We collect nothing.

GymBuddy has no server, no account and no analytics. Nothing you enter is sent to us, because there is nowhere for it to be sent. This page exists to say exactly what that means, and to be honest about the handful of things that do leave your phone — all of them either something you asked for, or something your own operating system does with your own account.

What we collect

Nothing. Not your name, not your email address, not your training history, not an advertising identifier, not a device identifier, not your location, not crash reports, not usage statistics. The app contains no analytics, no advertising and no third-party tracking software of any kind, and makes no network requests to us.

We do not sell or share personal information, and no data is used to track you across apps or websites, because none is gathered to begin with.

Where your training lives

In the app's own private storage on your device. Your splits, logged sets, body weight, reminders and settings are readable by the app and by nothing else, and they stay there unless you deliberately move them.

Progress photos

Entirely optional, and off until you take one. The app does not ask for them, does not need them, and works exactly the same without them.

A photo you take is shrunk and written into the app's own private storage, next to everything else. It is not uploaded, because there is nowhere to upload it to. No face detection runs on it, nothing is read out of it, and no part of it is used for anything but showing it back to you beside an older one.

They are the one thing here that a backup does not cover, in either sense. They are left out of the export file on purpose — a year of photos makes a file too large to email or keep in a notes app, which would break the one backup people actually take. And they are excluded from Android's own backup, so no copy of them reaches your Google account. The trade is deliberate: photographs of your body should be harder to spread around than a list of your squats, even to you. Uninstalling the app deletes them.

In a browser

The same app also runs in a browser tab, at gymbuddy.reaktor.build. It keeps the same promise in the same way: what you log is stored by your browser, on your device, where only that site can read it, and it is sent nowhere. The page is barred by its own security policy from contacting any address but the one it was loaded from, and it asks that address for nothing except its own files.

One thing is different, and it is true of every web page: loading it tells the computer that serves it your IP address, your browser's name and which file you asked for. A phone app never makes that request; a web page cannot avoid it. The files are served by Cloudflare, for now from an account and at an address that belong to a friend of the author's rather than to GymBuddy. What either can see is that somebody fetched the app — how often, and roughly from where — and never anything typed into it. No cookies are set and no analytics run.

This website, the page you are reading, is served the same way. It also loads its two typefaces from Google Fonts, so Google's servers see that same kind of request. The app does not; its fonts are inside it.

The app asks a browser for no permissions. Choosing or taking a progress photo opens the browser's own file chooser, which hands over the one picture you picked. Data kept in a browser lasts until you clear that site's data, which also deletes it for good.

What does leave your phone

Four things, and only these. Three of them happen because you asked.

• Backups made by Android. Android's own backup service may copy the app's database to your Google account, so a new phone can restore it. This is Android's mechanism, not ours; we never see it. Only the training database is included — cached files and app preferences are excluded. You can turn it off for GymBuddy, or entirely, in Android Settings under Backup. iOS backs the app up to your own iCloud or computer backup on the same basis.
• Exports you make. When you export a backup file or a CSV of your history, your phone's share sheet asks where to send it. Wherever you choose, it goes — email, Files, another app — and from that point it is governed by whatever you sent it to.
• Splits you share. A shared split contains the plan only: day names, which movements, and the target sets and reps. It never contains your logged sessions, your weights or your body weight. It travels as a link or code you send yourself, through whichever app you send it in.
• Workouts written to your health store. On Android, with your permission, the app can write a completed session to Health Connect, and reads your step count back from it. It reads nothing else — not your other workouts, not anything another app put there. That data stays on your device, under your control, in a store you can revoke access to at any time. On iOS, step counts come from the phone's own motion sensor and are read on-device only.

Permissions, and why

• Notifications — to show the reminders you set. Nothing else is ever posted.
• Alarms & reminders (Android) — so a reminder set for 6:30 arrives at 6:30 rather than up to an hour later. Reminders still work without it; they just get less punctual.
• Physical activity / Health Connect (Android) and motion (iOS) — to show your step count and to record a finished session. Optional; declining leaves the rest of the app working.
• Run at startup (Android) — reminders are held by the system clock, which forgets them when the phone restarts. This is how they are put back. Nothing runs at startup beyond rescheduling them.
• Vibration — the buzz when a rest timer ends, and nothing else.
• Camera — only if you choose to take a progress photo, and only asked for at the moment you tap to take one. Declining leaves the rest of the app untouched, and a phone with no camera runs it fine.

Notably not your photo library. Choosing an existing picture instead of taking one uses your phone's own photo picker, which hands the app the single image you selected — so the app never asks for, and never has, access to the rest of your photos.

The app never asks for location, microphone, contacts or your calendar, because it has no use for any of them.

Children

GymBuddy is not directed at children under 13 and collects no personal information from anyone, of any age.

Changes to this policy

If the app ever starts doing something this page does not describe, this page changes first and the date at the top changes with it. Given the app has no server to send anything to, any such change would be a substantial rewrite rather than a quiet edit.

Contact

There is no mailbox for questions about this policy yet. The app is not on a store, and this page will carry an address that somebody reads before it is. Until then, ask whoever gave you the link.