GymFork Consumer Health Data Privacy Policy
Effective date: September 26, 2026
Washington State’s My Health My Data Act (RCW 19.373) gives you rights over “consumer health data”: information about your body and health. Nevada’s law (SB 370) is similar, so this policy applies to people in Nevada too. It covers the GymFork app and our website, gymfork.com, made by Flint Social Marketing, operating as Flint AI Systems, a sole proprietorship in Nova Scotia, Canada (“we”, “us”). Our main Privacy Policy has the full details.
We don’t sell consumer health data. We never use it for ads, and we never give it to data brokers or ad networks.
1. What we collect and why
We treat all of this as consumer health data.
| What we collect | Why |
|---|---|
| Sign-up quiz answers: your age range (and, only if you’re 16 or 17, the month and year you were born), sex, height, weight, goal, how active your days are, how you like to train and eat, recent lifts, and your sport or race goal if you have one | To work out your calorie and macro targets, build your workout week and meal ideas, and check you’re old enough, and, if you’re 16 or 17, to set targets for a growing body |
| Health answers in the quiz, only if you give them: anything you want the plan to go easy on (like knees or back), injuries, whether something hurts right now, running pain, and how much you sleep and how stressful life is | To give you easier versions of exercises, leave out moves that could hurt, and set how much you train and recover |
| Your targets: the calorie and macro targets and starter routine a formula works out from your quiz answers, and the new targets the weekly check-in suggests | To show you what to aim for. Check-in suggestions are estimates worked out on your phone, and they change nothing unless you tap to accept. You can change your targets any time. |
| Food log: foods, barcodes, recent foods, portion sizes, meals, custom foods, quick adds and the meals you save in My meals | To show what you ate against your targets, and to let you log the same foods again quickly |
| Workout log: exercises, sets, reps, weight lifted, routines, rest times, bodyweight entries and progress | To track your training and show your progress |
| Water and body measurements: the water you log, and your waist, chest, arms, thighs, hips and neck | To track what you drink and how your body changes |
| Extra tracking, only if you turn it on: sleep you log, body fat % (adults only), a quick check before a workout (sleep, soreness and energy, 1 to 5), reps left in a set, and supplements you tick off (adults only) | To show how well you recover, suggest a lighter day, and progress your training |
| WHOOP data, only if you connect WHOOP: recovery score, heart rate variability (HRV), resting heart rate, sleep, strain and WHOOP workouts | To show your recovery and sleep next to your training. It passes through our server to your phone as you look at it, and neither keeps it. |
| Progress photos you take or pick | To show your progress. They stay on your phone only: we never upload, sync or back them up. |
| Apple Health data, only the types you allow. Read: body weight, workouts, active energy, steps, and, only for the extras you turn on, sleep, resting heart rate, HRV and body fat %. Written: body weight, workouts, calories, protein, carbs and fat you logged. | To run the features you turned on. The app reads it live on your phone and never copies it to our server. |
We ask for your OK first: when you set up the app, on Apple’s own screen for each type of Apple Health data, and on WHOOP’s own screen if you connect WHOOP. We don’t collect your location. The camera is only for barcodes and progress photos: a barcode’s camera image is read on your phone and never saved or sent anywhere, and progress photos stay on your phone.
2. Where it comes from
- You: what you type, pick, scan or take a photo of in the app.
- Apple Health on your phone, only the types you allow.
- WHOOP, only if you connect your WHOOP account.
- Our formulas, which work out your targets from your quiz answers and, at the weekly check-in, suggest new ones from what you logged and your weight trend. The check-in maths runs on your phone.
- Food databases (USDA FoodData Central, Health Canada’s Canadian Nutrient File, Open Food Facts), which supply calories and macros for the foods you log.
3. Who we share it with
Only the service providers below, which work for us and may only use it to do that work. We don’t share it with any affiliate (a company related to ours).
| Who | What they get | When |
|---|---|---|
| Supabase, which runs our server in Canada | A backup of your quiz answers, food log, workout log, water, body measurements and extra tracking (never your progress photos) | While you have an account |
| Supabase | Your WHOOP data, passing through on its way to your phone. It keeps none of it. | Each time you open a WHOOP screen, if you connected WHOOP |
| Supabase | Branded food searches and barcode numbers, to look them up. It keeps none of these. | When you search for a branded food or scan a barcode |
| Open Food Facts, a food database | A barcode number, with nothing that identifies you | When a barcode isn’t in our own copy of their database |
| Apple Health, on your phone | The meals, workouts and body weights you saved | Only if you turn on Apple Health |
The Apple Health data the app reads never goes to us, RevenueCat or anyone else. WHOOP data only passes through our server to you, and goes to no one else.
We may also share data if the law makes us, like a valid court order, or to protect someone from serious harm. If GymFork moves to a new company we set up, or is sold or merged, your data would move with it, and we’ll tell you first.
4. Your rights and how to use them
- Confirm and see. Ask whether we collect or share your consumer health data, and see it. Profile > Account > Export my data downloads it. If you ask, we’ll list every company we shared it with and how to contact them.
- Delete. Profile > Account > Delete account. Our server deletes everything it keeps about you right away, backup copies are gone within 90 days, and the app deletes your data from your phone. Entries saved to Apple Health stay there until you delete them in the Health app.
- Take back your OK. Turn off Apple Health in the Health app or under Profile > Apple Health, disconnect WHOOP in Profile > Extra tracking > WHOOP (that stops our access and deletes our key), and turn off camera access in your iPhone’s Settings app, under Privacy & Security > Camera. To stop us storing your logs at all, delete your account.
- Appeal. If we turn down a request, reply with the word “appeal” and we’ll look again. We’ll tell you our decision and why, in writing, within 45 days. If we still say no, you can complain to the Washington State Attorney General at atg.wa.gov or the Nevada Attorney General at ag.nv.gov.
For anything else, email privacy@gymfork.com from the email address you signed up with, or tell us your account ID (in the app under Profile > Account). We may ask a question to check it’s really you. We answer within 30 days, it’s free, and we will never treat you worse for using these rights.
5. Changes and contact
If we change this policy, we’ll update the date at the top. We will never start using your consumer health data in a new way without asking you first.
- Privacy officer: Kade Lavoie
- Business: Flint Social Marketing, operating as Flint AI Systems, a sole proprietorship in Nova Scotia, Canada
- Email: privacy@gymfork.com