Privacy Policy

Last updated: 6 October 2026. This policy explains what GainsWithAI ("we"), operated by Rimfrost LLC, 2261 Market Street STE 86548, San Francisco, CA 94114, USA, collects, why, and who processes it for us.

What we collect

Account: email address and, if you use Sign in with Apple or Google, the name you choose to share.
Profile: your answers during setup, such as goal, experience, training days, split and units, and, if you add them, birthday, height and body weight.
Workouts: exercises, sets, reps, weight, RPE, notes, your training plan, body measurements and progress photos you add.
Voice recordings: audio you record to log a workout is sent to our server and on to our AI provider to be turned into text. We do not store the audio. We keep the transcript with the workout it created.
Coach chats: the questions you ask the coach and its answers.
Health data (optional): with your permission we read heart rate variability (HRV), sleep, resting heart rate and body weight from Apple Health or Health Connect. Your phone turns them into one summary per day, and only these daily summaries leave your device. If you allow it, we also save the workouts you log to Apple Health or Health Connect.
Purchases: subscription status and purchase history from Apple or Google. We never see your card details.
Usage and diagnostics: in-app events (for example which features you use, paywall views and whether a voice log worked), device model, and app version. These never include health values, transcripts, coach messages, photos or anything else you type or say.
Voice demo before sign-up: if you try the voice demo before creating an account, we use an identifier for your device, stored only in hashed form, to limit the demo to 5 tries a day.
Website waitlist and contact form: if you join the launch waitlist on our website, your email address and, if you pick one, iPhone or Android. If you write to us through the contact form, your name, email address, topic and message. For both we also keep a keyed hash of your IP address (never the address itself) to stop spam and abuse.

How we use it

Only to run and improve the app: logging, progress, recovery scores, coach answers, your subscription and support, and for the website waitlist and contact form as described below. Health data is used only for your recovery scores and the plan changes based on them. We do not sell your data or use it for advertising, and we never use health data for advertising or marketing.

Launch waitlist and contact form

We use your waitlist email address only to tell you when GainsWithAI launches. You agree to this by joining the waitlist, and you can change your mind at any time: use the unsubscribe link in our email or write to [email protected], and we delete your address. We use what you send through the contact form only to answer you. Both are stored by Cloudflare in the European Union. We get a notification of each new sign-up and message, with the details you entered, in a private Telegram chat. We keep waitlist addresses until you unsubscribe or ask us to delete them, and contact messages for as long as we need them to help you; email us to have either deleted sooner.

AI features

Voice transcription, turning what you say or paste into sets, and coach answers are produced by AI models. For each request we send only what that feature needs (your recording, the text you said or pasted, or your coach question with the training history, plan and recovery scores needed to answer it) to OpenRouter, which passes it to the provider that runs the model. They process it to return a result to us and are not allowed to use it to train their models. AI output can be wrong, so you review every logged set before it is saved.

Who processes it

We use these service providers under data processing agreements:

Google (Firebase and Google Cloud): sign-in, database, storage for progress photos, and the server functions that handle AI requests, subscriptions and account deletion.
OpenRouter and the AI model providers it routes requests to: voice transcription, workout parsing and coach answers.
RevenueCat, with Apple and Google: subscriptions, free trials and restoring purchases.
PostHog (EU cloud): product analytics. Events are linked to your account ID after you sign up. We do not use them to track you across other companies' apps or websites.
Cloudflare: hosts this website and stores waitlist sign-ups and contact form messages.
Telegram: delivers our notifications about new waitlist sign-ups and contact messages.

Where your data is stored

We store and process your data in the United States. Your profile, workouts, transcripts, health summaries, progress photos and coach chats are kept in Google Cloud (Firebase) locations in the United States, and our server functions run there too (us-central1). The exceptions are product analytics, which are stored in PostHog's EU cloud in the European Union, and waitlist sign-ups and contact form messages from our website, which Cloudflare stores in the European Union. Our other providers process data mainly in the United States: OpenRouter and the AI model providers it routes requests to (each AI request), RevenueCat, Apple and Google (subscriptions). Sign-in uses Firebase Authentication, a global Google service, so your email address and sign-in details may also be processed in other countries where Google operates.

If you are in the European Union, the United Kingdom or Switzerland, this means your data is transferred to the United States. Where a provider is certified under the EU-U.S. Data Privacy Framework (and its UK Extension and the Swiss-U.S. Data Privacy Framework), we rely on that certification. Otherwise, we rely on Standard Contractual Clauses approved by the European Commission, with the UK and Swiss addenda where required.

Your rights

You can export your workouts (Profile, Export CSV) or delete your account and data at any time (Profile, Account, Delete account), or email [email protected]. You can turn off Apple Health or Health Connect access at any time in your phone's settings (see how).

Depending on where you live, you may have more rights. In the European Union and the United Kingdom, the GDPR and the UK GDPR give you the right to access, correct, delete and port your data, to restrict or object to how we use it, and to withdraw consent at any time. You may also complain to your local data protection authority. If you live in California, the CCPA (as amended by the CPRA) gives you the right to know what personal information we collect and how we use it, to access, correct and delete it, and not to be treated differently for using these rights. We do not sell or share your personal information as those laws define it. To use any of these rights, email [email protected].

Retention

We keep your data while your account is active. When you delete your account, we delete your profile, workouts, transcripts, health summaries, photos and coach chats within 30 days, except where the law requires us to keep something longer, such as purchase records.

Children

GainsWithAI is not intended for anyone under 16.

Not medical advice

Recovery scores and coaching are for general fitness only. They are not a medical device and not medical advice.