We check the gym. Not your life.

We collect account details, your verified phone number, consent evidence, subscription state, workout schedule, quiet hours, selected gym coordinates, reminder and delivery events, snooze use, and verification results needed to operate GymBro.

We use information to authenticate your account, schedule and deliver reminders you requested, verify user-initiated gym check-ins, process subscriptions, prevent abuse, provide support, and comply with law. We do not use SMS consent to enroll you in unrelated marketing.

When you open a tagged flyer link, we may store a random browser identifier and the flyer version in your browser for up to 30 days. This helps us count visits and understand which flyers lead to completed onboarding and a first paid subscription. We honor browser Do Not Track and Global Privacy Control signals for this measurement. We do not fingerprint your device or store your full browsing history or referrer URL.

If you complete onboarding within that period, we associate the first tagged flyer with your account. Individual visit records expire after 30 days; account attribution is removed when you delete your account. Aggregate campaign counts may be retained. Clearing browser storage removes the local identifier.

We do not share, sell, rent, or provide mobile phone numbers, SMS opt-in data, or messaging consent to third parties or affiliates for marketing or promotional purposes.

All other data-use and disclosure provisions in this policy exclude text-messaging originator opt-in data and consent. That information will not be shared with any third parties.

Message frequency varies with your selected workout schedule and intensity, up to six automated messages per day under the initial limits. Message and data rates may apply. Reply STOP to stop or HELP for help.

The web app requests foreground location only when you choose “Use my current location” while setting your gym or press the check-in button. The server calculates distance from your configured gym. It stores the verified result, time, rounded distance, and an accuracy bucket—not the exact transient check-in coordinates you submitted. GymBro does not continuously monitor background location.

Firebase and Google Cloud host account and product data, Stripe handles payment details, Google Maps Platform supplies gym search results and map imagery, and Twilio provides phone verification and SMS infrastructure. These companies act only as contracted processors for the operational functions GymBro directs. They may not use customer information for independent marketing, advertising, lead generation, or affiliate promotion.

Phone numbers are encrypted and paired with a keyed lookup hash. Inbound message text is retained for up to 30 days for command processing and support, then expires. Deleting an account disables messaging immediately and schedules personal product data for deletion. Minimal billing, fraud, consent, and opt-out records may be kept when legally or operationally required.

You can pause messaging, change quiet hours, reply STOP, request deletion, and contact support@gymbrotext.com about access or correction. Replying STOP is the fastest way to stop SMS and never requires visiting the website.