Legal

Privacy Policy

This policy explains what GymTribe collects, why we use it, who can access it, and the choices available to you.

1. Who we are

SAMBANGI CONSULTANCY INC., doing business as Sambangi Inc. ("Sambangi", "GymTribe", "we", "us", or "our"), provides the GymTribe mobile application, website, and related services (the "Service"). Sambangi is responsible for personal information under its control.

Questions, requests, and complaints may be sent to our Privacy Contact at support@gymtribe.fitness.

2. Scope and applicable law

This policy applies to clients, trainers, and website visitors. Our practices are designed to comply with applicable Canadian privacy law, including Alberta's Personal Information Protection Act and Canada's Personal Information Protection and Electronic Documents Act where applicable, and with India's Digital Personal Data Protection Act, 2023 and rules in force where applicable.

3. Information we collect

Account and profile information

• Name, email address, profile photo, account identifiers, role, authentication information, unit preference, and timezone.
• For trainers: business name, coaching type, trainer name, logo, brand colour, welcome message, invitations, and client relationships.

Fitness, nutrition, and wellness information

• Goals, sex, height, current and target weight, activity level, training frequency, and training experience.
• Dietary preferences, allergies, challenges, nutrition targets, meal and food logs, calories, and nutrient information.
• Meal photos, weight logs, water logs, sleep times, streaks, and local dates.

Subscription, device, and support information

• Subscription product, entitlement, status, renewal, and expiry information. Apple handles payment credentials; we do not receive full payment-card details.
• Device and operating-system information, app interactions, diagnostics, notification tokens if enabled, IP address, and security logs processed while delivering the Service.
• Messages and information you provide when requesting support or exercising a privacy right.

GymTribe does not request or store precise GPS location. We use timezone information to calculate local dates and streaks.

4. How we collect information

We collect information directly from you, from a trainer or client when an invitation or coaching relationship is created, automatically when you use the Service, and from providers that support authentication and subscriptions.

5. Why we use information

• Create and secure accounts, authenticate users, and provide support.
• Provide meal logging, nutrition estimates, goals, progress, streaks, and trainer-client features.
• Process invitations and enforce the sharing choices selected by clients.
• Provide subscriptions, verify entitlements, prevent fraud, and maintain required business records.
• Operate, troubleshoot, secure, and improve the Service.
• Comply with law, enforce our Terms, and protect users, Sambangi, and the public.

We use personal information with your knowledge and consent where required, to provide a service you request, for permitted business activities, and where otherwise authorized or required by law. You may withdraw consent subject to legal or contractual restrictions and reasonable notice, but some features may then be unavailable.

6. AI-assisted nutrition estimates

When you choose photo or text analysis, the meal image or description is sent to our AI service provider to generate an estimated food identification and nutrition result. Automated results can be incomplete or inaccurate and are not medical advice. Avoid including faces, documents, or unnecessary personal information in meal images or descriptions.

7. Trainers and client sharing

When a client accepts a trainer invitation, the independent trainer can access information that the client shares for coaching. New relationships default to sharing information from the invitation date. A client may choose to share all prior history from Profile. The Service enforces the selected sharing scope.

Trainers are independent service providers, not Sambangi employees or agents. They must use client information only for authorized coaching purposes and comply with applicable privacy law. A trainer may have separate responsibilities for information they export, record, or process outside GymTribe.

8. When we disclose information

We do not sell personal information, display advertising, or use personal information for cross-app behavioural tracking. We disclose information only as needed:

• To a trainer or client connected through an authorized coaching relationship.
• To providers supporting identity and authentication (Clerk), application data and file storage (Convex), requested AI analysis (OpenAI), subscriptions (RevenueCat and Apple), and website hosting (Netlify).
• During a proposed financing, reorganization, sale, or transfer of all or part of our business, subject to appropriate confidentiality and legal safeguards.
• When required by law or reasonably necessary to protect rights, safety, security, and the Service.

9. International processing

Sambangi is based in Canada and serves users in India. Our providers may process or store information in Canada, the United States, India, or other countries where they operate. Information may be subject to the laws and lawful-access requirements of those jurisdictions. We use contractual, organizational, and technical safeguards appropriate to the sensitivity of the information.

10. Retention and account deletion

We retain personal information only as long as needed for the purposes described above, to provide the Service, and to satisfy legal, accounting, security, and dispute-resolution requirements.

You may permanently delete your GymTribe account and app data through Profile > Delete account. You may also contact us for help. Limited records may remain temporarily in protected backups or with Apple and other providers under their retention schedules. We may retain information required for legal compliance, fraud prevention, financial records, or legal claims. Deleting GymTribe does not cancel an Apple subscription; subscriptions must be managed through Apple.

11. Security

We use administrative, technical, and organizational safeguards designed for the sensitivity of the information, including access controls, authenticated server operations, encrypted network transport, and restricted provider access. No system is completely secure, and we cannot guarantee absolute security.

12. Your choices and rights

Depending on where you live and the law in force, you may have rights to:

• Know whether and how we process personal information.
• Request access to, correction of, or deletion of information.
• Withdraw consent and manage trainer-sharing choices.
• Obtain information about disclosures where required.
• Nominate another person to exercise rights where Indian law provides that right.
• Submit a grievance or challenge our compliance without retaliation.

Send requests to support@gymtribe.fitness. We may need to verify your identity. We will respond within the period required by applicable law and explain any refusal unless prohibited.

13. Complaints

Please contact us first so we can investigate. You may also have the right to complain to the Office of the Information and Privacy Commissioner of Alberta, the Office of the Privacy Commissioner of Canada, the Data Protection Board of India, or another regulator with jurisdiction.

14. Adults only

The Service is intended only for people at least 18 years old. We do not knowingly permit children to create accounts. Contact us if you believe a child has provided personal information.

15. Changes

We may update this policy as the Service or law changes. We will post the updated version here, change the effective date, and provide additional notice when a change is material or consent is required.