Privacy Policy

1. Who we are and what this covers

Everest Publishing Group LLC, doing business as GOGYM (GOGYM, we, us), operates the GOGYM app and gogymproject.app. This policy covers personal information processed through our app, website, support, social features, and related services. It applies to features you use; describing a feature here does not mean it is available on every device or in every release.

For support, privacy requests, or account-deletion assistance, email contact@gogymproject.com. For legal and privacy escalations, email admin@everestpublishinggroup.com.

GOGYM is intended for people aged 13 and older. Additional protections for younger users are described below.

2. Information we process

Account and profile: identifiers, username, name, email address, phone number where used for sign-in, date of birth, language, profile photo, biography, and location or gym details you provide. A connected sign-in provider supplies the account information needed to authenticate you. We do not receive your social provider's password.

Gym activity: saved training locations and their coordinates, gym timezones, attendance events and timestamps, verification and session state, plans, corrections, selected modes, challenge participation and results, streaks, GOins records, and badges. These records support your history and in-app progress analysis.

Social content: Gym Buddy requests and permissions, follows or other connections, profile visibility choices, shared activity, Locker Notes, chat messages, reactions, and reports or blocks. We also process support communications and information you choose to include in them.

Purchases: store and transaction identifiers, product or plan, purchase and renewal status, trial eligibility, refunds, and membership entitlements. App stores and payment providers handle payment credentials. GOGYM does not receive your full payment-card number for app-store purchases. A separate store checkout may request contact, delivery, and order details needed to fulfill products.

Technical information: IP addresses and request logs, app and operating-system versions, device or session identifiers, notification tokens, permissions and relevant device-health state, and error or security information. We use these to operate, troubleshoot, secure, and deliver the service—not to build a record of your browsing across unrelated apps.

3. Location and automatic gym verification

With your device permission, GOGYM uses precise location to find training places, help you select a gym, and verify arrival, presence, and departure at a saved gym. If you enable background location, verification can operate when the app is closed or not actively in use. Depending on the platform, this involves location samples, geofence events, timestamps, accuracy information, and session state.

Location samples may be processed on your device and sent to our service to verify attendance. We retain saved gym coordinates and attendance or verification records; we do not persist sampled travel routes as a movement history. Location verification is not advertising tracking. We do not sell precise location or provide it to advertising networks for targeting.

Gym search and maps providers, such as Google Maps Platform, may process search terms, map requests, coordinates, and technical information needed to return places or map results. Their own policies also apply to their processing.

You can change location permissions in your device settings and review location status in GOGYM's Privacy & devices settings. Turning permissions off stops the permitted location access but may prevent automatic attendance verification. It does not erase attendance records already created. We do not expose your live coordinates or travel routes to Gym Buddies.

4. Why we use information

We use information to create and secure your account; verify gym visits; maintain your calendar and history; calculate progress and challenge results; award virtual rewards; provide the social features you choose; deliver notifications; manage membership access and orders; respond to requests; and investigate abuse or technical problems.

Where data-protection law requires a legal basis, we rely on performance of our agreement for core services, consent where required for optional permissions or marketing, legitimate interests for proportionate security and service administration, and legal obligations where applicable. Device permission does not replace any separate consent required by law.

You may withdraw consent for optional processing without changing the lawfulness of processing before withdrawal. Some functionality cannot work without the information necessary to provide it.

5. Gym Buddies, GoCrew, and shared content

Social features involve sharing information with other people. Your profile visibility and relationship permissions determine which profile details and activity are visible. Accepting a Gym Buddy relationship can allow that buddy to see the activity and accountability information described by the feature. Review the permission explanation before accepting.

Private account details such as email, phone number, date of birth, city, and saved gym location are not made public merely because you use GoCrew. Information you put in a public biography, photo, message, or shared content may nevertheless reveal those details, so avoid posting information you want to keep private.

Recipients can read messages and notes you send and may capture or copy them. Expiration, deletion, or revoking access cannot remove copies another person has made. Do not treat Locker Notes or chat as end-to-end encrypted communications.

Use the available visibility, connection, blocking, and reporting controls to manage interactions. Authorized personnel may review reported content and related evidence to investigate abuse and protect users. An optional device face-authentication lock protects access on supported devices; GOGYM does not receive the operating system's facial recognition template.

The official GOGYM GymBuddy is a fictitious AI companion, not a human, trainer, psychologist, or medical service. Official product-help answers come from our maintained knowledge base without a generative-model request. If you separately accept AI-chat processing, we send your message and a limited part of the preceding conversation to OpenAI to respond about attendance habits and motivation. We do not automatically attach your calendar, attendance records, location, account profile, or other users' messages. Do not include passwords, verification codes, or sensitive personal details.

AI-chat consent is separate from device permissions and personalized motivational-note consent. You can withdraw it and delete stored conversation text from the chat. We retain limited non-content request identifiers and usage records to prevent duplicate requests and enforce allowances; deleting the account removes these user-linked records. Aggregated budget totals do not identify you. Removing or blocking GOGYM prevents access and stops new chat requests.

We request that OpenAI not store responses for later retrieval, but this is not a promise of zero provider retention. OpenAI may retain data for abuse monitoring under its applicable API policies and settings. Withdrawing permission or deleting our stored chat cannot recall a request already sent to the provider. Review OpenAI's privacy policy at https://openai.com/policies/privacy-policy/ and API data controls at https://platform.openai.com/docs/guides/your-data.

6. GOins, challenges, badges, and the store

GOins and badges—including GOins earned through challenges—are internal gamification features. They are not money, cryptocurrency, investments, or financial assets. They have no cash value and cannot be traded, cashed out, or exchanged for real-world assets.

We process challenge activity, results, and virtual-reward balances to maintain game progress, prevent duplicate awards or abuse, and display achievements. These rewards do not represent financial returns.

Store products and purchases are independent of GOins. GOins are not payment for store products. Real purchases use the price and payment method shown at checkout and are subject to the applicable purchase terms.

GOGYM BLACK membership purchases and restorations may be processed through Apple or Google and RevenueCat, which manages purchase status and entitlements. A GOGYM account identifier links purchases to your account. Store billing and cancellation rules apply; deleting GOGYM or your account does not by itself cancel a store subscription.

7. Product promotions and future advertising tools

GOGYM may promote its own products, membership, and store within the service. We may send optional promotional messages where permitted and in accordance with your preferences. You can change notification preferences, turn off device notifications, or use any unsubscribe method included with a marketing message. Essential security, account, and transaction communications are separate.

This policy does not announce that Meta/Facebook pixels or other third-party advertising trackers are active. We plan to consider such tools in the future. A plan to install a tracker is not permission to collect or share data through it.

Before enabling advertising pixels, SDKs, cross-app tracking, or advertising audiences, we will update the disclosures to identify the providers, information involved, purposes, and available choices, and obtain consent or platform authorization where required. Where applicable, we will provide opt-out rights for targeted advertising or data sharing. Some advertising disclosures may legally count as a sale or sharing even when no money is exchanged.

We do not currently sell personal information or share it with advertising networks for cross-context behavioral advertising. We will not use precise gym location, private communications, or sensitive fitness activity to target third-party ads. We will not enable behavioral advertising or cross-app advertising tracking for users we know are under 18.

Our public privacy-policy page contains no advertising pixels. Essential app or website storage may still be used for authentication, security, language, and preferences; optional advertising technologies will be addressed separately before activation.

8. Who may receive information

We do not sell your personal information. Running the service still requires limited disclosures: hosting, database and file-storage providers; authentication providers such as Clerk; maps providers such as Google Maps Platform; Apple and Google platform services and notification delivery; and RevenueCat and payment providers when purchase features are used. These services receive information needed for their function, subject to applicable terms and safeguards. Payment and platform providers may also process information independently under their own policies.

Information is also shared with people you choose to interact with, as described above. Service providers, authorized staff, and advisers may access information as needed for support, security, operations, or legal obligations.

We may disclose information when required by law or valid legal process, to protect rights or safety, or to investigate fraud and abuse. If our business is reorganized or transferred, relevant information may be transferred subject to appropriate confidentiality protections and any legally required notice or choices.

Information may be processed in the United States or other countries where we or our providers operate. Where required, we use legally recognized safeguards for international transfers. Contact us for information about safeguards applicable to your data.

9. Retention and security

We keep account information, attendance history, social relationships, and other records while needed to provide the services you use, subject to your deletion requests and applicable legal requirements. Membership expiration does not by itself delete your history.

Ordinary disposable Locker Notes expire 24 hours after sending. Other content, such as chat or content explicitly saved through an available keep feature, follows that feature's retention controls rather than a blanket 24-hour rule. Reported Locker Note evidence is retained for 90 days after reporting for restricted safety review; afterward identifying evidence is deleted and only anonymous outcome totals may remain.

Deletion can involve separate systems and providers. Limited records may need to remain for legal or accounting obligations, fraud prevention, security, dispute resolution, or completion of deletion. Backup copies may remain until their scheduled replacement or deletion. We restrict retained information to the relevant purpose and do not promise instantaneous erasure from every system.

We use access controls and technical and organizational safeguards designed to protect information. No system is completely secure. Protect your account and device, and contact us if you suspect unauthorized access.

10. Your choices and privacy rights

You can edit available profile information, adjust social visibility and notification preferences, manage connections, revoke device permissions, and use available account controls. To request account deletion, use the Delete account option in GOGYM or visit gogymproject.app/delete-account. You can also email contact@gogymproject.com for assistance without signing in.

Depending on where you live, you may have rights to access, correct, delete, or receive a portable copy of personal information; restrict or object to processing; withdraw consent; and opt out of applicable sale, sharing, or targeted advertising. We do not discriminate against you for exercising applicable privacy rights.

Send requests to contact@gogymproject.com. We may need proportionate verification of your identity or an authorized representative's authority before disclosing or deleting information. Never send your password or payment-card details. We respond within the periods required by applicable law and explain any lawful limits.

For escalation or an appeal where applicable, contact admin@everestpublishinggroup.com. You may also complain to your local data-protection authority. Deletion of your account does not cancel subscriptions billed by an app store; manage those subscriptions through that store.

11. Users aged 13–17 and children

GOGYM is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information, contact us so we can investigate and take appropriate deletion measures.

Users aged 13–17 should review this policy with a parent or guardian. Where local law requires parental authorization or a higher age for consent to particular processing, those requirements apply; being 13 does not automatically authorize all processing in every country.

Younger users should take particular care with public profiles and social content and avoid sharing their school, address, gym schedule, or other sensitive details. Our commitment not to enable behavioral advertising or cross-app advertising tracking for known users under 18 applies to future advertising tools too.

A parent or guardian may contact us about a child's privacy. We may need to verify the relationship and authority before acting. GOGYM is an accountability service, not medical advice or emergency monitoring.

12. Changes and contact

We will update this policy when our practices change and revise the date above. For material changes, we will provide additional notice where required, and seek consent when required before new processing begins. This policy is not blanket consent to future advertising or unrelated uses.

Operator: Everest Publishing Group LLC, doing business as GOGYM. Support and privacy requests: contact@gogymproject.com. Legal and privacy escalation: admin@everestpublishinggroup.com.