Privacy Policy

1. Who we are

NotForGym (the "App") is an iPhone app developed and published by Hüseyin Emre Gürbüz, an individual developer based in Turkey ("we", "us"). For the data described in this policy that we decide how to process, we are the data controller. You can reach us at notforsupport@notforgym.com.

2. Data that stays with you

The App stores what you enter so it can work:

• workouts, exercises, sets, weights, reps, durations, effort ratings, notes and personal records;
• plans (routines) and custom exercises;
• body measurements such as body weight, body-fat percentage and girth measurements;
• profile settings: the name or nickname you type, units, rest-timer length, goals, height and weekly workout target.

Where it is stored:

• On your device. Everything is saved locally on your iPhone.
• In your private iCloud. If you're signed in to iCloud, the App syncs this data through Apple's CloudKit private database and iCloud key-value storage, both tied to your Apple Account. This storage belongs to you and we have no access to it. Apple's handling of iCloud data is covered by the Apple Privacy Policy. iCloud sync uses silent notifications from Apple to learn when new data is available.
• Not on our servers. We don't run any server for the App. We don't receive, collect, sell or share your training, body or profile data.

3. Apple Health

If you turn on Save to Apple Health (Profile › Sync), the App writes each finished workout to Apple Health as a strength training workout. It includes the start and end time, an estimated active energy (calorie) value, the workout name and the total volume. The App asks only for permission to write and does not read your Health data. Each record carries a workout ID, and before saving, the App checks only the workouts it saved itself, so the same workout isn't saved twice.

Data written to Apple Health through HealthKit:

• is not used for advertising, marketing or data mining;
• is not shared with or sold to third parties, including advertising networks and data brokers;
• is not stored by us in iCloud or anywhere outside Apple Health.

You can turn this off in the App at any time, or manage permissions in the Health app (your profile picture › Apps › NotForGym). Turning this off doesn't remove workouts already saved; you can delete them in the Health app.

4. Advertising (Google AdMob)

The free version shows banner ads and, occasionally, a full-screen ad when you open a past workout from History. Ads are never shown during an active workout. Ads are served by Google through the Google Mobile Ads SDK. Google's User Messaging Platform (UMP) SDK handles consent.

What Google may collect

When ads are enabled, Google may collect and process:

• device identifiers: the Advertising Identifier (IDFA), only if you allow tracking in the iOS prompt, and the identifier for vendors (IDFV);
• IP address and an approximate location derived from it;
• advertising and usage data: which ads you saw or tapped, app launches and interactions with ads;
• diagnostic data: crash and performance data from the ad SDK.

Google uses this data to deliver, personalize (where you allow it) and measure ads, to prevent fraud and to improve its services. Google acts as an independent controller for this data. For details, see How Google uses information from sites or apps that use its services, How Google uses data in advertising and the Google Privacy Policy.

We don't send Google your workouts, measurements, notes, name or Apple Health data.

Your choices

• Consent (EEA, UK and Switzerland, and other places where required). Before any ads are requested, the App asks for your choice through Google's consent form. You can change it later in Profile › Support › Ad privacy options. This button appears wherever the consent form applies. If you don't consent, Google may still show limited or non-personalized ads.
• App Tracking Transparency. After the consent step, iOS asks whether the App may track you. If you choose "Ask App Not to Track", your IDFA is not shared and ads are not personalized based on your activity in other apps. You can change this in Settings › Privacy & Security › Tracking.
• Google ad settings. You can manage how Google personalizes ads in My Ad Center.
• Remove ads. A one-time in-app purchase turns off all ads. After that, the App no longer starts the Google Mobile Ads SDK and no ads are requested.

5. In-app purchases

Purchases are handled by Apple through the App Store. We never receive your payment details. The App only asks Apple whether your Apple Account owns the "Remove Ads" purchase so it can unlock it on your devices.

6. Things you choose to share

• CSV export and plan sharing. Workout and plan files are created on your device and go only where you send them through the iOS share sheet.
• Feedback email. If you contact us from the App, your email app opens with the App version, build number, device model and iOS version filled in. We use your message and email address only to reply and to fix problems.
• App Store rating. The App may show Apple's standard rating prompt. Ratings and reviews go to Apple.

7. Permissions the App asks for

The App doesn't use your camera, photos, microphone, contacts or precise location.

8. How long data is kept and how to delete it

• In the App: Profile › Erase all data, confirmed with Face ID or your passcode, permanently removes your workouts, plans, measurements, custom exercises and profile settings from the device and from your iCloud (and, through sync, from your other devices). Your "Remove Ads" purchase is kept because it belongs to your Apple Account.
• iCloud: You can also delete the App's iCloud data in Settings › your name › iCloud › Manage Account Storage.
• Apple Health: Erasing your data in the App doesn't remove workouts already written to Health; you can delete them in the Health app.
• Deleting the App removes its local data. Data in your iCloud stays until you delete it as described above.
• Ad data: Google keeps data under its own retention policies. You can manage it with the tools linked in section 4.
• Emails: We keep support emails only as long as needed to handle your request, and delete them within 12 months after the conversation ends.

9. Legal bases (EEA, UK and Switzerland)

• Consent (GDPR Art. 6(1)(a)): personalized ads and the related storage of and access to information on your device. You can withdraw consent at any time in Ad privacy options. Withdrawal doesn't affect processing that took place before it.
• Legitimate interests (Art. 6(1)(f)): showing non-personalized ads to keep the App free, preventing ad fraud, and answering your emails.
• Contract (Art. 6(1)(b)): providing the "Remove Ads" purchase you made.

Data you keep in the App and in your iCloud isn't processed by us. Apple processes it to provide iCloud to you.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or port your personal data, to restrict or object to processing, and to withdraw consent. You can do most of this directly in the App: edit any entry, export to CSV, delete all data or change ad consent. Because we don't hold your training data, we can't retrieve or delete it for you. For ad data, use Google's tools in section 4. For anything else, email notforsupport@notforgym.com. We reply within 30 days.

You can also complain to your data protection authority.

Türkiye (KVKK)

If you are in Türkiye, this policy also serves as the information notice under the Personal Data Protection Law No. 6698 (KVKK). You can exercise your rights under Article 11 of KVKK by emailing notforsupport@notforgym.com, and you can complain to the Personal Data Protection Authority (KVKK). Data collected by Google for ads may be transferred abroad under Google's safeguards.

United States (including California)

We don't sell personal information for money and we don't collect your training data. When you allow tracking, Google's use of device identifiers and ad interaction data for personalized ads may count as "sharing" for cross-context behavioral advertising under California law (CCPA/CPRA). You can opt out by choosing "Ask App Not to Track" or by turning off Settings › Privacy & Security › Tracking. We don't use or disclose sensitive personal information for purposes that require a right to limit, and we won't treat you differently for exercising your rights.

11. Children

The App is not directed to children under 13, and we don't knowingly collect personal information from them. In the EEA and UK, users under the age of digital consent in their country (13 to 16) should ask a parent or guardian before agreeing to personalized ads. If you believe a child has given us personal information, for example by email, contact us and we'll delete it.

12. Security

Your data is protected by iOS data protection on your device and by Apple's security for iCloud. iCloud sync and ad requests use encrypted connections.

13. International transfers

Google and Apple may process data in countries other than yours, including the United States, under their own safeguards (such as Standard Contractual Clauses).

14. Changes to this policy

If we change this policy, we'll update this page and the effective date above. We'll also mention important changes in the App's release notes. If a change needs your consent under the law, we'll ask for it in the App.

15. Contact

Questions or requests about privacy: notforsupport@notforgym.com
Hüseyin Emre Gürbüz, Turkey