Privacy Policy

Last updated: 07/2026

1. Controller

Stanislaw Schönberg,
Schuhmacherwiese 9a
22113 Oststeinbek, Germany
Email: kontakt@gymload.app

2. Overview: core principle

Your training and health data (sets, weights, heart rate, body data) is stored on your device or in Apple Health and is not transmitted to our servers. To provide and protect the app content (exercise catalog, images), the app registers with our server at startup; in doing so, the technical data listed under section 4 is processed. There is no advertising tracking.

3. Processing on the website

When the website is accessed, the operator processes technically necessary data in server log files (IP address, date/time, requested URL, referrer, user agent) for delivery and security.

• Purpose: provision/stability/security of the website.
• Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
• Cookies: only technically necessary cookies / no cookies.

4. Processing in the app (installation registration)

On first launch and after updates, the app sends to our server:

• pseudonymous installation ID, app version, device model, iOS version, language, country/region, storefront country, time zone, appearance mode (light/dark);
• purchase/download date and environment (production/sandbox) as well as a signed proof of purchase (Apple AppTransaction) for authenticity verification;
• additionally on the server side: IP address and timestamp.

Purposes: delivery of the tier-dependent exercise catalog and images, unlocking purchased content, protection against misuse/piracy, error diagnosis and aggregated reach measurement.
Legal bases: Art. 6(1)(b) GDPR (performance of a contract) and (f) GDPR (legitimate interest in security/abuse prevention). No health/training content is transmitted.

5. Purchases and subscriptions

Purchases are processed via your Apple Account; payment data is processed by Apple, not by us. To verify entitlement, we verify the purchase receipts signed by Apple (StoreKit 2 / App Store Server API) and store the resulting entitlement status (Free/Pro/Ultra, expiry date, environment). Apple's privacy information: apple.com/legal/privacy.

6. Apple Health

If you allow it, the app reads/writes data from Apple Health (e.g. workouts, heart rate, body weight). This processing takes place on the device; this data is not transmitted to us.

7. Recipients / processors

• Apple (payment processing, app delivery, purchase verification).

8. Transfers to third countries

Insofar as service providers process data outside the EU/EEA, this is done on the basis of appropriate safeguards (EU standard contractual clauses or an adequacy decision).

9. Storage period

Installation/purchase data is stored for as long as necessary for the stated purposes (contract term + statutory retention periods). Server log files are deleted/anonymized after 14 days.

10. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR) as well as the right to lodge a complaint with a supervisory authority. Requests to: kontakt@gymload.app. The installation ID (visible in the app) can help with attribution.

11. No automated decision-making

No profiling for advertising purposes.

12. Changes

We update this policy if the processing changes. The current version is always available at gymload.app/privacy.