What we collect
We collect account details, your verified phone number, consent evidence, subscription state, workout schedule, quiet hours, selected gym coordinates, reminder and delivery events, snooze use, and verification results needed to operate GymBro.
How we use information
We use information to authenticate your account, schedule and deliver reminders you requested, verify user-initiated gym check-ins, process subscriptions, prevent abuse, provide support, and comply with law. We do not use SMS consent to enroll you in unrelated marketing.
Mobile messaging privacy
We do not share, sell, rent, or provide mobile phone numbers, SMS opt-in data, or messaging consent to third parties or affiliates for marketing or promotional purposes.
All other data-use and disclosure provisions in this policy exclude text-messaging originator opt-in data and consent. That information will not be shared with any third parties.
Message frequency varies with your selected workout schedule and intensity, up to six automated messages per day under the initial limits. Message and data rates may apply. Reply STOP to stop or HELP for help.
Location
The web app requests foreground location only when you choose “Use my current location” while setting your gym or press the check-in button. The server calculates distance from your configured gym. It stores the verified result, time, rounded distance, and an accuracy bucket—not the exact transient check-in coordinates you submitted. GymBro does not continuously monitor background location.
Service providers
Firebase and Google Cloud host account and product data, Stripe handles payment details, Google Maps Platform supplies gym search results and map imagery, and Twilio provides phone verification and SMS infrastructure. These companies act only as contracted processors for the operational functions GymBro directs. They may not use customer information for independent marketing, advertising, lead generation, or affiliate promotion.
Security and retention
Phone numbers are encrypted and paired with a keyed lookup hash. Inbound message text is retained for up to 30 days for command processing and support, then expires. Deleting an account disables messaging immediately and schedules personal product data for deletion. Minimal billing, fraud, consent, and opt-out records may be kept when legally or operationally required.
Your choices and contact
You can pause messaging, change quiet hours, reply STOP, request deletion, and contact support@gymbrotext.com about access or correction. Replying STOP is the fastest way to stop SMS and never requires visiting the website.