GymMotion

Privacy policy

Version 1.0 — September 24, 2026

This Policy explains what data GymMotion, by Motion Labs (the data controller), collects, what for, who it is shared with and how you exercise your rights, under the General Data Protection Law (LGPD, Brazilian Law 13,709/2018).

1. Data we collect

Account: name, email and password (stored encrypted; we have no access to it).
Set recordings: the video and the body points (skeleton) calculated on your phone.
Results: scores, reps, declared load, history and your ratings of the analyses (👍👎).
Health and body data (sensitive personal data): answers to the physical activity readiness questionnaire (PAR-Q), tape measurements, body fat estimate and the numbers from the bioimpedance report you send.
Device: technical data for the app to work and for phone notifications, if you turn them on.

Progress photos stay only on your phone: they are not sent to our servers.

2. What we use it for

Analyzing the technique of your sets, counting reps and showing your progress.
Building and adjusting your training program and load recommendations.
Managing your account, plan and usage limits, and charging for the subscription.
Sending notifications you have authorized.
Improving the quality of the analyses (for example, seeing where the AI got it wrong through the 👍👎 ratings).

Health data is processed with your specific consent, given when you create the account and when you fill in each piece of information, and only for the purposes above. We do not sell your data and we do not use your videos for advertising.

3. Who we share it with

OpenAI (USA): receives frames from the set video and, if you use it, the photo of the report, only to generate the analysis. This is an international data transfer, made with your consent and with a provider that commits not to use this data to train its models.
Supabase: hosts the database, authentication and videos.
Payment provider (Google Play, in the Android app; Asaas, on the website): receives the data needed for billing. We do not store your card number.
Your trainer: only when you create an analysis link and send it to them.
Authorities, when the law requires it.

4. How long we keep it

Videos on the server: 7 days on the free plan and 1 year on Pro. After that, the file is deleted automatically, and the analysis and the score remain in your history.
Other data: as long as the account exists. When you delete the account (You tab in the app), we delete your data right away. We keep only: (a) payment records, without identification, for 5 years (tax obligation); (b) an irreversible fingerprint of your email, to prevent a new free trial period.

5. Your rights

You can, at any time: confirm whether we process your data; access it and take it with you (the app has “take my data”); correct it; delete recordings; revoke consents; and delete the account. Requests can be made by email at contato@gymmotion.com.br, and we reply within 15 days. Taking your data, deleting recordings and deleting the account you can do on your own, in the You tab of the app.

6. Security

We use an encrypted connection (HTTPS), encrypted passwords, per-account access control and trainer links that are impossible to guess. If an incident happens that could put you at risk, we notify you and the ANPD (Brazilian National Data Protection Authority).

7. Data stored on the phone

The app stores on your device the login session, sets not yet sent, progress photos and preferences. We do not use advertising cookies or third-party trackers.

8. Minors

GymMotion is for people over 18 or for those with authorization from their legal guardian.

9. Changes

If we change something important in this Policy, we let you know in the app before the change takes effect.

10. Contact

Requests about your data: by email at contato@gymmotion.com.br, or directly in the You tab of the app. See also the Terms of use.