Introduction
This Privacy Policy explains how Gainly, operated personally by Jakob Drist Fisker in Denmark (“Gainly,” “we,” “us,” or “our”), collects, uses, shares, stores, and protects personal information when you use the Gainly mobile application, website, and related services (collectively, the “Service”).
Jakob Drist Fisker is the data controller for personal information processed by Gainly. By creating an account or using the Service, you acknowledge this Policy and our Terms of Service. Where we rely on consent, you may withdraw that consent as described below.
Information We Collect
The information we collect depends on the features you use and the choices you make. It may include:
- Account and identity information: name, email address, user identifier, authentication provider, account status, and sign-in information managed through Supabase, Google, or Apple.
- Profile and onboarding information: birth date, age, gender, height, weight, preferred units and language, activity level, training experience, goals, preferences, and settings.
- Workout information: programs, routines, exercises, sets, repetitions, weights, rest periods, workout history, personal records, progress, and notes.
- Nutrition and body information: calorie and macronutrient targets, meal and food entries, barcode information, food images, weight measurements, goals, and progress history.
- AI feature information: prompts, responses, conversation history, generated plans, tool actions, attachments, screenshots used for in-app assistance, images, audio recordings, and transcriptions.
- Subscription information: product, entitlement, trial and purchase status, renewal status, store, and transaction identifiers. Gainly does not receive or store your complete payment card information.
- Communications: support requests, feedback, feature requests, votes, and other messages you send to us.
- Technical and security information: IP address, device type, operating system, app version, timestamps, request and error logs, usage limits, and security or abuse-prevention events.
How We Collect Information
We collect information:
- directly from you when you sign up, complete onboarding, log activity, communicate with the AI Coach, or contact us;
- from your use of the Service and the actions you ask Gainly to perform;
- from Apple, Google, RevenueCat, and authentication or subscription services when you use those services; and
- automatically from our infrastructure when required to operate, secure, and troubleshoot the Service.
Device Permissions
Gainly may request access to your camera, photo library, microphone, media storage, and notifications. These permissions support features such as food analysis, exercise recognition, AI Coach attachments, voice conversations, saving images, and reminders. Gainly accesses these capabilities only after you grant the relevant device permission. You can change permissions in your device settings, but doing so may disable the related feature.
How We Use Information
We use personal information to:
- create, authenticate, and protect your account;
- sync your data and provide workout, nutrition, weight, statistics, and progress features;
- calculate personalized calorie, macronutrient, training, and progress information;
- provide AI Coach, voice, transcription, food-analysis, and exercise-recognition features;
- carry out actions you explicitly request, such as logging food or creating a workout program;
- manage subscriptions, trials, usage limits, and premium access;
- send transactional account messages and optional notifications;
- respond to support, feedback, and feature requests;
- maintain reliability, diagnose errors, prevent fraud and misuse, and secure the Service; and
- comply with legal obligations and enforce our Terms.
AI Features and Data Sharing
Gainly uses generative and other artificial intelligence technologies for coaching conversations, conversation titles, workout programs, food analysis, voice interactions, transcription, exercise recognition, and limited in-app assistance. When you sign up, you consent to Gainly offering these AI-powered functions and to the data processing described in this Policy. When you actively use an AI feature, the information needed to answer your request may be sent to external AI and infrastructure providers.
Depending on the feature, transmitted information may include your prompt, relevant profile context, workout and nutrition information, conversation history, images, audio, transcripts, or an in-app screenshot. AI requests are routed through Vercel AI Gateway and may be processed by Moonshot AI, Anthropic, xAI, OpenAI, or Google. Gainly may change models or providers as the Service develops, but we will update this Policy when the categories of recipients materially change.
Gainly does not have separate direct agreements with these AI providers guaranteeing that submitted information will never be used to improve or train their systems. Their handling of information is governed by the applicable provider terms, privacy policies, account settings, and the routing service used at the time of processing. Accordingly, we cannot promise that information transmitted to an AI provider will never be retained, reviewed, or used for service or model improvement. Do not submit information about yourself or another person that you are not comfortable sharing for this purpose.
AI-generated content may be incorrect, incomplete, or unsuitable for your circumstances. It is not medical advice, diagnosis, treatment, or a substitute for a qualified healthcare, nutrition, or fitness professional.
Legal Bases for Processing
Where the GDPR or similar law applies, our legal bases depend on the information and purpose:
- Contract: processing needed to create your account and deliver the features, subscriptions, and actions you request.
- Consent: optional permissions, AI processing, notifications, and other processing for which consent is required.
- Explicit consent: where required for information that may qualify as health data or another special category of personal information.
- Legitimate interests: securing and improving the Service, preventing misuse, diagnosing errors, and responding to users, provided those interests are not overridden by your rights.
- Legal obligations: maintaining records or responding when applicable law requires us to do so.
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal and cannot retrieve information already transmitted to an external provider.
Service Providers and Recipients
We share information only as reasonably necessary to provide the Service, follow your instructions, secure our systems, comply with law, or complete a business transfer. Recipients may include:
- Supabase for authentication, databases, storage, synchronization, and backend functions;
- Vercel AI Gateway for routing AI requests;
- Moonshot AI, Anthropic, xAI, OpenAI, and Google for AI processing;
- RevenueCat for Apple subscription and entitlement management;
- Apple for app distribution, in-app purchases, and Apple sign-in;
- Google when you choose Google sign-in; and
- Resend for transactional account email.
We may also disclose information if legally required, to protect the rights or safety of Gainly or others, or in connection with a sale, financing, or transfer of the Service. Any successor must handle personal information consistently with applicable law.
No Sale or Advertising Use
Gainly does not sell personal information, does not sell health or fitness information, and does not disclose personal information to data brokers. Gainly does not use third-party advertising trackers or use health, workout, nutrition, image, audio, or AI conversation data for targeted advertising.
Data Retention
Account information, profile data, workout and nutrition records, progress history, AI conversations, and stored attachments are generally retained in Supabase while your account remains active so that the Service can function and sync across devices. Technical, security, subscription, and support records are retained only for as long as reasonably necessary for their purpose or required by law.
Gainly does not maintain a separate backup archive of your account data outside the systems used to operate the Service. Information transmitted to Apple, RevenueCat, Vercel, or an AI provider may be retained by that provider under its own policies. Gainly cannot guarantee or control deletion from a provider's independent logs or systems after information has been transmitted.
Account and Data Deletion
You can delete your account from within the Gainly app. Successful account deletion permanently removes your Gainly profile and associated data from Gainly's active Supabase systems immediately. Because Gainly does not maintain separate account backups, deleted data cannot be restored.
Deleting your Gainly account does not automatically cancel an Apple App Store subscription. You must cancel the subscription separately through your Apple account. Deletion also cannot retroactively remove information already processed or independently retained by Apple, RevenueCat, Vercel, or an AI provider, although you may exercise any rights available directly with those providers.
International Data Transfers
Gainly is operated from Denmark, but some service and AI providers process information in the United States or other countries outside the European Economic Area. Those countries may have different data protection laws. Where required, transfers are based on an adequacy decision, standard contractual clauses, or another lawful transfer mechanism made available by the relevant provider.
Security
We use reasonable technical and organizational safeguards, including encrypted transmission, authentication, access controls, and database row-level security. Images, audio, prompts, and conversation history stored by Gainly are kept in secured systems. No online service can guarantee absolute security, and you are responsible for protecting your device and account credentials.
If you believe your account or personal information has been compromised, contact us immediately at support@goalit.app.
Children and Parental Consent
Gainly is available to users aged 9 and older. Because Gainly processes profile, fitness, nutrition, and AI-related information, users below the age at which they may legally consent to online data processing must use the Service only with the authorization and supervision of a parent or legal guardian.
In Denmark, a child must generally be at least 15 years old to give their own consent to consent-based processing by an online service. Therefore, a parent or legal guardian must review this Policy, authorize the account, and provide any required consent for a Gainly user aged 9 through 14. Different age thresholds may apply in other countries. We may take reasonable steps to verify age and parental authorization.
Parents and guardians may contact us to access, correct, or delete a child's information. If we learn that a child is using Gainly without legally valid authorization, we may suspend the account and delete the information.
Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy of your information; withdraw consent; and complain to a supervisory authority. You may also have the right not to be discriminated against for exercising a privacy right.
You can update certain information and delete your account inside the app. For other requests, email support@goalit.app. We may need to verify your identity or, for a child, the requesting adult's parental authority before completing a request.
If you are in Denmark, you may lodge a complaint with Datatilsynet. If you live elsewhere in the EEA, you may contact the supervisory authority in your country.
Changes to This Policy
We may update this Privacy Policy when the Service, providers, data practices, or legal requirements change. The updated date will appear above. We will provide additional in-app, website, or email notice before a material change takes effect where required by law, and we will request renewed consent when legally necessary.
Contact
Gainly is personally operated by Jakob Drist Fisker in Denmark. For privacy questions, requests, or concerns, contact support@goalit.app.