Gymphony
Privacy Policy
Last updated 24 October 2026
Gymphony is a training planner and food log made by OST Automation. This policy covers this website and the Gymphony app. We keep what we store to the minimum needed.
This website
- No tracking. This website sets no cookies and uses no analytics, advertising or tracking scripts.
- Server logs. Like any web host, Netlify may briefly log technical request data such as IP addresses to keep the site running and secure.
The Gymphony app — what we store
- Your account: email address and a password (stored hashed by our sign-in provider; we never see it).
- Your training: programmes, weekly plans, completed sessions, weights, notes, how sessions felt, sport sessions and minutes, and app settings.
- Body and nutrition: bodyweight, body measurements, your nutrition details (age, height, goal, target weight), food library, meal plans and food log.
- Progress photos, if you add any. They are shrunk on your device first (which also removes location and camera details) and stored in a private folder only your account can open.
- Free-trial check: a random ID that the app makes and keeps in your browser (browser storage and a first-party cookie). It is sent with your account so each phone or computer gets one free trial. It is not a fingerprint, reads nothing about your device and is used for nothing else.
Why
Only to provide the app to you: to sign you in, keep your data in sync between your devices and show your history. We do not sell or share your data, and there is no advertising.
Where it is kept
- On your device (browser storage), so the app works offline.
- In your Gymphony account, hosted by Supabase (database, sign-in and private photo storage). Each account can only read its own data.
- Subscribing. When you message us to subscribe, we keep your account email, your plan and the date it runs until, so the app knows what to open. You pay us directly by the method we agree; card details are never entered into Gymphony.
- Account emails (confirming your email, resetting your password) and our notice that a new account was created are sent through Google Workspace, our email provider.
- When you search for a food or scan a barcode, only the search words or barcode number are sent to Open Food Facts, a free open food database. Nothing about you is sent.
- The built-in food library (600+ foods) is part of the app — searching it sends nothing. Its values are averages from USDA FoodData Central (public domain), via TempoLife food data (tempolife.app, CC BY 4.0).
- The camera is used only while the barcode scanner or photo picker is open, and the video never leaves your device.
How long
App data is kept until you delete it: Settings → Delete my data removes your training data, measurements, food log and progress photos straight away. Settings → Delete my account does the same and also deletes your sign-in account. We keep only your email and the date you first signed up, so a new account with the same email doesn’t start a second free trial.
Cookies
Neither this website nor the app uses tracking or advertising cookies. The app keeps your sign-in and your data in your browser’s own storage so it works offline, and a first-party cookie with its free-trial ID (above); these are strictly necessary for the app to work and are never shared.
Your rights
You can ask to see, correct, export or delete your data, or object to how it is used. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ico.org.uk).
Contact
Questions or requests: contact OST Automation via ostautomation.co.uk.