GYMGOTCHI
Español
Privacy policy
Last updated: October 29, 2026
This policy explains what data the Gymgotchi app (Android) uses, why, and who it is shared with. Gymgotchi is a virtual pet that gets fed when you take a photo of your workout at the gym.
- We store your account (name and email) and your game progress.
- Gym photos are not stored: they are sent to Google Gemini only to check that they show a gym.
- No ads, no analytics tools, and we don't sell your data.
- You can ask us to delete your account and all your data at any time.
1. Data we collect
| Data | What it's used for |
|---|---|
| Name and email (when you sign up, or those of your Google account if you sign in with Google) | Creating your account, signing in and showing your name in the app. |
| Password | Signing in. It is stored hashed by our authentication provider; we never see it. |
| Game progress: pet name and type, level, experience, streak, rest days, badges and mini-game XP | Making the game work and saving your progress. |
| Workout history: date and time of each verified photo and the text describing the verification result | Calculating streaks and badges and showing your calendar. |
| Gym photos | Verifying that you are working out. See section 2. |
| Acceptance of this policy: date and time, and the version you accepted | Keeping a record of your consent and asking you again if the policy changes. |
| Device time zone and language | Counting your streak days in your local time and replying in your language. |
| Technical data: IP address, date and time of each request and device or browser type | Server logs for security and troubleshooting. They are rotated and deleted automatically. |
We don't access your location, contacts, microphone or photo gallery: the app only uses the camera when you open it to take the photo.
2. Photos and AI verification
When you take a photo to feed your pet, the image is sent to our server and from there to Google's Gemini API, which replies whether the photo shows a gym or training equipment. We don't store the photo: we only keep the result (yes or no) and the short explanation text.
Google processes the image under the Gemini API Additional Terms of Service. Under the service plan we use, Google may use the submitted content to improve its products, and people working for Google may review it. We therefore recommend that your photo shows the place or the equipment and does not include people, documents or other personal information.
3. Data stored on your device
- Your session (access tokens), stored in the system's secure storage.
- The language you picked for the app.
- Locally scheduled reminders that tell you when your pet is hungry. We don't use server-sent push notifications.
Logging out removes the session data from the device.
4. Who we share data with
We don't sell or rent your data and we don't use it for advertising. We only share it with the providers we need to run the app:
| Provider | What it does |
|---|---|
| Supabase | User accounts, sign-in and the game database. |
| Photo verification (Gemini API) and Google sign-in, if you use it. | |
| Contabo | Server that runs our backend (European Union). |
These providers may store or process data on servers outside your country (for example in the United States, Canada or the European Union). We may also disclose data if required by law or a valid court order.
5. How long we keep data
- Your account, progress and history: while your account is active.
- Server technical logs: for a limited time; they are rotated and deleted automatically as new ones are written.
- Photos: not stored (see section 2).
6. Deleting your account and data
You can delete your account and all associated data (profile, pet, workout history and badges) from the app, in Settings → Delete account: it is deleted right away. If you no longer have the app, you can request it by email following the steps on this page; in that case we do it within 30 days and confirm by email.
7. Your rights
You can request access to, correction of, or deletion of your data by writing to contacto@gymgotchi.com.ar. If you live in Argentina, the Agencia de Acceso a la Información Pública is the supervisory authority under Personal Data Protection Law 25,326 and handles complaints about non-compliance with that law. If you live elsewhere, you also have the rights granted by your local law.
8. Security
All communication between the app and our server is encrypted (HTTPS). Database access is restricted and passwords are stored hashed. No system is 100% secure, but we take reasonable measures to protect your data.
9. Children
Gymgotchi is not directed at children under 13 and we don't knowingly collect data from children under that age. If you believe a child has given us their data, contact us and we will delete it.
10. Changes to this policy
If we change this policy, we update the date above. If the change is significant, we also let you know in the app.