GymMax – Privacy Policy

Effective July 17, 2025

1. Scope of This Policy

This Privacy Policy explains how GymMax (“we,” “our,” or “us”) collects, uses, discloses, and protects information when you install or use the GymMax mobile application or any related services (collectively, the “Service”).

2. Information We Collect

Category Examples Purpose
Account Data Display name, username, age confirmation (16+), hashed authentication credentials Create and maintain your account
Image Data Four (4) physique photos you upload, plus metadata (e.g., time / device) Generate AI physique score and workout plan
Plan & Progress AI‑generated scores, workout‑plan details, usage history Deliver weekly re‑scans, track progress
Device & Usage Device ID, OS version, app version, crash logs, interaction events App security, analytics, troubleshooting
Subscription & Payment Plan type, purchase timestamp, renewal status (payment is processed by the App Store / Google Play; we do not receive card numbers) Verify eligibility, provide features, handle billing issues

3. How We Use Your Information

  • Core Functionality – Analyze images, generate scores and workout plans, and deliver one (1) new AI scan per subscription week.
  • Account Services – Authenticate you, remember preferences, and provide customer support.
  • Analytics & Improvement – Monitor performance, fix bugs, and refine our AI models (data used in aggregate or de‑identified form where feasible).
  • Legal & Security – Detect fraud, enforce Terms of Service, and comply with applicable laws.

4. Retention & Deletion

Data Type Retention Period
Physique photos Deleted or fully anonymized within 30 days of the associated AI scan, unless you trigger an earlier deletion in‑app.
AI scores & workout plans Retained while your account remains active so you can see historical progress.
Account & subscription records Retained for as long as necessary to administer the Service and meet legal or accounting obligations.

You may delete your account (and associated data) at any time within the app settings. Deletion requests are processed within 30 days, subject to legal holds.

5. Sharing & Disclosure

We do not sell or rent your personal data. We share only:

  • Service Providers – Secure cloud‑storage and analytics partners who process data strictly on our behalf.
  • App Store / Google Play – To verify purchases and manage subscriptions.
  • Legal Requirements – When compelled by court order or to protect rights, safety, or our users.

All third parties are bound by confidentiality and data‑processing agreements.

6. Security

We implement industry-standard safeguards, including:

  • Encryption in transit and at rest for image files and personal data.
  • Strict access controls – data accessible only to personnel on a need-to-know basis.
  • Routine security audits and vulnerability testing.

No system is 100% secure; you use the Service at your own risk.

7. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your data (“right to be forgotten”).
  • Restrict or object to certain processing.

Request these actions in‑app or via the contact section below. We may need to verify your identity first.

8. Children’s Privacy

GymMax is not directed to children under 16. We do not knowingly collect personal data from anyone under that age. If we learn we have done so, we will delete it promptly.

9. International Data Transfers

If you access the Service outside the United States, your information may be transferred to, stored, and processed in the U.S. By using GymMax, you consent to this transfer in accordance with this Policy and applicable law.

10. Changes to This Policy

We may revise this Privacy Policy periodically. Material changes will be announced in‑app or by other reasonable means. Your continued use of the Service after changes become effective constitutes acceptance.

11. Contact Us

Questions or concerns about privacy? Call 832‑510‑5620.