Privacy notice
Plain-language summary of what Gym (gym.softcupid.com) stores and why.
What we store
- Account: email, username, display name, password hash (Argon2id — we never see your password), optional avatar and bio.
- Training data: routines, workouts, sets, records, goals and training blocks you create.
- Preferences: units, timezone, onboarding answers (experience, goals, equipment, schedule), sharing, notification and accessibility settings.
- Social: friends, blocks, reports you file, messages you send, challenge participation.
- Security logs: sign-ins, password changes and similar events with IP address, kept up to 12 months.
What we don't ask for
No body measurements, health conditions or medical data are required. Workload and strength numbers are training estimates, not medical advice.
Sharing is opt-in
New accounts share nothing: workouts, records, milestones, challenge activity and leaderboard entries start private. Your profile card (name, avatar, level) is visible to friends. You can change every setting, and apply it to past activity, under Profile → Privacy.
Messages
Only conversation members can read messages. Leaving a challenge chat removes your access to it. Notification previews never include message text.
Your controls
- Export: download all your data as JSON from Profile → Data.
- Delete: request deletion from Profile → Data. Your account is hidden immediately and permanently deleted after 7 days. Signing in during those 7 days cancels the deletion. Messages you sent to others are emptied and shown as "Deleted user".
Storage on your device
The app stores your active workout and unsynced changes in your browser (IndexedDB) so logging works offline. Signing out of a shared device clears it.