GymSync

Operated by Muhammed Hasan Keskin under the MHK Technology Solutions brand.

Privacy Policy

Last updated: 2026-07-09

GymSync is operated by Muhammed Hasan Keskin under the MHK Technology Solutions brand. This Privacy Policy explains how Muhammed Hasan Keskin (“GymSync”, “we”, “our”, “us”) collects, uses, stores, and shares information when you use the GymSync mobile application and related support services.

If you do not agree with this Privacy Policy, do not create an account or use the parts of the app that require personal data.

1. Scope

GymSync is a fitness planning, workout logging, progress tracking, and optional social accountability app. It is not a medical provider and is not intended to provide medical diagnosis or treatment.

2. Information We Collect

We collect only the information reasonably necessary to provide the app and the features you choose to use.

2.1 Account and authentication

• email address
• authentication user ID
• username
• display name

2.2 Profile and fitness data

• gender, date of birth, height, weight, body measurements
• fitness level, goal, equipment preference, unit/language preference, bio, profile visibility
• an approximate location you enter manually (for example a city) for social discovery — the app does not access device GPS or request a location permission
• a profile photo you choose to upload from your device photo library

2.3 Workout and progress data

• programs, workout logs, set logs, notes, progression history, challenge progress, reminder and calendar-sync preferences

2.4 Social feature data

• profile visibility, friend requests and friendship state, messages you send, workout summaries you choose to share

2.5 Safety and moderation data

When you submit a report about another user or a message, we process:

• the report reason (spam, harassment, inappropriate content, impersonation, or other)
• optional free-text details you add
• an evidence snapshot of a reported message’s content (message_snapshot), captured at report time
• moderation status metadata (review state, timestamps, resolution notes)

Report evidence is retained so a report remains actionable even if the reported account or message is later deleted. Resolved reports are retained for 180 days and then removed. See the Moderation Process.

2.6 Device, technical, and diagnostics data

• app version, device OS version, coarse technical event data
• a device push notification token, when you enable notifications (used only to deliver friend-request and message notifications via the Expo Push service — see Section 5)
• crash reports, error logs, performance traces

Where Sentry crash reporting is enabled, diagnostics are sanitized before transmission; email and similar direct identifiers are redacted from telemetry payloads.

2.7 Permissions-based data

• Notifications: workout reminders and social notifications (friend requests, messages)
• Calendar: optional sync of workout days into your device calendar
• Photo library: only when you choose to pick a profile photo

The app does not request location (GPS), contacts, or microphone access.

3. How We Use Information

To create and maintain your account, authenticate you, save your data and preferences, personalize plans and progress, provide the social features you choose, sync data between device and cloud, secure the app, and debug/improve reliability. We do not use your personal data for targeted advertising.

4. How We Share Information

We do not sell personal data. We share data only as necessary to operate the service, with the service providers (processors) below.

5. Service Providers (Processors)

If you use social features, some information is shared with other users according to your visibility settings (for example your username/display name on your profile, and messages with their intended recipients).

6. Your Controls and Choices

You control profile fields, visibility, social sharing, calendar sync, workout reminders, and guest vs. registered use. You may also contact us at [email protected] (or [email protected]) to request access, correction, export, or deletion, subject to applicable law and reasonable verification.

7. Account Deletion

You can delete your account and associated personal data in three ways:

• In-app: Profile → Delete Account (permanently removes your account and cloud social data)
• Web: https://legal.gym-sync.net/delete-account
• Email: [email protected]

Legal retention exceptions may apply where records must be preserved by law, for fraud prevention, dispute resolution, or security. Report evidence you are the subject of may be retained for moderation as described in Section 2.5.

8. Data Retention

We retain data for as long as reasonably necessary to provide the service, maintain your account, investigate abuse/security incidents, and comply with legal obligations.

• Account and social data (Supabase): deleted when you delete your account; the in-app deletion also removes your profile photo from storage.
• Diagnostics (Sentry): where enabled, sanitized crash/performance events are retained by Sentry for up to 90 days, then automatically removed. Diagnostics are not linked to your account identity.
• Encrypted backups and system logs: may keep residual copies for up to 30 days after deletion for security and disaster recovery, then overwritten in normal rotation.
• Moderation reports: resolved reports retained for 180 days (see the Moderation Process).

9. Security

We use reasonable technical and organizational measures, including authenticated cloud access controls, row-level access restrictions, local/cloud state separation, telemetry sanitization, and encryption in transit. No method of transmission or storage is perfectly secure.

10. Children’s Privacy

GymSync is not directed to children under the age required by applicable law. If you believe a child provided personal data unlawfully, contact [email protected].

11. Changes

We may update this Privacy Policy. If we make material changes, we will update the effective date and, where required, provide additional notice.

12. Contact

• Legal operator: Muhammed Hasan Keskin (public developer brand: MHK Technology Solutions)
• Privacy: [email protected]
• Support: [email protected] · https://gym-sync.net/support
• Account deletion: https://legal.gym-sync.net/delete-account (or [email protected])