A clear account of the information behind GymTribe.

This policy applies to GymTribe, a product of Sambangi Inc. in Calgary, Canada, and to the public website at gymtribe.fitness. It describes the information we collect, why we use it, when it may be shared, and the choices available to you.

GymTribe handles health-adjacent information such as meals, nutrition targets, water, sleep, weight, progress, and trainer relationships. We design the product to collect only what is needed to provide the features you choose to use.

Account and contact information

When you create or use an account, we may handle your name, email address, phone number, account identifiers, role, and authentication information. If you contact us or join a waitlist, we handle the information you provide in that interaction.

Tracking information

Depending on the features you use, GymTribe stores meal logs, nutrition values, targets, water, sleep, weight, progress, streaks, workout-related activity, and trainer-client relationship settings. You control what you record.

Photos and AI-assisted estimates

If you choose photo-assisted meal logging, an image and the related request may be sent to our processing providers so GymTribe can return an estimate. The result is an estimate for your review, not a medical conclusion. Do not submit information that you are not comfortable processing for this purpose.

Apple Health and Health Connect

If you connect Apple Health on iPhone or Health Connect on Android, GymTribe reads only the types you allow: steps, sleep, workouts, active energy, distance, heart rate, and exercise and stand time. If you allow it, GymTribe also writes the workouts you finish back to that platform. Detailed heart-rate samples and workout routes stay on your device; we store workout-level summaries, such as type, time, duration, calories, distance and average heart rate, so your history and trends work across devices.

Information from Apple Health or Health Connect is used only to provide GymTribe features you use. It is never used for advertising, never sold, and never shared with data brokers. Your morning brief may use sleep totals from these platforms, which means those totals are sent to our AI provider to write the brief.

Technical information

We may receive device, browser, network, log, and service activity information needed to keep GymTribe secure, available, and functioning. We do not use health-related entries as advertising profiles.

• Provide features. Store and display your records, targets, progress, account settings, invitations, and subscription access.
• Support coaching visibility. Show a trainer the client information that the relationship and sharing settings permit. New invitation relationships use the invitation date as the default privacy boundary.
• Process requests. Return catalog results, photo-assisted estimates, manual entries, notifications, and support responses that you request.
• Keep GymTribe safe. Detect abuse, troubleshoot failures, protect accounts, enforce limits, and maintain reliable systems.
• Communicate with you. Send service messages and, where you have agreed, product or launch updates. You can contact us to change your communication preferences.

We use service providers to operate GymTribe, including sign-in and account security, database and backend hosting, subscription management with Apple and Google, app updates and push notifications, exercise video delivery, barcode lookup, and website hosting. Each one receives only what it needs for its job, under its own privacy and security commitments. We never receive your card details.

These providers handle the parts people most often ask about:

• OpenAI, AI-assisted features. Receives meal photos and food descriptions you submit for an estimate, the experience level, goal, equipment and session length used to suggest a workout, and the first name and recent protein, sleep and workout totals used to write your morning brief.
• PostHog, product analytics. Receives screen names, feature usage events, your account role and an internal account identifier.
• Sentry, crash and error reports. Receives error details, device and app version, IP address and an internal account identifier. For a sample of sessions and for sessions with an error, it also receives a screen recording with all text and images masked.

Analytics events never include your meals, photos, body measurements, health data, email address or phone number. OpenAI's terms for its API state that data sent to it is not used to train its models by default.

We may disclose information when necessary to comply with law, respond to a valid legal process, protect users or the service, investigate abuse, or support a business transfer. We do not sell personal information.

Trainer access is not the same as public access. A trainer can see only the information made available through an active coaching relationship and its sharing controls. You can review and change sharing from the product where those controls are provided.

Where information is processed

Sambangi Inc. is based in Canada, and most of our providers store and process information in the United States. Information may therefore be handled outside your country, where privacy laws may differ. We choose providers that protect it to the standard this policy describes.

Links to other services

Some screens open other services, such as an exercise search on YouTube or Google or Apple sign-in. What you do there is governed by that service's own privacy policy.

You may update available account and tracking information in GymTribe. You may also ask us to access, correct, export, or delete personal information, subject to verification and any information we must retain for legal, security, or operational reasons.

On the website we count visits without cookies. In the app, analytics is tied to your account identifier only and is removed when you delete your account.

You can turn off Apple Health or Health Connect access, camera and photo access, and notifications at any time in your device settings. GymTribe keeps working with manual entries.

To make a privacy request or ask a question about this policy, email support@gymtribe.fitness. We may need to verify your identity before completing a request.

Retention and deletion

We keep information for as long as needed to provide the service, meet legal and accounting obligations, resolve disputes, enforce agreements, and maintain security. When information is no longer needed, we delete it, anonymize it, or securely isolate it according to our operational procedures.

After account deletion, we may retain a one-way cryptographic fingerprint derived from a verified account identity to prevent repeated trial, referral, and usage-limit abuse. This record cannot be used to sign in or restore an account.

Security

We use reasonable administrative, technical, and organizational safeguards for the information we handle. No internet service can guarantee absolute security, so please use a strong account credential and contact us promptly if you suspect unauthorized access.

This policy was last updated October 17, 2026. We may update it as GymTribe changes; the current version will be posted on this page. Contact GymTribe