1. Who We Are

Gainfully is a fitness tracking application developed and operated by Jesper Kildahl ("we", "us", "our"). If you have questions about this policy or your data, contact us at: support@gainfully.app

2. What Data We Collect

We collect the following personal data when you use Gainfully:

• Account information — your name and email address, provided at registration
• Profile information — optional: age, body weight, height, fitness level, and training goals
• Workout data — exercises, sets, reps, weights, and timestamps you log in the app
• AI conversation history — messages you send to the AI trainer and the responses received
• Subscription status — whether you are on the free or Pro plan

We do not collect location data, contacts, camera or microphone access, or any sensitive health data beyond what you choose to log.

3. How We Use Your Data

Your data is used exclusively to provide and improve the Gainfully service:

• To authenticate you and manage your account
• To store and display your workout history and progress
• To provide AI-powered coaching responses tailored to your training data
• To manage your subscription and process payments
• To send transactional emails (e.g. account confirmation, password reset)

We do not use your data for advertising, profiling, or any purpose beyond operating the app.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your data under the following legal bases:

• Contract — processing necessary to provide the service you signed up for (Art. 6(1)(b))
• Consent — for optional profile data and AI coaching features, which you can withdraw at any time (Art. 6(1)(a))
• Legal obligation — where required by applicable law (Art. 6(1)(c))

5. Third-Party Services

We use the following third-party processors who may access your data to provide their services:

• Supabase (database and authentication) — your account, profile, and workout data is stored in Supabase's infrastructure. Supabase is GDPR-compliant and data is hosted in the EU. Supabase Privacy Policy
• Anthropic (Claude API) — messages you send to the AI trainer are processed by Anthropic's Claude API to generate responses. Anthropic does not use your data to train models. Anthropic Privacy Policy
• RevenueCat — manages subscription state and purchase verification via the App Store and Google Play. RevenueCat receives your anonymised user ID and subscription events. RevenueCat Privacy Policy
• Apple App Store / Google Play Store — payment processing for subscriptions is handled entirely by Apple and Google. We do not store payment card information.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account (available in the app under Profile → Delete Account), all your data — including workouts, programs, AI conversations, and profile information — is permanently deleted from our systems within 30 days.

7. Your Rights (GDPR)

If you are located in the EEA, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — correct inaccurate data via your profile settings
• Right to erasure — delete your account and all associated data from within the app
• Right to data portability — request an export of your data in a machine-readable format
• Right to object — object to processing where we rely on legitimate interest
• Right to withdraw consent — withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at support@gainfully.app. We will respond within 30 days.

8. Data Security

All data is transmitted over encrypted HTTPS connections. Your password is never stored in plain text. Database access is restricted via Row Level Security — users can only access their own data. We take reasonable technical and organisational measures to protect your information.

9. Children's Privacy

Gainfully is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email. The "last updated" date at the top of this page always reflects the most recent revision. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, data requests, or concerns, please contact us at:
support@gainfully.app