sign-in attempts: IP address, date, result | Blocking attacks on accounts. Kept 30 days. |
Privacy by default
- Your profile isn't visible to other athletes until you turn it on (Settings › Account). Your coaches see it in any case.
- You only appear on your box's leaderboard (first name, initial of your last name, WOD scores, also on the box's screen) after you've accepted. You change it in Settings › Privacy.
- You're only in the community if you join it. In your box's community, the directory, the podiums and the welcome post stay off until you turn them on. If you join it, your coaches' content is shown to you without you following them, and your coaches don't show on your profile.
GymBroz AI
GymBroz AI, the AI coach, uses OpenAI's models. OpenAI doesn't use what we send it to train its models and doesn't store it in our account; it keeps it for up to 30 days to detect abuse, then deletes it. To answer you, it receives your first name (never your last name, your email or your phone), your sex, your age, your level, your goals, your units, your records and your recent workouts. If you've consented to health information, it also receives your weight, your height and your notes (injuries, constraints). It can read and write in your log (workouts, programs, nutrition, weigh-ins, records), within the limits of your consents.
The other features that go through OpenAI:
- voice dictation (workout notes, questions to GymBroz AI): the recording is transcribed, then not kept;
- a meal described in free text, with the names of your custom foods and recipes;
- the photo of a nutrition label, read then not kept;
- for a coach: the briefing (with their athletes' pain comments, absences and late payments), the message proposals, the day summary, the import of a program or of a client list from a document (the document's text, with the names, emails and phones in it, when its columns aren't recognized on our servers). Athletes are named there by their first name.
A food's barcode is read on your device; only the code goes to Open Food Facts. GymBroz AI's advice doesn't replace a health professional.
Messaging
Messages are end-to-end encrypted on your device: text, photos, files, voice messages, videos (including those filmed for your coach), shared workouts and recipes. The server can't read them.
It does see who writes to whom and when, the message type, the size of files, the reactions (emojis), the read receipts and the title of groups. Notifications give the author's name and the message type, never its text.
When you report a message, your device sends its content in clear to GymBroz's moderation, which can then read it. Voice messages between people are never transcribed.
The community
It's for people 14 and older (15 in France). Other members see your handle, your display name ("First name I." by default), your photo if you turn it on, and the posts you share with your followers. Community videos, albums and files aren't end-to-end encrypted: they're stored on our servers, in Quebec.
A coach can post for the athletes they follow, all of them or one of their groups: announcements, events, challenges, albums, PDF files. Only those athletes read them, if they've joined the community; not their followers, nor visitors to their profile. A box posts the same way for its members, albums included: to all its members, to those signed up to one class (and its team), or to its team alone; a member outside the audience chosen does not see the content. An event can carry a cover photo and up to five attachments (photo, video or PDF), read by the same audience. The coach or the team sees who is going to an event and who takes part in a challenge, and how many people read an instruction or opened a file, without their names. A coach's other athletes see neither their list of athletes nor who is going to an event, but they do see your name on your comments and reactions, and in the ranking of a challenge you join.
Albums, covers and attachments. Only the coach or the team of a box uploads images, never the athletes or the members. Before posting, they confirm that the people visible agree (for a person under 14, their parent or guardian); GymBroz keeps the date of this confirmation, but doesn't check this agreement. We remove the metadata from photos and videos (location, device, time). If you appear in an image and refuse to have it shared, report it: it is hidden as soon as you report it, and the managers of the box (or the coach) are told to decide. This is your right to have it withdrawn. If you have no account or no access to that album, write to the person in charge of the protection of personal information. Albums and files aren't sent to OpenAI.
Moderation relies on a word filter and on reports from members, read by GymBroz (and, for a box's community, by its team; for a coach's space, by that coach). The filter reads neither images nor the content of PDFs. Leaving the community erases your community profile.
Your coaches and your box
A coach who follows you sees your profile, your workouts and your records. They only see your nutrition if you share it with them. They can keep private notes about you (injuries, equipment), which they don't show you. A coach can also add or import a client (first name, last name, email, phone); GymBroz then sends an invitation by email, with a single reminder, and never sends it again to an address that declined it.
In a box, the team sees your bookings, your attendance, your absences, your scores and your payments, and can write notes about you. Payments to a coach or a box go through Stripe, on that coach's or box's account; Stripe collects your email and your card. No-show fees are charged the same way.
A coach can publish a public page (Settings › My page): their name, photo, presentation, offers and contact details are visible there without an account. It isn't published until they decide to.
Audience measurement
We count a few events (sign-up, start of a trial, upgrade-to-Pro screen, quota reached, payment, in-app purchase, food added) with Plausible, a tool hosted in Quebec, without cookies or identifiers. For a food, only its origin and the time taken are counted, never the food or the quantity. Nothing can recognize you or build a profile of you. You can turn it off in Settings › Privacy › Anonymous usage stats.
Where your data is
GymBroz data is hosted in Canada, at OVHcloud, in Quebec. Some of it leaves Canada, with these providers, who process it under their own terms:
| Provider | For |
|---|---|
| Sign-in with Google, Google Health (watch), Google Play purchases, app notifications (Firebase) | |
| Apple | Sign-in with Apple, App Store purchases, iPhone app notifications |
| Stripe | Payments of your plan, and payments to your coach or your box |
| OpenAI | GymBroz AI, voice dictation, label reading, document imports |
| Resend | Sending emails (sign-in, invitations, receipts, reminders) |
How long
As long as your account exists, except:
- voice messages: 24 hours after everyone has listened to them, 7 days otherwise;
- messaging videos: 90 days; community videos: 365 days;
- posts in your box's community: 2 years;
- photos and videos in an album, cover and attachments of an event, of a coach or of a box: 2 years; PDF file from a coach or a box: until it is deleted;
- GymBroz AI: your last 5 conversations; briefings, summaries and tasks: 90 days;
- notifications and emails sent: content erased once sent, record kept 30 days;
- servers' technical logs: 30 days;
- encrypted backups: 30 days at most.
When you delete your account (Settings, "Delete my account" at the very bottom), your data is erased from all our services within minutes, and the access given to Apple or Google Health is revoked. What remains:
- your messages, encrypted with the other participants of your conversations, signed "Deleted account";
- the record of your invoices, without your identifier, and your invoices at Stripe, 6 years, as tax law requires;
- without your name: the WODs you wrote for a box, class reports, challenges already started;
- images in an album, a cover or an attachment of a coach or of a box where you appear: they aren't linked to your account. Ask for their removal with a report before deleting your account, or write to us;
- the record of the deletion request, and for 30 days at most the backups and sign-in attempts.
A subscription paid through the App Store or Google Play isn't stopped by the deletion: cancel it first at Apple or Google. Details: Delete your account.
Security
Passwords are hashed. Google Health tokens are encrypted. Backups are encrypted before they leave the server. Messaging keys stay protected by your messaging code.
Your rights
- Access your data and receive it in a structured format (JSON): Settings › Privacy › Export. The export holds your profile, records, workouts, programs, nutrition, community, conversations with GymBroz AI and, if it's unlocked on the device, your messaging. For the rest (box, payments), write to us.
- Have it corrected: directly in your profile, or by writing to us.
- Withdraw your consent to health information or to nutrition tracking: Settings › Privacy.
- Delete your account: Settings › Account.
- File a complaint with the Commission d'accès à l'information (Quebec's access to information commission).
Incidents
We keep a register of confidentiality incidents. If there is a risk of serious injury, we notify you and report the incident to the Commission d'accès à l'information.
Language
This policy is written in French. This English translation is provided for convenience; in case of a discrepancy, the French version prevails.