Wynners is a gym accountability app. We collect the data we need to run it — nothing more. This page explains what we collect, what we do with it, and the rights you have over it, in plain English.
01
What we collect
- Account info. Your name, email, and phone number — whichever you use to sign in.
- Fitness data. The workouts you log: exercises, sets, reps, weight. Plus your personal records, your streak, and your coin balance.
- Profile preferences. Your fitness goal, current fitness level, and training preferences.
- Health conditions. Any health conditions you choose to share, so the AI can avoid unsafe exercises.
- Group activity. Which groups you're in, and the workouts you've logged — these become visible to your group members as feed entries.
- Server logs. Standard server logs may temporarily record IP addresses and timestamps for security and debugging.
02
What we don't collect
- Photos or images.
- Location data. (Unless you explicitly share location in a group post — and that isn't a feature today.)
- Contacts from your phone.
- Health data from Apple Health or Google Fit.
- Advertising IDs.
03
How we use your data
- To run the app — show your workouts, calculate your streak, and surface your group's activity.
- To generate AI workout plans personalised to your fitness level, with safe substitutions for any health conditions you've shared.
- To send the magic-link email or OTP that signs you in.
04
Who we share it with
We use a small set of trusted services to run Wynners. Each one only sees what it needs to do its job.
- Firebase (Google). Handles your sign-in. Sees your email, phone, or Google credentials.
- OpenAI. Generates your workout plan. Sees your fitness profile, your goal, your fitness level, and any health conditions you've shared. Per OpenAI's API policy, this data is not used to train their models.
- Resend. Sends transactional emails — waitlist confirmations, sign-in links. Sees your email address.
- Railway, Vercel. Host the backend and the frontend respectively. They see traffic but do not meaningfully access app data.
- Apple, Google. If you sign in with Apple or Google, those providers see the sign-in event.
05
Within your group
Other members of your group see your name, your profile initials and colour, the workouts you've logged this week, your weekly streak, and your coin balance.
This is the point of the app — accountability through visibility. You can leave a group at any time.
06
Your rights
- Access your data. Email us and we'll send you a copy.
- Delete your account. In-app via Profile → Settings → Delete Account, or by emailing us. Deletion is permanent and happens within 30 days.
- Correct your data. Most fields are editable in-app. For anything else, email us.
- Withdraw AI consent. You can turn off the AI plan feature in settings and use manual logging only.
07
Children
Wynners is for users 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has signed up, email us and we'll remove the account.
08
Data retention
We keep your data while your account is active. After you delete your account, all personal data is removed within 30 days. Anonymised, aggregated statistics may be retained for product analytics.
09
Changes to this policy
If we change this policy, we'll update the date at the top of the page. For any material change — new data we collect, new third parties we share with — we'll also notify you inside the app.
10
Contact
Questions, access requests, deletions — write to us at wynnersapp@gmail.com. We read every email.