GymRx — Privacy Policy

Last updated: March 8, 2026

Introduction

Cascade Software Solutions LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the GymRx application ("App").

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

When you use GymRx, you may provide us with:

• Name/Nickname (optional) - for personalization
• Body weight (optional) - for progress tracking, strength calculations
• Workout data (required to use features) - core app functionality
• Fitness goals (optional) - for personalized recommendations
• Unit preferences (required) - for display preferences (lbs/kg)

Workout Data

The core data you create in the App includes:

• Workout routines and templates
• Exercise logs (sets, reps, weights)
• Personal records
• Workout history and timestamps
• Rest timer preferences
• Notes and comments on workouts

Automatically Collected Information

We may automatically collect:

• Device Information: Device type, operating system version, unique device identifiers
• App Usage Data: Features used, session duration, crash reports
• Performance Data: App performance metrics to improve functionality

Apple HealthKit Integration

GymRx integrates with Apple HealthKit to read and write health and fitness data on your device. This integration is optional and requires your explicit permission. When enabled:

• Data we may write to HealthKit: Workout data (exercise type, duration, calories burned), and body weight
• Data we may read from HealthKit: Body weight, active energy burned, resting heart rate, and heart rate data (for workout summaries)

Important HealthKit commitments:

• HealthKit data is stored only on your device and in your iCloud HealthKit backup (managed by Apple)
• We do not transmit HealthKit data to our servers or any third party
• We do not sell, share, or use HealthKit data for advertising or marketing purposes
• We do not use HealthKit data to build user profiles for purposes unrelated to health and fitness
• HealthKit access can be revoked at any time in device Settings → Health → Data Access & Devices → GymRx

Apple Watch (watchOS) Companion App

GymRx offers a watchOS companion app that provides workout tracking from your Apple Watch. The watch app:

• Syncs data with the iPhone app over a local connection (Bluetooth/WiFi) — data is not routed through our servers
• May read and write HealthKit data directly on the watch (subject to the same HealthKit permissions and commitments described above)
• May collect heart rate data during workouts via Apple Watch sensors (stored in HealthKit only)
• Stores minimal data locally on the watch for display purposes
• Requires the iPhone app to be installed for full functionality

Information We Do NOT Collect

We do NOT collect:

• Location data
• Contacts or address book
• Photos or camera data (unless you explicitly upload)
• Financial or payment information (for free version)
• Social media account information

How We Use Your Information

We use your information to:

• Provide and maintain the App
• Track your workouts and progress
• Calculate statistics and analytics
• Improve the App's functionality
• Send important updates about the App
• Respond to your support requests
• Comply with legal obligations

We do NOT use your information to:

• Sell to third parties
• Target advertising
• Build marketing profiles
• Share with social networks

Data Storage and Security

Local Storage

Your workout data is stored locally on your device. We use SQLite database for structured data (workouts, exercises, settings) and secure device storage provided by your operating system.

Data Security Measures

We implement appropriate security measures including:

• Encryption of sensitive data at rest
• Secure coding practices
• Regular security assessments
• Minimal data collection principles

No Cloud Storage (Default)

By default, your data remains on your device and is not transmitted to our servers. This means:

• Maximum privacy - your data stays with you
• Works offline
• Data is lost if you delete the app or lose your device
• Data does not sync between devices

Optional Cloud Features

If we offer optional cloud backup or sync features in the future, we will:

• Clearly disclose this before enabling
• Require your explicit consent
• Use industry-standard encryption
• Allow you to delete cloud data at any time

AI Coach and Cloud Processing

GymRx offers an optional AI Coach feature (available to premium subscribers) that uses cloud-based artificial intelligence to provide training insights and coaching. When you use the AI Coach, the following data may be sent to OpenAI (our AI processing provider) to generate responses:

• Training context: workout frequency, volume trends, and recent workout summaries (exercise names, sets, reps, weights)
• Personal records and streak information
• Profile information you have provided (name, goals, body weight, training experience)
• Your chat messages and conversation history within the AI Coach

Voice Input

The AI Coach includes an optional voice input feature. When you tap the microphone button, audio is recorded on your device, sent to OpenAI's Whisper speech-to-text service for transcription, and the resulting text is used as your chat message. The audio recording is deleted from your device immediately after transcription. We do not store, retain, or use your voice recordings for any purpose other than converting them to text. Audio data sent to OpenAI for transcription is subject to OpenAI's data usage policies.

This data is sent only when you actively use the AI Coach feature. No data is transmitted without your action. OpenAI processes this data solely to generate coaching responses and transcriptions, and is subject to OpenAI's own data usage policies. We do not control how OpenAI retains or processes data after transmission.

AI Coach responses are generated by artificial intelligence and are for informational purposes only. They do not constitute medical, nutritional, or professional training advice.

Data Sharing

We Do Not Sell Your Data

We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.

Limited Sharing

We may share your information only in these circumstances:

• Analytics providers - App improvement (anonymized usage data)
• Crash reporting services - Bug fixes (crash logs, no personal data)
• OpenAI - AI Coach processing (training context, chat messages, and voice transcription; premium feature only)
• Legal authorities - Legal compliance (as required by law)
• Business transfers - Merger/acquisition (all data, with notice)

Third-Party Integrations

GymRx integrates with Apple HealthKit as described in the "Apple HealthKit Integration" section above. HealthKit data is never transmitted to our servers or shared with third parties. Your use of HealthKit is also subject to Apple's privacy policies.

Your Rights and Choices

Your Rights

Depending on your location, you may have the right to:

• Access - Request a copy of your data
• Correction - Correct inaccurate data
• Deletion - Delete your data
• Portability - Export your data in a readable format
• Objection - Object to certain processing
• Restriction - Limit how we use your data
• Withdraw Consent - Withdraw consent at any time

How to Exercise Your Rights

• Access/Export: Use the "Export Data" feature in Settings
• Deletion: Delete the app (removes all local data)
• Other requests: Contact us at garrett@cascademobile.dev

We will respond to requests within 30 days.

Data Retention

• Local data: Stored until you delete it or uninstall the App
• Analytics data: Retained for up to 24 months in anonymized form
• AI Coach data (OpenAI): Data sent to OpenAI (including voice audio for transcription) is subject to OpenAI's data retention policies. Conversation history is stored locally on your device. Voice recordings are deleted from your device immediately after transcription.
• Support correspondence: Retained for up to 3 years

Children's Privacy

GymRx is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at garrett@cascademobile.dev. If we discover we have collected personal information from a child under 13, we will delete it immediately.

For users between 13 and 18, parental consent is recommended.

International Data Transfers

If you use the App from outside the United States, your information may be transferred to and processed in the United States. By using the App, you consent to this transfer.

We ensure appropriate safeguards are in place for any international transfers, including:

• Standard contractual clauses
• Privacy Shield certification (where applicable)
• Adequacy decisions

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we don't sell your data)
• Right to Non-Discrimination: We won't discriminate against you for exercising your rights

To exercise these rights, contact us at garrett@cascademobile.dev.

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• All rights listed in "Your Rights and Choices" above
• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time

Legal Bases for Processing:

• Contract performance (providing the App's features)
• Legitimate interests (improving the App, security)
• Legal obligations (complying with laws)
• Consent (optional features)

Data Controller: Cascade Software Solutions LLC, 5441 S Macadam Ave, Ste N, Portland, OR 97239, USA

Cookies and Tracking

The App does not use cookies. We may use similar technologies for:

• Remembering your preferences
• Analytics (anonymized)
• Crash reporting

You can limit tracking through your device settings:

• iOS: Settings → Privacy → Tracking
• Android: Settings → Privacy → Ads

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the App
• Updating the "Last Updated" date
• Sending a notification for material changes

Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Cascade Software Solutions LLC
Website: https://www.cascademobile.dev/
Email: garrett@cascademobile.dev
Address: 5441 S Macadam Ave, Ste N, Portland, OR 97239, USA