This policy explains what information the mobile app Workout GYM ("the App") collects, why, and what choices you have. Workout GYM is published by BigInt ("we", "us").
1 The short version
- Browsing exercises, anatomy guides and workout guides works without an account.
- The personal features — My Plan, My Diet Plan, Steps and Food Scan — need a Google sign-in, because they save your progress to your account and back it up to the cloud.
- Food Scan photos are analysed by Google's Gemini AI over an encrypted connection and are not stored by us — never saved to your gallery, never used for ads.
We never collect: your phone number, contacts, photos or gallery, precise location, or payment card details.
2 Information collected
| Data | Why | Who processes it |
|---|---|---|
| Google account basics (name, email address, profile picture) — when you sign in | To identify your backup so progress can be restored on a new device | Google Firebase Authentication |
| Workout progress: logged sessions, sets/reps/weights, personal records, achievements, XP and streaks | To back up your progress and restore it on a new device | Google Cloud Firestore |
| Fitness profile you enter for My Plan: sex, date of birth, height, weight, activity level, goal and target weight | To calculate your BMI, calories and generated workout & diet plan, and back them up to your account | Google Cloud Firestore |
| Daily step counts — from your phone's step sensor and, with your permission, from Health Connect (smartwatch data) | To show your daily steps, goals and streaks, and back them up to your account | Stored on device · backed up to Google Cloud Firestore |
| Food Scan camera images processed, not stored | To recognise the dish and estimate calories & macros. The photo is sent over an encrypted connection to Google's Gemini AI for analysis and is not saved by us — it is never written to your gallery, never used for advertising, and never linked to your identity by the App | Google (Gemini via Firebase AI Logic), transiently |
| Daily scan count | To enforce the daily Food Scan limit and prevent misuse | Google Cloud Firestore |
| Advertising ID and coarse device/technical data (device model, OS version, language, approximate region derived from IP) | To display ads, limit repeated ads, and measure ad performance | Google AdMob |
| Crash and diagnostic reports (stack trace, device model, OS version) | To find and fix crashes | Google Firebase Crashlytics |
| Anonymous usage events (screens opened, app version) | To understand which features are used and improve the App | Google Firebase Analytics |
| Push notification token (a random device token, not linked to your identity) | To deliver occasional workout reminders and notifications | Google Firebase Cloud Messaging |
| Settings and preferences | To remember your choices | Stored locally on your device only |
3 Camera & Food Scan
Food Scan uses your camera, with your permission, to photograph a dish and estimate its calories and macros. The photo of the framed area is sent over an encrypted connection to Google's Gemini AI (through Firebase AI Logic) which analyses it and returns the result. We do not store the photo, it is never written to your gallery, and it is never used for advertising. Google processes the image to provide the service; see Google's Privacy Policy and the Firebase privacy notes for how Google handles API data. Food Scan needs an internet connection, is limited per day per account, and its results are estimates based on typical recipes, not measurements — not medical advice.
4 Health Connect & step data
With your permission, the App reads your daily step count from Health Connect so steps recorded by your smartwatch (Samsung Health, Fitbit, Garmin, Pixel Watch and others) appear in the App. We only ever read the step count — no other health data is requested, and we never write to Health Connect. Health Connect data is used to show your daily progress and is backed up to your account together with your other step data. It is never used for advertising and never sold. You can revoke this permission at any time in Health Connect settings, and the App keeps working with the phone's own step sensor.
5 Advertising
Workout GYM shows banner ads on some screens and optional rewarded video ads that unlock certain features (diet guides, plan shuffle, food scans). Ads are served by Google AdMob, which may use your device's advertising identifier to personalise ads.
In the European Economic Area, the UK and Switzerland a consent form from Google's User Messaging Platform appears before any ad is requested. You can decline consent and still use the App.
You can reset or limit your advertising identifier at any time in your device settings (Settings → Google → Ads on Android). AdMob's practices are described in Google's Advertising Privacy Policy.
6 Children
Workout GYM is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
7 Data sharing and retention
We do not sell your data, and we do not share it with anyone beyond the service providers listed above, who process it on our behalf. Backed-up progress is kept for as long as the account remains in use; deletion requests are honoured as described below. Crash and analytics records are retained under Google's standard retention periods.
8 Your choices and how to delete your data
- Delete your account & cloud data in the App: open the account sheet (round button on the home screen) → Delete my account & data. This removes your backup and account record immediately.
- Delete local data: uninstalling the App removes all data stored on your device.
- By email: you can also email us from the Google account you signed in with and we will delete your backup and account record.
- Opt out of personalised ads: use the device settings linked in section 5, or decline the consent form where it is shown.
- Revoke permissions: camera, physical activity and Health Connect access can each be withdrawn in system settings at any time.
9 Security
Data in transit is protected with industry-standard encryption (HTTPS/TLS). Backed-up progress is stored in Google Cloud Firestore under access rules that allow each signed-in account to read and write only its own record.
10 Third-party policies
- Google Privacy Policy (AdMob, Firebase, Google Sign-In)
- Firebase Privacy and Security
11 Changes & contact
If this policy changes, the updated version will be posted at this address with a new "last updated" date.
Questions or data-deletion requests: support@bigintgames.com