Privacy information
Understand where your account and gym information go.
Account and profile
Account credentials are managed by ASP.NET Identity. Account profile details, goals, profile photos and dated weight history use the application's backend. Never include sensitive personal information in equipment photos.
Browser storage and cookies
An encrypted browser session keeps you signed in. Your browser-local My Gym list, small saved photos, notes and preferences are encrypted and account-keyed, but are not synchronized to other devices. Clearing site data removes them. Necessary form-protection and short-lived social sign-in cookies support account workflows. Sign out on shared devices.
External services
Cloudflare Turnstile verifies account forms. Optional Google, Facebook and Microsoft sign-in sends you to the selected provider under its own privacy practices. Provider passwords are not collected by GymPilotIQ; provider access/refresh tokens are not saved to your app session.
Equipment photo identification sends the selected equipment image to the backend AI service. Manual catalog search does not require photo identification.
Before public release
This notice describes the current implementation. Operator contact details, retention/deletion procedures and final privacy terms still require publication before a public launch.