Privacy Policy
Last updated: 03/04/2026
This Privacy Policy explains how Zentori Ltd (“we”, “us”, “our”) collects, uses, and protects your information when you use the GymBerry mobile application (“the App”). By creating an account or using the App, you agree to the practices described in this Policy.
We are committed to protecting your privacy and complying with the UK GDPR, Data Protection Act 2018, and other applicable laws.
1. Who We Are
Zentori Ltd United Kingdom Contact: support@gymberry.co.uk
We are the data controller responsible for your personal information.
2. Information We Collect
We collect the following categories of data:
2.1 Information You Provide
Email address (required for account creation)
Name (optional)
Workout notes (user‑generated content)
Workout data (exercise logs, sets, reps, weights, patterns)
Future updates may introduce optional fields such as gender.
2.2 Automatically Collected Information
Through analytics and app‑performance tools, we may collect:
Device information (model, OS version)
App usage data
Crash logs
Interaction patterns
General analytics
This helps us improve the App and diagnose issues.
2.3 Information from Third‑Party Services
GymBerry integrates with:
Supabase (database, authentication)
OpenAI (AI‑generated coaching and summaries)
Vercel (hosting)
YouTube API (exercise‑related content)
RevenueCat (subscription status verification)
Google Analytics / related services (usage analytics)
These services may process data according to their own privacy policies.
We do not collect or sync data from Apple Health, Google Fit, Fitbit, or other fitness platforms.
3. How We Use Your Information
We use your information to:
Create and manage your account
Provide personalised exercise recommendations
Generate AI‑based workout summaries and insights
Track and display your workout history
Improve app performance and user experience
Process subscription status (via RevenueCat)
Communicate with you about updates or support
Ensure security and prevent misuse
We do not sell your personal data.
4. AI‑Generated Content
GymBerry uses OpenAI to generate:
Workout summaries
Improvement suggestions
Exercise information
General fitness insights
Your workout data may be sent to OpenAI only for the purpose of generating responses. We do not allow OpenAI to use your data to train their models.
5. Legal Basis for Processing (UK GDPR)
We process your data under the following legal bases:
Contract — to provide the App and its features
Legitimate interests — analytics, app improvement, fraud prevention
Consent — where required (e.g., optional fields or marketing)
Legal obligation — where necessary to comply with the law
6. How We Share Your Information
We may share your data with:
Supabase (secure storage and authentication)
OpenAI (AI‑generated responses)
Vercel (backend hosting)
RevenueCat (subscription verification)
Google services (analytics)
YouTube API (content display)
We do not share your data with advertisers or sell your information.
7. International Data Transfers
Some third‑party services may process data outside the UK. When this occurs, we ensure appropriate safeguards are in place, such as:
Standard Contractual Clauses (SCCs)
Adequacy decisions
Equivalent legal protections
8. Data Retention
We retain your information only as long as necessary to:
Provide the App
Comply with legal obligations
Resolve disputes
Enforce agreements
If you delete your account, your personal data will be removed or anonymised within a reasonable timeframe.
9. Your Rights (UK GDPR)
You have the right to:
Access your data
Correct inaccurate information
Delete your data (“right to be forgotten”)
Restrict processing
Object to processing
Request data portability
Withdraw consent (where applicable)
To exercise your rights, contact: support@GymBerryfitness.co.uk
10. Security
We take reasonable technical and organisational measures to protect your data, including:
Encrypted storage (via Supabase)
Secure authentication
Access controls
Regular monitoring
However, no system is completely secure, and we cannot guarantee absolute protection.
11. Children’s Privacy
GymBerry is not intended for children under 13. We do not knowingly collect data from children under this age.
If you believe a child has provided personal information, contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy to reflect:
New features
Legal requirements
Changes in data practices
We will notify users where required by law.
13. Contact Us
If you have questions about this Privacy Policy or your data:
Email: support@gymberry.co.uk Company: Zentori Ltd