Legal

Privacy Policy

Effective October 20, 2026

This policy explains how GYSS ("GYSS", "we", "us") handles information when you use the GYSS mobile app and gysstraining.com (together, the "Service").

Information you give us

• Account details: your email address, first and last name, username, profile photo, sex, and birthday. Sex and age are used to calculate your calorie and macro targets.
• Sign in with Apple or Google: if you use these, we receive your name, email address (or Apple's private relay address), and profile photo from that provider. We never see your Apple or Google password.
• Training data: workouts, sets, programs and templates, exercise maxes, personal records, runs, and body weight entries.
• Nutrition data: food you log, calorie and macro goals, saved recipes, and meal photos you choose to add.
• Coaching with MILO: messages and photos you send to MILO, and goals and notes MILO saves to personalize your coaching.
• Social content: posts, photos, videos, stories, comments, likes, follows, and messages you send to other users.
• Support requests: anything you send us by email or through in-app requests, such as asking us to add an exercise.
• Reports and blocks: when you report something, we save your report, a copy of the reported content, and who it's about. We also keep a list of the accounts you block.

Information from your device

• Apple Health and Apple Watch: with your permission, GYSS reads heart rate and calories burned during workouts, and can save workout data back to Apple Health. Average and max heart rate and calories may be stored with the workout or run they belong to.
• Location: with your permission, GYSS uses precise location while you record a run, including while your screen is locked, to map your route and calculate distance and pace. Your route is saved with the run. Location may also be used to show nearby grocery stores. We don't track your location when you aren't using these features.
• Camera, microphone, and photos: used only when you choose to take or pick a photo or video, scan a food barcode, or record a video for the feed.
• Notifications: if you allow push notifications, we store a device token so we can notify you about messages, follows, and activity. You can change which notifications you get in Settings.
• Basic technical data: our hosting providers keep standard logs (such as IP address, device type, and timestamps) to keep the Service secure and running.

GYSS does not include advertising SDKs or third-party analytics trackers.

How we use information

• To create your account, sign you in, and keep it secure.
• To log and display your training, runs, nutrition, and progress.
• To calculate your calorie and macro targets and power MILO's coaching.
• To run the social features you choose to use and send the notifications you allow.
• To answer support requests and improve the app.
• To prevent abuse, enforce our Terms and Community Guidelines, and meet legal obligations.

Safety and moderation

To keep GYSS safe, photos and text you share publicly or with other users (posts, stories, comments, messages, and profile details) are checked by an automated moderation service when they're posted, to catch things like nudity, graphic violence, or threats. Content it flags may be hidden and sent to our team for review.

When someone reports a post, comment, story, profile, or message, our team can see the reported content and the account it came from so we can review it. Reporting a message shares that message with us. The person you report isn't told who reported them. We keep a record of reports and the actions we take, such as removals, restrictions, and bans.

Apple Health data

Data from Apple Health is used only to provide fitness features inside GYSS. We do not sell it, use it for advertising or marketing, or share it with third parties for those purposes. We do not store it in iCloud. You can turn off GYSS's Health access at any time in the iPhone Settings app under Health > Data Access & Devices.

Who we share information with

We don't sell or rent your personal information. We share it only with service providers that help us run GYSS, under agreements that limit how they can use it:

• Supabase: database, file storage, and sign-in.
• Anthropic: processes MILO conversations and meal photos to generate responses. It doesn't use this data to train its models.
• OpenAI: checks shared photos and text for content that breaks our Community Guidelines. It doesn't use this data to train its models.
• Resend: delivers sign-in codes and service emails.
• Apple: Sign in with Apple, Apple Health, and push notifications.
• Google: Sign in with Google.
• Open Food Facts: receives the barcode or food name you look up.
• Esri and OpenStreetMap services: provide map tiles and nearby store lookups for the area you view.
• Cloudflare: hosts this website.

If you tap a link to a retailer like Instacart, Walmart, Target, or Kroger, you leave GYSS and that company's privacy policy applies.

We may also disclose information if required by law, to protect the safety of our users or the public, or as part of a merger or sale of the business. If that happens, this policy will continue to apply to your information.

What other users can see

Your name, username, and profile photo are visible to other GYSS users so they can find and follow you. Posts, stories, and shared workouts, runs, and meals are visible according to the visibility you choose in Privacy Settings. Messages are visible to the people in the conversation. Your email address, birthday, sex, food log, and MILO conversations are never shown to other users. If you block someone, they can no longer see your posts or contact you.

How long we keep information

We keep your information while your account is active. When you delete your account in the app, your profile and the content tied to it are deleted right away, and remaining copies are cleared within 30 days, except where we need to keep limited records to comply with the law, resolve disputes, or prevent abuse. Backups are overwritten on a rolling schedule.

Your choices and rights

• Access and correct: edit your profile and data at any time in the app.
• Delete: go to Settings > Delete account in the app to permanently delete your account and data. See how to delete your account.
• Permissions: turn Health, location, camera, photos, and notifications on or off in your iPhone settings.
• Copy of your data: email us to request a copy of your data.

Depending on where you live (for example California, or the EU and UK), you may have additional rights, such as to access, port, restrict, or object to processing of your data. Contact us to use any of these rights. We won't discriminate against you for using them.

Security

Data is encrypted in transit (HTTPS/TLS) and access to your data is restricted by account-level security rules. Sign-in uses one-time email codes or Apple and Google, so GYSS never stores a password for you. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects you as required by law.

Children

GYSS is not intended for anyone under 13, and you must be at least 13 to create an account. If you believe a child under 13 has given us information, contact us and we'll delete it.

International users

GYSS is operated from the United States, and your information may be processed in the United States and other countries where our providers operate.

Changes to this policy

If we make material changes, we'll update the date above and let you know in the app or by email before they take effect.

Contact

Questions or requests: brogan@gyssfitness.com