Privacy Policy

Home / Privacy Policy

Last updated: October 2026

Privacy Policy

Last updated: October 2026

1. Overview

Gym Journal ("we", "our", "the app") is a personal fitness tracking application. We are committed to protecting your privacy and handling your personal information responsibly and in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information We Collect

We collect the following personal information when you use the app:

  • Account information: your name and email address, used solely for authentication and account identification. If you sign in with Google, Apple, Facebook or Microsoft, we receive your name and email address from that provider.
  • Workout data: exercise logs, sets, reps, weights, durations and session notes that you enter directly into the app.
  • Health & fitness goals: any personal gym goals or notes you choose to record.
  • Messages: the content of any feedback you send us, together with the contact email address you optionally provide with it.
  • App preferences: display settings such as theme and units, stored locally on your device and not transmitted to us.

3. Collection Statement

We collect your personal information for the primary purpose of providing you with a personalised fitness tracking experience. Specifically, we collect this information to:

  • Authenticate your identity and secure your account.
  • Store and display your workout history and progress.
  • Enable you to track goals and fitness metrics over time.
  • Respond to feedback or support requests you submit.

You are not required by law to provide this information. However, without it, the app cannot function as intended. By creating an account and using the app, you consent to the collection and use of your information as described in this policy.

4. How We Store Your Data

Your data is stored securely using the Base44 platform, which hosts data on cloud infrastructure. Data is associated with your account and protected by authentication — only you can access your own records.

All data transmitted between your device and our servers is encrypted in transit using industry-standard TLS (Transport Layer Security / HTTPS). Data is stored in secure, access-controlled cloud infrastructure.

4b. Third-Party Services

The app is built on the Base44 platform (base44.com), which provides authentication, data storage and hosting infrastructure. Base44 processes your data solely to operate the service on our behalf and is bound by its own data processing terms.

Feedback you send through the app is delivered to us by an email delivery provider (Resend) acting as our service provider. It receives only your message and the reply-to address you provide, and is used solely to deliver that email.

If you choose to sign in with Google, Apple, Facebook or Microsoft, that provider authenticates you and shares your name and email address with us. Signing in with email and password does not involve any of these providers.

The app contains no advertising networks, marketing tools, data brokers or cross-app tracking, and no advertising identifiers (such as Apple's IDFA or Google's Advertising ID) are used.

The mobile app is delivered inside a native container supplied by our app platform (Base44). To run and secure the app, that container may transmit limited technical information off your device, including a device or installation identifier together with basic device and app details. This information is used only to operate the app, keep it secure and diagnose faults. It is never used for advertising, profiling or tracking you across other apps or websites, and it is never sold or shared with advertisers or data brokers.

5. Disclosure of Information

We do not sell, trade, rent or otherwise share your personal information with any third parties for marketing, advertising or any commercial purpose. Your data is your own.

Your data may be accessed only in the following strictly limited circumstances:

  • By our hosting and infrastructure provider (Base44) solely as required to operate and maintain the service. Base44 does not use your data for its own purposes.
  • By the email delivery provider that sends your feedback message to us, and by the sign-in provider you choose to authenticate with (see Section 4b).
  • If required by law, court order or a regulatory authority with lawful authority to compel disclosure.

Under no circumstances will your personal health, fitness or account data be disclosed to advertisers, data brokers or any other external party.

6. Tracking & Advertising

We do not track you. Gym Journal does not use advertising identifiers (such as Apple's IDFA or Google's Advertising ID), does not engage in cross-app tracking, and does not build advertising profiles based on your activity. Your data is never used for targeted advertising.

We do not share any data with data brokers or advertising platforms. There are no in-app advertisements.

7. Data Linked to Your Identity

The following data types are collected and linked to your account identity (your email address):

  • Contact info: name and email address (for authentication).
  • Health & Fitness: workout logs, exercise data, sets, reps, weights, durations, session notes and the gym goals you record.
  • User Content: the workout days and exercises you create and edit.
  • Messages: feedback you send us and any contact email you provide with it.

Device or other IDs: the app's mobile container may transmit a device or installation identifier to operate and secure the app. It is not used to identify you personally, to build advertising profiles, or to track you across other apps or websites.

This data is linked to your identity solely to provide you with a personalised experience and is never used for advertising or sold to any party.

8. Your Rights

You have the right to:

  • Access the personal information we hold about you (via the Export My Data feature in Settings).
  • Request correction of inaccurate data (by editing your records directly in the app, or by contacting us).
  • Request deletion of your account and all associated data at any time — this can be done via Delete Account in Settings, or via Delete All Data in Settings to remove your data while keeping your account. You can also contact us if you no longer have access to the app.
  • Withdraw consent to data collection at any time by deleting your account.

Deletion requests submitted via the app are processed immediately and are irreversible. If you need to request deletion without app access, please contact us using the details in Section 12.

9. Data Retention & Deletion

We retain your data for as long as your account is active. When you choose to delete your account (via the Delete Account option in Settings), all of your personal information is permanently and irreversibly deleted — including your account details, workout logs, goals, session notes, any feedback you have sent, and any other data you have entered into the app. This deletion cannot be undone.

We do not retain any copies of your data after account deletion.

10. Children's Privacy

Gym Journal is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the "Last updated" date at the top of this document will be revised. Continued use of the app after changes are posted constitutes acceptance of the updated policy. For significant changes, we will make reasonable efforts to notify you.

12. Contact

If you have any questions or concerns about this policy, wish to access or correct your data, or wish to request deletion of your account without app access, please contact us via the Send Feedback option in Settings.