GluteMax Privacy Policy

Information we collect

We collect account details, fitness preferences and limitations, workouts and progress, optional photos, community content, support messages, and basic technical data. Information comes from you, app activity, sign-in providers, and people who interact with you.

For subscriptions, we process Apple purchase identifiers, subscription status and expiry, and the account linked to a purchase. Superwall processes purchase and paywall activity, account or guest identifiers, and app/device information to operate checkout and measure paywall performance. We do not send it your fitness or health answers, workouts, photos or AI conversations.

Sentry receives crash diagnostics, fixed error codes and basic app/operating-system information. The app excludes account identifiers and user content from these reports and does not capture screenshots or session replay.

When product analytics is enabled, Mixpanel receives setup page names and milestones, basic operation-failure categories, workout completion events, timestamps and app/device information. Random installation identifiers and hashed account identifiers help us measure setup drop-off and continued use. These records are account or device linked; they are not anonymous. We do not send Mixpanel setup answers, measurements, exercise details, weights, notes, photos, sign-in details or AI conversations.

How we use and share information

We use information to provide and personalize features, sync records, improve setup and continued use, offer support, and protect the service. Providers include Supabase for hosting, Apple and Google for sign-in, OpenAI for AI, Superwall and Apple for subscriptions, Sentry for crash diagnostics, Mixpanel for product analytics, and support providers. Those acting for us must use data only as authorized and provide equivalent protection.

We do not sell personal information or use targeted advertising. Law, safety, or a business transfer may require disclosure, subject to health-data restrictions. Legal grounds include requested services, consent, legitimate interests, and legal obligations.

Optional AI

When you build a plan, OpenAI receives training preferences through our server. Coach asks separately before sending chats and relevant workout/progress summaries. Photos, body measurements, and original medical notes are not automatically included in those requests; anything you type in Coach may be sent. Reset Coach and photo-scan permissions in Profile → Your data; this cannot recall earlier requests. Plan generation has no separate provider-permission prompt.

Photo scans ask separately before sending your selected progress photo, an earlier comparison photo when available, capture dates and exercise names from your saved routine through our server to OpenAI. Photos are excluded from Coach and plan requests. Scan feedback is saved on your device. Keeping a photo does not require analysis. After you allow scans, new photo check-ins are analyzed automatically. You can stop future scans by resetting AI permissions in Profile → Your data; this cannot recall requests already sent.

OpenAI does not train on API data by default, but safety and legal retention may apply. See OpenAI’s data controls.

Photos and community

Progress photos sync privately. Selected photos are sent to OpenAI only when you allow the separate photo-scan feature. Public questions, replies, and author names are visible to anyone. Group members and signed-in invitation holders see group information; members see shared content and may keep copies.

All app accounts are included in the weekly leaderboard. Signed-in members can see profile names and completed workout-day totals for the top 100 accounts, plus their own position. The leaderboard does not show workout details, weights, notes or photos.

Leaving a group or deleting a workout does not erase shared content. Deleting questions or owned groups also removes others’ contributions.

Your choices and data

Manage preferences, sharing, and permissions in-app. Delete your account in Profile → Account or email us. Account deletion also removes owned groups. Sign-out or uninstalling is not deletion.

Cancel an App Store subscription through your Apple Account subscription settings. Deleting the GluteMax account does not cancel that subscription.

Confirmed account deletion resets the device's analytics identity, clears local counting records and stops old pending analytics events from being sent. An inactive analytics cache can remain on the device. This cannot recall events already sent or in transit, or automatically erase analytics already received by Mixpanel. Contact us for access or deletion requests covering provider-held records; we handle those requests with our processors as required.

We retain data as needed for service, recovery, security, and legal obligations. Cleanup takes time; backups, logs, recovery records, and recipient copies may remain where lawfully permitted. Processing may occur outside your country with required safeguards; security is not guaranteed.

Depending on your location, you may request access, correction, deletion, copies, restriction, objection, or consent withdrawal, and appeal or complain to a privacy authority. Email us; we verify requests and follow legal deadlines without discrimination.

Children

GluteMax is for ages 13+ or the higher local minimum. Under-18 users need guardian permission for AI. Age and permission are not independently verified. Contact us about underage use.

This website

Cloudflare receives IP addresses and browser/request details to deliver this website and provides basic traffic statistics. Essential security cookies may be used. We use no advertising or marketing analytics and do not respond to Do Not Track. Support emails include your address, message, and attachments. External services have their own policies.

Consumer health data

These additional rights and rules apply where consumer health-data laws cover our processing.

Health data we collect and its sources

Health data includes body details, fitness goals and limitations, workouts, progress, photos, and health details in messages. Sources include you, camera use, app activity, generated records, and other users.

Why we collect and use it

We use it for requested fitness features, syncing, permitted AI, sharing, support, security, recovery and, when enabled, measuring workout completion to improve continued use. We do not sell it, target ads, or use health-related geofencing.

Categories shared and recipients

Supabase stores fitness, photo, and community records; OpenAI receives the permitted context described above. Community viewers receive public posts and chosen group shares; signed-in members also receive leaderboard profile names and weekly workout-day totals. Support providers handle your messages. No affiliates receive health data. Required separate consent and health-data restrictions apply.

When product analytics is enabled, Mixpanel receives the fact that a workout was completed, its analytics event time and pseudonymous identifiers, without the workout's exercises, weights, notes, body measurements or photos.

Your health-data rights

Where applicable, you can confirm processing, access data and recipient information, withdraw consent, stop processing, or request deletion. Email us with “GluteMax health data request” and your account/request details. We verify requests and follow legal deadlines and exceptions without discrimination.

Withdrawal and deletion controls

Use in-app controls or contact us. Covered deletion rights take priority over ordinary retention and extend to our processors where required.

Appeals and complaints

Email us with “GluteMax health data appeal,” the decision, and your reason. Legal appeal deadlines apply. You may complain to the Washington Attorney General, Nevada Attorney General, or your local privacy authority.

Policy updates

We disclose new health-data categories, purposes, or recipients and obtain required consent before use. Material changes receive required notice.

Updates and contact

We publish changes here and notify you of material changes through the website, app, or email, seeking permission where required. Banana Apps LLC, Florida, United States; mailing address available on request.

Contact email: team@getbananaapps.com.