Your progress is personal.
GymFit Map is operated by Ankur Soni. This policy explains the information used to run your workout journal and the choices you have. Last updated 4 November 2026.
What we collect and why
We use your verified mobile number to sign you in, a permanent UUID to link your records, and an optional name to personalise your journal. We store the exercises, sets, dates, and notes you choose to record, plus your display preferences.
Who processes the data
Supabase handles account authentication, workout storage and uploaded exercise images. An SMS provider delivers sign-in codes. Vercel hosts the app, Cloudflare Turnstile helps protect forms from abuse, and Resend delivers contact messages to support. Contact messages arrive in our support email inbox. These providers may process information outside India depending on their services and hosting locations. Contact us if you need more detail about processing that applies to your account.
Optional analytics
When enabled by configuration and with your consent, Google Analytics receives limited page paths and product events. We exclude phone numbers, names, emails, notes, authentication tokens, search terms, and raw workouts. You can decline or change your preference using the privacy control on any page.
Access, export, and deletion
Open Settings to export your records or permanently delete your account after a recent sign-in. Deletion removes your live profile, preferences, favourites, custom exercises and workouts. Retained security and diagnostic records lose their member identifier. Copies in backups expire under the hosting provider’s backup schedule and may not disappear immediately. Contact support with questions about deletion or backup retention.
Security and retention
Access controls keep workout records private. We do not store sign-in codes in GymFit Map’s application tables. Restricted diagnostics record the time, error category, request reference, operation and member identifier when available so we can investigate failures. They exclude phone numbers, sign-in codes, tokens and workout content. Your browser can temporarily queue a small number of reports during connection failures. We use a 30-day cleanup schedule for application diagnostics; hosting logs and backups have separate retention schedules. Account deletion removes the member link from retained application logs.
Your choices and contact
Contact Ankur Soni at ankursoni2974@gmail.com for privacy questions, access or correction requests, deletion issues, complaints and account recovery. We may need to verify your identity before acting on an account request. Never send sign-in codes, passwords or access tokens.
Email privacy and supportContact messages and policy updates
When you contact us, we use the name, email address, topic and message you provide to respond and investigate your request. Messages are delivered through Resend and retained in our support inbox as needed to handle the conversation. They are not added to your workout journal. We may update this policy as the service changes and will show the updated date on this page.