Privacy Policy

1. Data we collect

When you use gymbro.you, we collect:

• Account information from your sign-in provider (email address and name from Google or Apple).
• Chat messages you send and AI responses you receive.
• Meal photos you upload for analysis.
• Usage data such as prompt counts and image counts to enforce plan limits.
• Payment information processed by Stripe (we do not store full card details).
• Technical data such as IP address, browser type and device information to prevent abuse.

2. How we use your data

We use your data to:

• Provide and operate the AI coaching service.
• Enforce free and Premium plan limits.
• Process payments and manage subscriptions.
• Prevent abuse, fraud and unauthorised access.
• Improve the service and fix issues.

3. Legal basis

We process your data on the basis of our contract with you (providing the service), our legitimate interests (security and abuse prevention), and your consent where required (for example, for optional marketing communications).

4. Sharing your data

We do not sell your personal data. We share data only with trusted service providers that help us run the service:

• Stripe for payment processing.
• Google and Apple for authentication.
• Groq for processing chat messages and uploaded images through AI models.
• Lovable Cloud / Supabase for hosting, database and storage.

5. Storage and security

Your data is stored on Lovable Cloud (Supabase) infrastructure with industry-standard encryption and access controls. Meal photos are stored in a private storage bucket and only you can access them.

6. Data retention

We keep your chat history and uploaded photos until you delete your account. Usage data may be retained for a short period to prevent abuse and for billing purposes. You can delete your account and all associated data from your account page at any time.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and data.
• Object to or restrict certain processing.
• Withdraw consent where applicable.

To exercise these rights, contact us at support@gymbro.you or delete your account directly from the account page.

8. Cookies and tracking

We use essential cookies to keep you signed in and maintain your session. We do not use third-party advertising or analytics cookies.

9. Children's privacy

The service is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the new effective date on this page. Continued use of the service after changes means you accept the updated Policy.