Privacy Policy

At a glance

You need an account to use Gym Workout Spinner. Your workout data is saved on your device. If you have a subscription and use Cloud Sync, a backup of that data is also stored with our cloud provider. Community messages are delivered live and cached on participating devices; our database does not keep ordinary chat message history. Reports about members or messages are retained for moderation.

We use your information to run the app, manage purchases, provide support and protect the Community. The sections below explain the details and your options.

Who we are

Inuvera Ltd is responsible for the personal information described in this policy. You can contact us at support@inuvera.com with privacy questions or requests.

Information we handle

Account and profile

We process your email address, account identifier, password credentials handled by our authentication provider, display name, subscription status, and any profile picture or optional information you add. Optional profile information can include date of birth, gender, height and weight. You can choose whether subscribers can discover your profile and whether your avatar appears in chats.

Workouts and gym details

The app saves gyms and equipment, workouts, custom exercises, training logs, preferences and, if you scan one, a gym membership barcode on your device. The camera is used to scan a barcode when you choose that feature; the app saves the barcode value, not a camera recording. Subscribers who use Cloud Sync send a backup of these app records, including any saved membership barcode value, to our cloud provider. The Muscle Recovery Map (a subscriber feature) is calculated on your device from your recent training logs; it does not send additional information to us.

Subscriptions

Apple handles App Store payment details. We receive and retain purchase identifiers, subscription status and related transaction information needed to activate and manage subscriber features. Apple also notifies us when a subscription renews, is cancelled, expires or is refunded, so we can keep subscriber features up to date. We do not receive your full payment card number from Apple.

Community

If you use Community, we process your display name, profile visibility choices, conversation membership, invitations and blocks. Messages and images are relayed live to participants and cached on their devices. Ordinary messages are not stored as chat history in our database. If a message contains a web link, the app sends that link to our server so it can fetch a preview (title and image) from the website; we do not store the link or the preview. The preview image is then loaded from that website by your device, so the website may see your device's IP address. If someone reports a message or member, the report can include the message text, the reason, both people's display names, email addresses and account identifiers, and conversation details; we store that report and email it to our support team. Reported images are identified as image messages but are not attached to the report.

Support and service information

If you email us, we receive your message, email address and anything you include. Our service providers may also process technical information needed for authentication, security, email delivery and operation of the app or website, such as request and device information.

Emails and notifications

We send service emails such as a welcome email when you create an account and password-reset codes you request. Rest-timer notifications are scheduled on your device; the app does not register your device for push messages from our servers.

No advertising or tracking

The app does not contain advertising, analytics or tracking software, we do not use your information to track you across other companies' apps or websites, and we do not sell your personal information.

How and why we use information

Optional profile details (height, weight, date of birth and gender) can reveal information about your health. We store them in your account only if you add them and tick I agree in the app, and we rely on that explicit consent (UK GDPR Article 9(2)(a)). We record when you agreed. You can withdraw consent at any time by clearing these details in the Account tab and saving, which deletes them and the consent record, or by deleting your account. Your workout records are kept on your device, and in your cloud backup only if you choose to use Cloud Sync; they are used only to provide the app's features to you.

Sharing and visibility

We use service providers to operate the app and website, including Supabase for accounts, app data and live messaging, Resend for service email, Apple for App Store purchases, and Squarespace for this website. They process information needed to provide their services. Information may also be disclosed where required by law or needed to protect users and the service.

If you enable a public Community profile, other eligible subscribers may find your display name and permitted avatar. People in a conversation can see the messages and images you send them and may retain copies on their devices. Your email address and optional body measurements are not displayed in Community search.

Our app database, file storage, live messaging and email sending are hosted in the European Union (Ireland), which the UK recognises as providing adequate protection for personal data. Some of our providers are based in the United States and may access or process information there, for example for support or security; where they do, they rely on the safeguards in their data processing terms, such as the UK International Data Transfer Addendum. Apple and Squarespace process information under their own privacy terms.

Storage and security

Your gym, workout, training history, barcode and message cache are stored on your device. A cloud backup of app records is stored with Supabase only when the subscriber backup feature is used. Profile and subscription information, Community membership and moderation records are stored in our cloud services. We use access controls and private storage for account data and profile images, and we limit Community message delivery to conversation participants.

Cloud restore replaces local app records on the device. Chat messages cached on a device are not included in the workout cloud backup.

Retention and deletion

We keep account, profile and subscription records while your account is active and as needed for the service. Local workout records and chat caches remain on your device until you delete them, remove the app or its data, or replace them through an app restore. Cloud backups remain until they are replaced or the linked account is deleted. Support correspondence and moderation reports are kept for as long as reasonably needed to respond, investigate safety issues or meet legal obligations.

You can delete your account in the app under Account → Delete Account. This removes your account, profile, profile picture, cloud backup and linked Community memberships. It does not cancel an App Store subscription; cancel that separately in your Apple account. Data held on other participants' devices, including messages they received, cannot be removed by deleting your account.

Your choices and rights

• Edit optional personal details and Community visibility in the app's Account tab.
• Choose whether to use paid Cloud Sync and its Auto Backup option; use Backup to Cloud and Restore from Cloud in Account.
• Use your device settings to manage photo library, camera and notification permissions.
• Delete your account in the app, or email support@inuvera.com for help with access, correction, deletion, restriction, portability or objection requests.
• Manage or cancel a subscription through your Apple App Store account.

Your rights depend on the circumstances and applicable law. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Children and young people

Gym Workout Spinner is a general fitness app. We do not currently ask for age when someone creates an account, and the optional date of birth in a profile is not used to verify age. We therefore cannot tell from registration alone whether an account belongs to a child.

Community profiles are not discoverable by other subscribers unless the account holder turns on Public Profile. If a subscriber uses Community, people in the same conversation can see the messages and images they share. If you are under 18, please take care with what you add to your profile or share in a chat. You can ask a parent, carer or another trusted adult to help you understand this policy and your privacy settings.

A parent or carer who has a concern about a child's information can email support@inuvera.com. Children and young people can contact us directly too. We will review requests to access, correct or delete information, taking account of the child's rights and any need to verify the requester's authority. If we find that information has been handled in a way that does not meet applicable protections for children, we will take appropriate steps to address it.

Changes to this policy

We may update this policy when the app or our data practices change. We will update the date at the top of this page and provide additional notice where required.