Privacy Policy

Effective date: April 25, 2026

This Privacy Policy describes how Gynus is operated by Kedson Alves da Silva ("we," "us," or "our") and how we collect, use, disclose, and protect information when you use the Gynus mobile application and related services.

1. Contact

If you have questions, requests, or complaints about this Privacy Policy or our data practices, contact us at kedson.42@gmail.com.

2. What Gynus Does

Gynus is a group workout habit app for small crews. It lets users join a group, log workouts, optionally attach photos and captions, and interact with other members through comments, reactions, and shared progress tracking.

3. Information We Collect

We collect the following categories of information:

A. Profile and access information

• Display name
• Access code used to claim a profile
• Tagline
• Accent color
• Optional profile image URL, if one is associated with your profile
• Internal profile identifiers
• Anonymous authentication and session identifiers used to bind a device session to a profile

B. Workout and group activity information

• Workout log date
• Optional workout caption
• Optional workout photo
• Comments and reactions you post
• Group membership and role information
• Group names, descriptions, and configured time zone
• Shared progress, streak, completion, and achievement data derived from group activity

C. Device, app, and local storage information

• The currently selected group ID stored on your device
• Authentication and session data stored on your device to keep you signed in
• Camera or photo library permission status, when you choose to use those features
• Technical data needed to upload media and operate the service, such as timestamps and request metadata

D. Information you choose to submit

Anything you include in captions, comments, or photos may contain personal information, depending on what you choose to share.

E. Information we do not currently request in this app build

In the current codebase reviewed for this draft, Gynus does not request your precise location, contacts, microphone, or advertising identifier, and it does not include third-party advertising SDKs.

4. How We Use Information

We use the information above to:

• Provide and operate Gynus
• Authenticate a device session and connect it to the correct profile
• Show your groups, workout feed, progress, achievements, comments, and reactions
• Upload and display workout photos you choose to post
• Synchronize activity across group members in near real time
• Maintain app security, detect misuse, debug errors, and improve reliability
• Comply with legal obligations and enforce our terms or community rules

We do not currently sell personal information or use the current app build for third-party advertising or cross-context behavioral advertising.

5. Camera and Photo Library Access

Gynus asks for camera and photo library access only when you choose to:

• Take a workout photo in the app
• Attach an existing photo from your library to a workout log

You can deny these permissions and still use the app without photo uploads. You can also change these permissions later in your device settings.

6. How Information Is Shared

We share information in the following ways:

A. With other members of your group

Because Gynus is a social accountability app, other members of your group may be able to see:

• Your display name and profile image
• Your workout logs, including workout dates, captions, and uploaded photos
• Your comments and reactions
• Your contribution to shared progress, streaks, and achievements

B. With service providers

We use third-party infrastructure providers to operate the app. In the current codebase, this includes Supabase for authentication, database, realtime features, and file storage. These providers process information on our behalf so the app can function.

C. Important current photo-sharing note

In the current implementation reviewed for this draft, workout photos are uploaded to cloud storage and served through a public URL. That means a workout photo is intended to appear in your group experience, but anyone who obtains the direct URL may also be able to access that image outside the app. If you do not want that risk, do not upload a workout photo until the storage design is changed.

D. Legal and safety disclosures

We may disclose information if reasonably necessary to:

• Comply with law, regulation, legal process, or valid government requests
• Protect the rights, safety, and security of users, the public, or our service
• Investigate fraud, abuse, or security issues

7. Data Retention

We retain personal information for as long as reasonably necessary to operate Gynus, maintain the group experience, comply with legal obligations, resolve disputes, and enforce agreements.

In the current app build:

• Local session data may remain on your device until you reset the app state, clear app storage, or uninstall the app
• Workout logs, comments, reactions, profile data, and uploaded photos may remain in the backend until they are deleted by us or at your request
• The in-app "Release tester" action unbinds the current device session from a claimed profile, but it does not by itself delete profile, workout, comment, reaction, or photo data from the backend

8. Your Choices and Rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or export of your personal information, and to object to or restrict certain processing.

You can currently:

• Choose not to upload photos
• Control camera and photo library permissions in your device settings
• Use the in-app release and reset flow to unbind the current device from a claimed profile
• Request privacy help, correction, or deletion by contacting us at kedson.42@gmail.com

If you are in the EEA, UK, or another jurisdiction with similar privacy rights, you may also have the right to lodge a complaint with your local data protection authority.

We do not currently use automated decision-making or profiling that produces legal or similarly significant effects.

9. Legal Bases for Processing (EEA/UK)

If EEA or UK privacy law applies, we generally rely on the following legal bases:

• Performance of a contract: to provide the app, connect you with your group, and display your activity and content
• Consent: when you choose to grant camera or photo library access and upload optional media
• Legitimate interests: to secure, maintain, troubleshoot, and improve the service, and to prevent misuse
• Legal obligation: where processing is required to comply with applicable law

10. International Transfers

Your information may be processed in countries other than the country where you live, depending on where we and our service providers operate our systems. Where required by law, we will use appropriate safeguards for international transfers of personal data.

11. Children's Privacy

Gynus is not directed to children under 13, or the higher minimum age required by local law. If you believe a child has provided personal information to us, contact us at kedson.42@gmail.com so we can review and address the issue.

12. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where required, provide additional notice.