Privacy Policy

We collect the information you give us, the information the GAINS app records as you use it, and some technical information collected automatically. This may include:

• Contact details such as your name, email address and phone number, given on the application at gainsfitapp.com/apply, when you book a call, when you join at join.gainsfitapp.com, or in the GAINS app. If you sign in with Apple, we receive the name and email address Apple shares with us, which may be a private relay address
• Your answers on the application and in the app's onboarding, such as your goals, target weight, training experience and schedule. The application saves your answers as you go, so an application you leave unfinished may still reach us. For VIP members, the signed Program Agreement, including your signature and the date you signed
• Fitness and health data you log or share as part of your program, such as workouts, sets, reps and weights, weigh ins, body measurements, steps, weekly check ins, food and meal logs, nutrition targets and progress photos
• Apple Health data, only if you allow it, as described under Apple Health below
• Photos you take or choose in the app: progress photos, meal photos for Smart Log, recipe photos and barcode scans. The app uses your camera and photo library only when you open them
• Payment information processed by Stripe. We do not store your full card or bank account details on our servers
• Booked calls: the time you choose and the video call link we create for it
• Communications such as messages in the app, emails, text messages, direct messages and phone calls with us. Calls GAINS places from its phone system are recorded, and so are voicemails you leave us; recordings are kept with your record in our CRM
• Device and usage data such as your IP address, browser, operating system, the page that sent you and the pages you visit on our websites. In the app: your app version, device model, crash reports, and a notification token if you allow notifications

We use the information we collect to provide, maintain and improve our coaching and the GAINS app. Specifically, we use your data to:

• Deliver your program: build and adjust your training and nutrition, track your progress, and, for VIP members, let your coach review your logs, check ins and photos
• Run the app features you use, such as workout tracking, food search, Smart Log, recipe import and reminders
• Communicate with you about your program, your application, your booked call and your account, by email, text message, phone, app messages and the notifications you allow, and provide support
• Process payments and send receipts and billing notices
• Send marketing communications such as tips and news about our programs, with your consent where the law requires it
• Improve our services by studying how our websites and app are used, in aggregate, and by fixing the errors crash reports show us
• Protect our business by detecting and preventing fraud, abuse and other harmful activity

If you allow it, the GAINS app reads your steps, walking and running distance, weight, active and resting energy burned, and heart rate from Apple Health, and writes your finished workouts and weigh ins back to Apple Health. We use this data only to show and track your training and your progress in GAINS.

What GAINS needs to show your history, such as your daily step totals, weigh ins and workout results, is stored with your GAINS account, so it follows you to a new phone and, for VIP members, so your coach can review it. Walking and running distance is shown in the app and not stored.

You can change what GAINS may read or write at any time in the Health app or in your iPhone's Settings.

Smart Log and recipe import in the GAINS app use Claude, an AI model made by Anthropic, and the app asks your permission before you first use them. When you do, only what you submitted for that request (the text you typed, the photo you took or chose, or the recipe link you shared) goes from our servers to Anthropic, which reads it and returns the food, the portions and a nutrition estimate, or the recipe. Your name, your email and your logs are not sent.

You check every item before it is logged. AI estimates can be wrong, so treat them as estimates.

We may share your information only in the following limited circumstances:

• Service providers: the companies listed under Third Party Services below, which help us run our websites, the app, payments, email, calls and messages, strictly to do that work for us and under obligations to protect your data
• Legal requirements: we may disclose your information if required to do so by law, regulation, legal process, or governmental request
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, and we will notify you of any such change
• With your consent: for any other purpose you agree to, such as featuring your progress photos with your first name in our marketing. VIP members give this consent in the Program Agreement and can withdraw it at any time by emailing support@gainsfitapp.com

We use industry standard security measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS
• Secure storage of personal data with access controls and authentication requirements
• Card payments handled by Stripe, so your full card number never reaches our servers
• Limiting access to personal information to the people who need it to do their work

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining appropriate safeguards and promptly addressing any potential vulnerabilities.

We keep your information for as long as your account is open or as long as we need it to provide our services to you. When you delete your account in the GAINS app, your app account and the data stored with it are deleted. We keep what we must keep to meet legal, tax and accounting obligations, resolve disputes or enforce our agreements, such as payment records and signed agreements. You can ask us to delete our other records about you as described under Your Rights.

Our websites use a few tools to understand how visitors use them:

• Google Analytics sets cookies to count visits and show us, in aggregate, how visitors find and move through our pages
• Vercel Web Analytics counts page views without cookies
• Mux, which plays the videos on our pages, measures how they play
• The application at gainsfitapp.com/apply records which questions were reached and answered, so we can see where applicants stop

The GAINS app does not track you across other companies' apps or websites. Most browsers let you block or delete cookies in their settings; Google also offers a browser add on that opts you out of Google Analytics.

Depending on where you live, you may have certain rights regarding your personal information. We honor these requests wherever you live:

• Access: you have the right to request a copy of the personal information we hold about you
• Correction: you may request that we correct any inaccurate or incomplete information
• Deletion: you can delete your account at any time in the GAINS app under Settings, Delete Account, which also cancels your membership, or ask us to delete your personal data, subject to the legal obligations described under How Long We Keep It
• Opt out of marketing: you can unsubscribe from marketing emails at any time with the unsubscribe link in any marketing email, turn off notifications in your iPhone's Settings, or contact us directly
• Data portability: where applicable, you may request your data in a structured, commonly used, machine readable format
• Withdraw consent: where we rely on your consent, such as for Apple Health, AI features or progress photos in our marketing, you may withdraw it at any time without affecting what we did before you withdrew it

To exercise any of these rights, please contact us at support@gainsfitapp.com. We will respond to your request within 30 days.

We use a number of trusted third party services to run our business and deliver our coaching. They may access your personal information only to do specific work for us and are obligated to protect it:

• Supabase: our database provider. It stores GAINS app accounts and their data, and the client records and message history of our in house CRM
• Vercel: hosts our websites and our CRM, and provides Vercel Web Analytics
• Stripe: our payment processor. It handles every card payment in compliance with PCI DSS
• Anthropic: reads what you submit to Smart Log and recipe import, as described under AI Features
• Apple: Sign in with Apple, Apple Health, and the delivery of app notifications
• Expo: sends the app's notifications to Apple for delivery, and delivers app updates
• Sentry: receives crash and error reports from the app, with your device model and app version, so we can fix errors
• Google: Google Analytics on our websites, and Google Calendar and Google Meet for the calls you book. Your email address goes on the calendar invitation
• Zoom: hosts a booked call when it is held on Zoom
• Resend: sends our emails
• Telnyx: carries our phone calls and text messages, including call recordings and voicemails
• Mux: hosts and plays our videos
• FatSecret and Open Food Facts: power food search in the app. They receive the words you search and the barcodes you scan, never your name or account
• Meta Platforms: when you contact us through Instagram, Facebook Messenger, or WhatsApp, your messages reach us through Meta's APIs. We receive your message content and platform identifiers so we can read and reply to your inquiry and keep your conversation history in one place. We use this data only to respond to you. We do not sell it or share it with any other party, and you may request deletion of your messages and contact record at any time as described in Your Rights above
• TikTok: when we connect the GAINS TikTok account, TikTok shares basic account information with us (display name, avatar, and account id) so that our in house planner can publish the brand's own content through TikTok's Content Posting API. Connection tokens are stored securely, used only to publish and manage the brand's own posts, and never sold or shared. Access can be revoked at any time in the TikTok app under Settings, Security, Apps and websites

Each third party service operates under its own privacy policy. We encourage you to review their policies to understand how they handle your data. We are not responsible for the privacy practices of third party services, but we carefully vet all partners to ensure they meet our standards for data protection.

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at support@gainsfitapp.com.

If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to remove that information from our servers promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, providing additional notice such as an email notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any changes to this policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out:

We are committed to resolving any concerns you may have about our collection and use of your personal data. We aim to respond to all inquiries within 48 hours.