Privacy policy
Last updated: September 8, 2026
This policy explains how Garage Gym Company collects, uses, and shares information when you use Garage Gym App at garagegymapp.com. It covers Google accounts, the guided demo, billing, analytics, and workout data.
In this policy, “we,” “us,” and “our” mean Garage Gym Company. Using the service means you understand this policy. The Terms of service control the contract. The Health and safety disclaimer covers training risk, not privacy.
Information we collect
We collect the following categories of information:
- Account identifiers from Google sign-in, including email address, display name, and a unique user id
- Workout profile data you save, such as equipment, preferences, schedule, session history, loads, and exercise feedback
- Billing status, plan, trial dates, and customer ids from Stripe. We do not store full payment card numbers on our servers
- Product analytics, such as page views, button actions, session timing, device class, and error reports tied to your account id
- Demo identifiers stored in your browser, including a demo cookie and local demo user id, when you try a demo workout
- Technical logs needed to run and secure the service, such as request time, host, and coarse device or browser signals
How we use information
We use this information to:
- Authenticate you and keep you signed in on the public app
- Generate, save, and display workouts from the inputs you give us
- Enforce weekly build limits and membership status
- Seed and reset the guided demo environment
- Diagnose failures, prevent abuse, and improve programming quality
- Respond to support requests you send us
Workout generation can send session constraints and related profile context to model providers so the app can assemble a session. Do not enter secrets or unrelated personal data in workout notes.
Demo data
A demo session creates a temporary dummy user on this device. We may store seeded workouts for that dummy id so Home looks lived-in. The demo cookie lets the public site keep you on Home instead of Welcome while the demo is active.
The demo lives in this browser tab. Refreshing keeps it; closing the tab, opening a new one, or clearing site data ends it. Demo records are not a substitute for a signed-in membership log and may be deleted without notice.
Cookies and device storage
The public app uses browser storage to operate, including:
- A demo-trial cookie scoped to garagegymapp.com
- Local storage for demo flags, appearance, and cached home data
- Session storage for analytics session ids
- Google authentication cookies and storage when you sign in
These are needed to run the product you asked for. Clearing cookies or site data can sign you out or end a demo.
Processors we use
We use vendors to run the service. They process data only to provide their function:
- Google Firebase Authentication for sign-in. See Google’s privacy policy
- Stripe for checkout, tax-relevant billing records, and the customer portal. See Stripe’s privacy policy
- Anthropic and related model infrastructure when a session is generated with a language model. See Anthropic’s privacy policy
- Google Cloud hosting and Firestore for the application and datastore that persist accounts and workouts
We do not sell your personal information. We do not share it for cross-context behavioral advertising.
Fitness notes are not medical records
Equipment lists, injury notes, loads, and exercise feedback are fitness context you choose to enter so the app can program sessions. Garage Gym Company is not a covered entity or business associate under HIPAA. This service is not a medical record and is not protected health information under HIPAA.
When we share information
We share information only when:
- A processor listed above needs it to provide the service
- You ask us to, such as a billing-portal or support request
- The law requires it, or we must protect rights, safety, or fraud
- The business transfers as part of a merger or sale, with this policy still applying to the transferred data
Retention
Account and workout data stay until you ask us to delete them or we close the account. Billing records can be kept longer when tax, audit, or dispute rules require it. Analytics events are kept long enough to operate and debug the product, then deleted or aggregated.
Demo records can be removed when the demo ends or when we reset dummy environments.
Security
We use access controls, encrypted transport, and vendor security features that match a hosted consumer app. No method of storage or transmission is perfectly secure. You also protect the Google account you use to sign in.
Children
The service is for adults who are at least 18 years old. We do not knowingly collect personal information from children. If you believe a minor created an account, email us and we will delete it.
Your choices and rights
You can update equipment and training preferences in the app. You can cancel a membership in Settings through Stripe. You can end a demo by refreshing or clearing site data.
You may ask us for a copy of the personal information we hold, or ask us to correct or delete it, subject to legal holds. Email the address below from the same inbox tied to your account when you can. We may ask you to verify the account before we copy, correct, or delete personal information. California residents may also request to know, delete, or correct personal information as allowed by the California Consumer Privacy Act. We will not discriminate against you for exercising those rights.
International visitors
The service is hosted in the United States. If you use it from another country, you understand that your information is processed in the United States, which may have different data-protection laws than your home country.
Changes to this policy
We may update this policy. The “Last updated” date will change when we do. Continued use after an update means you accept the revised policy.
How to contact us
Email support@garagegymapp.com for questions about this page or Garage Gym App.