Privacy Policy

MyGymSidekick LLC (“MyGymSidekick,” “we,” “us”) operates the GymSidekick platform (the “Service”), including the website at mygymsidekick.com and our mobile apps. This policy explains what we collect, how we use it, and your choices. Questions? Email [email protected].

How GymSidekick is set up

GymSidekick is used by fitness coaches and their clients. A coach — or a head coach together with any co-trainers they add (together, your “Coaching Organization”) — signs up and manages their own clients. Your Coaching Organization decides what information to collect from you and how it is used within your coaching relationship; in privacy terms they are the “controller” of your information, and MyGymSidekick is the “service provider” that stores and secures it for them. If you are a client and have questions about how your coach uses your data, contact your coach. For questions about the app or your data itself, contact us.

Information we collect

• Account & profile: your name, email, and password (stored only as a secure hash), plus optional pronouns and profile photo. Optionally: age, height, weight, goal weight, main goal, and lifting experience.
• Workout data: the workouts you log — exercises, sets, reps, weights, effort (RPE), cardio, dates, and notes — and the programs assigned to you.
• Messages & feedback: messages between you and your coach, and any feedback you send us.
• Sign-in & security: login sessions, passkeys (we store only your device’s public key — your Face ID or fingerprint never leaves your device), records of sign-in attempts, and password-reset tokens.
• Settings: your preferences, such as units, where you train, and rest-timer choice.

We do not use advertising trackers or third-party analytics, and we do not collect your location.

How we use it

• To provide the Service — create your account, log and show your workouts, let your coach build and assign programs, and enable coach–client messaging.
• To keep the Service secure and working (signing you in, preventing abuse).
• To send necessary account emails (invitations, password resets).
• To respond to your feedback or support requests.

We do not sell your personal information.

Who can see your data

• Your Coaching Organization. Your coach can see your profile, workouts, programs, and messages. If a co-trainer is assigned to you, they can see your data too. The head coach who owns the organization’s account can access all clients in that organization — including clients a co-trainer signed up.
• Access is walled off. A co-trainer can see only the clients assigned to them — not other co-trainers’ clients. As a client, you can see only your own data, never another client’s.
• Our service providers (below), only to run the Service. No one else.

Service providers we use

• Cloudflare — hosting, our database, and the AI feature that turns a typed or spoken workout description into logged exercises (that text is processed by Cloudflare’s AI).
• Resend — sends our account emails (invitations, password resets).

How long we keep it, and deleting your account

We keep your data while your account is active. You can permanently delete your account and all associated data at any time in the app: Settings → Account → Delete account. You can also export your workout history to a spreadsheet (CSV) from the app. If your coach removes you, the data tied to that account is deleted.

Security

Passwords are stored hashed, we support passkeys, and all traffic is encrypted in transit (HTTPS). No system is perfectly secure, but we take reasonable measures to protect your information.

Age

The Service is intended for people 16 and older. It is not directed to children under 16, and we do not knowingly collect their information. If you believe a child under 16 has given us data, contact us and we will delete it.

Your rights (California and the U.S.)

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and not to be discriminated against for exercising those rights. You can export and delete your data in the app; for anything else, email [email protected]. We do not sell or “share” personal information for cross-context behavioral advertising.

Changes

We may update this policy. We will change the effective date above and, for material changes, notify you in the app or by email.

Contact

MyGymSidekick LLC · San Francisco, California, USA · [email protected]