Privacy policy
This policy explains what the Poor Man's Gym app for Android ("the app") collects, why, who processes it, how long it is kept, and the choices you have. It covers the app and this website.
1. Who we are
Poor Man's Gym is made by Michael Donahue, an independent developer in Nashville, Tennessee, United States ("we", "us"). We are responsible for the personal information the app handles.
- Privacy questions and deletion requests: privacy@poormansgym.com
- General support: support@poormansgym.com
2. The short version
- The app helps you work out with household objects. It keeps your workouts, gear, body weight and measurements, and your XP, levels, streaks, badges and quests.
- You sign in with Google so your data can be backed up to your own account and synced between your devices.
- We use Firebase Analytics and Firebase Crashlytics to learn how the app is used and to fix crashes. They do not receive your workouts, weight or measurements.
- Health Connect is optional. Data from it is used only for the app's features, never for advertising, and never sold.
- The app has no ads. We do not sell your data.
- You can delete your account and its data at any time, in the app or without it.
3. What the app keeps on your phone
The app stores the following in a database on your phone, and uses it to build your workouts and show your progress:
- your profile: units (Metric or Imperial), fitness level, goals, target weight, weekly workout goal, and whether Health Connect is on;
- your workouts, sets (reps or seconds, the weight you used, how hard it felt), programs and routines;
- your gear, including items you create, their names and the weights you measured;
- your weigh-ins and body measurements;
- your XP, streaks, streak freezes, badges and quests;
- photos you choose to add in the app, if any.
Android's automatic device backup is turned off for this data; your backup is the account described below. Signing out clears this data from the phone.
4. Your account and cloud backup
The app asks you to sign in with your Google account. When you do:
- From Google, the app receives the basic profile Google shares with apps you sign in to: your name, email address and, if you have one, a link to your profile picture. Firebase Authentication also gives your account a user ID. We use these only to identify your account and show you who is signed in.
- Your app data (everything listed in section 3) is backed up to your own space in Google Firebase: Cloud Firestore for your records and Cloud Storage for Firebase for any photos you add. This lets you restore your data on a new phone and keep your devices in sync.
- Only you, signed in to your account, can read or change your backed-up data. Access rules on our Firebase project enforce this.
5. Analytics and crash reports
The app uses two Google Firebase services. The app tells you about them when you first set it up.
- Firebase Analytics tells us which screens and features are used, so we can improve the app. It collects usage events (such as a screen being opened or a workout being finished), an app-instance identifier, your device model, Android version, app version, language, and your approximate location at the country or region level, which Google works out from your IP address.
- Firebase Crashlytics sends us a report when the app crashes or hits certain errors (for example, a backup that failed). A report contains the error and where in the app it happened, a Firebase installation identifier, your device model, Android version, app version and the time.
Neither service receives your workouts, sets, weight, measurements, photos or Health Connect data. We do not use them for advertising.
6. Health Connect
Health Connect is an Android service that lets health and fitness apps share data on your phone, with your permission. Connecting the app to it is optional, and it is off until you turn it on. The app asks for exactly these permissions:
| Data type | Access | What the app does with it |
|---|---|---|
| Exercise sessions | Write only | When you finish a workout, the app saves it to Health Connect as a strength-training session with its start and end time, so your other fitness apps can count it. |
| Weight | Write | When you log a weigh-in in the app, it is saved to Health Connect, and updated or deleted there when you edit or delete it in the app. |
| Weight | Read | The app imports weight that other apps (such as a smart scale's app) saved to Health Connect, and adds it to your weigh-ins and weight chart. |
The app reads nothing else from Health Connect. It does not read in the background and does not ask for history older than 30 days. Syncing happens on your phone while the app is open.
How Health Connect data is used. Data the app reads from Health Connect is used only to provide the app's features to you: showing your weigh-ins, weight chart and progress. Weigh-ins imported from Health Connect are backed up to your account like any other weigh-in, so they come back on a new phone, and they are deleted when you delete your account. Health Connect data is never used for advertising, never sold, never used to decide credit, insurance or employment, never shared with anyone else, and never read by people, except when you ask us to look into a problem with your own data, or when required by law.
Limited Use. The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements.
You can turn Health Connect off at any time in the app (Profile → Health Connect → Turn off) or remove the app's permissions in Health Connect's own settings. What the app already saved to Health Connect stays there until you delete it in Health Connect.
7. How we use information
- to run the app's features: generating workouts, tracking your progress, and awarding XP, badges and quests;
- to back up your data to your account, restore it, and sync it between your devices;
- to understand which features are used and fix crashes and errors;
- to answer you when you email us;
- to keep the app and our Firebase project secure, and to meet legal obligations.
The app gives general fitness guidance. It does not make medical decisions about you.
8. Sharing, selling and ads
- The app shows no ads.
- We do not sell your personal information, and we do not share it with anyone for their own purposes, including advertising.
- Google provides Firebase (Authentication, Cloud Firestore, Cloud Storage, Analytics and Crashlytics) and processes data only on our behalf, as our service provider, under the Firebase terms.
- We may disclose information if the law requires it, or to protect the rights and safety of our users or others.
- If the app is ever transferred to a new owner, this policy would continue to apply to the data transferred with it, and we would tell you in advance.
9. How long data is kept
- On your phone: until you delete it in the app, sign out, clear the app's storage, or uninstall the app.
- In your account: for as long as your account exists. When you delete your account in the app, your account and its backed-up data are deleted from Firebase straight away. When you ask by email, we delete them within 30 days.
- Analytics: event data is kept for up to 14 months, then deleted automatically.
- Crash reports: kept for up to 90 days, then deleted automatically.
- Emails you send us: kept as long as we need them to help you, and a record of a deletion request for up to 12 months after we handle it.
Deleted data can remain for a limited time in Google's encrypted backup systems before it is overwritten.
10. Your choices and rights
- See and change your data in the app, and delete individual entries such as a weigh-in.
- Turn Health Connect off, or change its permissions, at any time.
- Sign out, which clears your data from the phone.
- Delete your account and data (section 11).
- Email privacy@poormansgym.com to ask for a copy of your data, to correct or delete it, or with any other privacy question.
Depending on where you live, you may have further rights, such as to object to or restrict processing, or to complain to your data protection authority. We will answer every request within 30 days, and we may need to confirm that the request comes from the account's owner. We will not treat you differently for using your rights.
11. Deleting your account and data
- In the app: Profile → Settings → Delete account. This deletes your account and all its backed-up data, and clears the app's data from your phone.
- Without the app: email privacy@poormansgym.com. The account deletion page has the steps and lists what is deleted and what is kept.
- On your phone only: uninstalling the app, or clearing its storage, deletes everything it stored on the phone. It does not delete your account.
12. Children
The app is made for adults and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you think a child has given us personal information, email privacy@poormansgym.com and we will delete it.
13. Security
Data sent between the app and Firebase is encrypted in transit (TLS), and Google encrypts it at rest. Access rules on our Firebase project let only you, signed in to your account, read or change your data. No method of storage or transmission is completely secure, but we work to protect your information and would tell you about a breach that affects you as the law requires.
14. Where data is stored
Your backed-up data is stored by Google Firebase in the United States. If you use the app from outside the United States, your information is transferred to and processed in the United States, where Google provides the safeguards described in its data processing terms.
15. This website
poormansgym.com uses no cookies, analytics or trackers. Our hosting provider, Firebase Hosting, keeps standard server logs (such as IP addresses and the pages requested) to deliver and protect the site.
16. Changes to this policy
If this policy changes, the new version will be posted at this address with a new date. If a change affects how we use data you have already given us, we will tell you in the app before it takes effect.
17. Contact
Michael Donahue, Nashville, Tennessee, United States
Privacy: privacy@poormansgym.com
Support: support@poormansgym.com
This policy is effective as of .