← Back to GymBot
Privacy Policy
Last updated: March 28, 2026
GymBot ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our AI fitness coaching service delivered via WhatsApp.
1. Who We Are
The service is provided by an individual entrepreneur (trabalhador independente) based in Portugal.
For data protection purposes, the data controller is the individual operating GymBot under Portuguese law.
2. Information We Collect
When you use GymBot, we collect the following information:
- Profile data: Name, age, height, weight, gender, and activity level that you provide during onboarding.
- WhatsApp identifier: Your WhatsApp phone number (used to deliver the service).
- Usage data: Workout completions, feedback ratings, meal plan interactions, and app usage patterns.
- Health data: BMR calculations, calorie targets, dietary preferences, and allergies you disclose.
- Payment data: Billing information processed securely through Stripe. We do not store your card details.
3. How We Use Your Information
- To generate and deliver personalized workout programs and meal plans.
- To adapt programs based on your feedback and progress.
- To send service notifications via WhatsApp (program updates, subscription reminders).
- To process payments and manage your subscription.
- To improve our AI models and service quality.
4. Data Storage and Security
Your data is stored on secured servers located in the European Union. We implement industry-standard security measures including encryption in transit (HTTPS/TLS) and at rest. Access to personal data is restricted to authorized personnel only.
We retain your data for as long as your account is active, plus 30 days after deletion. Health-related data can be deleted on request at any time.
5. Data Sharing
We do not sell your personal data. We share data only with:
- Stripe: For payment processing (subject to Stripe's Privacy Policy).
- Meta (WhatsApp): Messages are delivered via WhatsApp Business API. Meta processes messages according to their privacy policy.
- OpenAI: We may use AI models for content generation. Prompts do not include your personal identifiers.
6. Your Rights (GDPR) (GDPR)
As a user in the European Union, you have the right to:
- Access: Request a copy of all data we hold about you.
- Rectification: Correct inaccurate personal data.
- Erasure: Request deletion of your personal data ("right to be forgotten").
- Restriction: Request that we limit processing of your data.
- Portability: Receive your data in a machine-readable format.
- Object: Object to processing based on legitimate interests.
To exercise your rights, contact us via WhatsApp or email below.
7. Cookies
Our website (gymbotapp.com) does not use tracking cookies. We may use essential cookies for basic functionality only.
8. Children's Privacy
GymBot is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via WhatsApp. Continued use of GymBot after changes constitutes acceptance of the updated policy.
10. Contact Us
For privacy-related requests or questions, contact us: