Privacy Policy

This Policy explains what personal data Gojan uses (the iOS and Android app, the trainer portal and the gojan.app site, together the "Service"), what for, who sees it, who we share it with, how long we keep it, and what you can do about it. The controller is Ondaform Labs LLC (30 N Gould St, Ste N, Sheridan, WY 82801, USA). Privacy contact: team@gojan.app.

1. In short

• We do not sell your data and we show no ads inside Gojan. We do advertise Gojan on Google: to know whether an ad worked, on Android we tell Google when someone who installed the app opens it for the first time, finishes onboarding or does their first workout, together with their phone's advertising ID. Nothing else: not your routines, your messages or your health data. With that data Google can also show you Gojan ads again in other apps and sites (remarketing; see §8).
• Apple Health and Health Connect data is read only if you connect it, we never write or change it, and it is never used for advertising.
• So the coach can answer and to build your routines, your messages, your training profile, your training record (which days you trained, which routine and which exercises you did, with their sets, reps and weights) and, if you connected Apple Health or Health Connect, your latest health summary are sent to Anthropic (the AI model provider), only if you turn on «Usar Gojan AI» (Use Gojan AI); your health data goes only if you also turned on «Usar mis datos de salud» (Use my health data). They are two separate, optional permissions, and you can change them at any time. Anthropic does not use them to train its models.
• Your friends see your training activity, and the trainers you link with see your profile, routines, logs and, if you turned on «Usar mis datos de salud» (Use my health data), all your health data (see §7).
• You can delete your account and your data at any time from the app or from gojan.app/en/delete-account.

2. Data we use

• Account: name, email and password (stored encrypted), or what Apple or Google pass us if you sign in with them (name and email; Apple may give a relay email). Your username and your profile photo, if you add one.
• Training profile: goals, number and length of sessions, equipment, preferences, what you find hard about training, your gym, date of birth (to work out your age), gender, starting and target weight, height, injuries and health conditions you declare, and your answers to the physical activity readiness questionnaire (PAR-Q).
• Apple Health (iOS) and Health Connect (Android) data, if you connect them: steps, distance, active calories, heart rate and resting heart rate, sleep (total and by stage), weight, body fat percentage and workouts (type, time and length). See §5.
• Training log: your routines, the sets, weights and reps you log, your sessions, records and streaks, and your gym visits.
• Location (optional): see §6.
• Photos (optional): your profile photo, a session photo, the photos you send in chat to the coach or to your trainer, the photos of the routine you do today, if you send them when building your first routine, and, if you are a trainer, the photo of your certificate or diploma. We use the camera or your gallery only when you pick a photo, and we compress photos on your phone before uploading them. We store the photos of your routine as soon as they arrive, even if they can't be read or your first routine doesn't get built, so our team can look at them and understand what went wrong. No other user sees them, and they are kept until you delete your account.
• Your medical clearance (optional): if you upload it, the file (a photo or a PDF), its date and until when it is valid, the requests you get and whom you sent it to. Only someone who asked for it and to whom you send it sees it (see §7).
• Voice (optional): when you dictate a message, your phone's speech recognition (Apple's or Google's) turns it into text; depending on your device, that recognition may run on Apple's or Google's servers. We never receive or store the audio: only the text you choose to send.
• Messages: your conversations with the AI coach, with your trainers and with Gojan support, a summary of older conversations the AI writes for context, the feedback and reports you send us.
• Connections: friends, requests, blocks, linked trainers, the reactions you give and receive, the gym you joined and the trainers it assigns you.
• If you are a trainer: your public profile (name, photo, description, specialties, format, gyms and, if you add it, your WhatsApp), your certifications, your students and the payments from your students you record.
• Technical and usage data: user ID, push notification token, Firebase installation ID, device model and operating system, app version, the actions you take in the app (for example opening a screen or finishing a session), error logs and crash reports. On Android, also your phone's advertising ID and, if you installed the app from an ad, which ad or campaign your install came from. We also use Gojan's own install identifier, generated on your phone, to understand how the app is used even before you sign in. On Android, Google estimates your general area from your IP address.
• Legal records: which version of these documents you accepted and when, and what you decided and when about «Usar mis datos de salud», «Usar Gojan AI» and «Usar Gojan AI en soporte» (Use Gojan AI in support).
• Face ID or fingerprint sign-in (optional): handled by your phone; your biometric data never leaves it and never reaches us.

3. What we use it for

• Creating your account and keeping you signed in.
• Building and adjusting your routines and running the AI coach, using your profile, your log and, if connected, your health data.
• Showing your progress, your streaks and your time at the gym.
• The social features: your friends, the feed, copying routines, and your trainers.
• Sending to a human review by a certified trainer the routines of anyone whose readiness questionnaire calls for extra care (see §7).
• Sending you Service notifications and emails (sign-in codes, account notices, reminders you can turn off).
• Handling questions and reports, moderating content, preventing abuse and keeping the Service secure.
• Understanding how the Service is used and fixing bugs, with usage events and error logs.
• Measuring our advertising campaigns (Android only): learning which ads bring people who finish onboarding and train, and letting Google show our ads to similar people. Only the milestones in §8 are used for this, never your health data, your messages or your photos.
• Showing you our ads again (remarketing, Android only): letting Google show you Gojan ads in other apps and sites based on those same milestones, for example if you installed the app and did not finish onboarding. Only the advertising ID and the milestones in §8 are used.
• Complying with the law.

4. Legal bases

We process your data (a) to provide the Service you asked for when accepting the Terms; (b) with your consent, which you can withdraw at any time, for health data (what you declare and what comes from Apple Health and Health Connect), your medical clearance (your consent is sending it to whoever asked, to each one separately), location, sending data to the AI provider, notifications and, on Android, measuring our advertising campaigns and showing you our ads again (you give this advertising consent by accepting this Policy in the app, and you withdraw it as §8 says); (c) for our legitimate interest in keeping the Service secure and understanding how it is used, which you can object to at any time; and (d) to comply with the law. Health data is sensitive data under Argentina's Law 25.326: we process it only with your express consent and for the purposes in this Policy.

5. Apple Health and Health Connect data

• Your consent. The injuries and conditions you declare (a disability included), your readiness questionnaire (PAR-Q) answers, and Apple Health and Health Connect data are health data. We use them only if you turn on «Usar mis datos de salud» (Use my health data), a separate and optional permission we ask for before any health question (if you already had an account, once when you open the app). If you don't turn it on, those questions are skipped and your routine is built without them; without the questionnaire, it doesn't go through a certified trainer's review either (§7). You can change it at any time in Perfil → Privacidad → Tu salud y Gojan AI (Profile → Privacy → Your health and Gojan AI). Connecting Apple Health or Health Connect is optional.
• Apple Health and Health Connect are read-only. You connect them during onboarding or in Profile. Gojan never writes or changes anything in Apple Health or Health Connect.
• What we read: the types in §2, and only those you authorize. From them we keep one summary per day. Once connected, they are read again when you open the app, at most once an hour.
• What for: personalizing your routines and recovery, showing your progress, and giving the coach context.
• Who it is shared with: only Supabase (where it is stored), Anthropic if you also turned on «Usar Gojan AI» (the latest summary goes with each message to the coach) and the trainers you link with, if you turned on «Usar mis datos de salud» (Use my health data) (see §7). Your medical clearance goes only to whoever you send it to (see §7). We never use it for advertising or marketing, never sell it or give it to data brokers, and it is never used to decide on credit, insurance or employment. We do not store it in iCloud.
• Team access: a limited number of authorized team members can access it to operate, secure and support the Service, under a duty of confidentiality. Beyond that, we only look at it if you ask us to (for example, to fix a problem), if the law requires it, or aggregated so it does not identify you.
• Health Connect: the use of information received from Health Connect adheres to the Google Play Health permissions policy, including its Limited Use requirements.
• How to stop it: turn off «Usar mis datos de salud» in Perfil → Privacidad → Tu salud y Gojan AI (Profile → Privacy → Your health and Gojan AI). We stop using it: it doesn't go to the AI, your trainers and the reviewing trainer stop seeing it, and your phone stops syncing Apple Health or Health Connect. It stays stored, unused, until you tap «Borrar mis datos de salud» (Delete my health data) on that same screen, which deletes your injuries and conditions, your PAR-Q answers and what came from Apple Health or Health Connect (the weight you entered by hand stays), or until you delete your account. If you turn it back on, what you didn't delete is used again. You can also remove Gojan's access in the Apple Health or Health Connect settings, which stops new reads.

6. Location

• Your chosen gym: we store the gym you choose (name, address and coordinates).
• Gym visits, with background location (optional): if you turn on visit detection and give Gojan the "always" location permission, your phone watches an area of about 120 meters around your gym, even when the app is closed, and tells us when you arrive and when you leave. We only store the arrival and departure times at your gym; your position never leaves the phone and we keep no history of where you have been. We use it to measure your training time and, if you turned on «Usar Gojan AI» (Use Gojan AI), so the coach can tell you how long you were at the gym when you ask: we send it only how many visits and roughly how many minutes, never your arrival and departure times or where your gym is. Turn it off in Profile or by removing the permission in your phone's settings.

7. Who sees your data inside Gojan

• Any user: your name, username, profile photo (the photo is stored at a public address) and the gym you chose, which shows when someone opens your profile. If you are an athlete, we may suggest you as a possible friend to other users, starting with people who share friends with you, go to your gym or train nearby; the suggestion may show your gym and how many days a week you have been training. When they open your profile, they also see which friends you have in common. Anyone with your invite link (gojan.app/i/your-username) sees your name, username and photo even without an account, including in the preview when it's shared in a chat. If you are a trainer, your public profile appears in the catalog for everyone.
• Your friends (once a friend request is accepted, you both see each other's): the sessions you post, with their photo and the gym you chose, your records, your routines (which they can copy), the muscles you trained this week, your streak and your recent activity. If a friend copies one of your routines, the copy is theirs and stays in their account. You can remove or block a friend at any time, and they stop seeing all of this.
• A trainer you send a request to, while it is pending: your goal, days per week, level, gym, your active routine and your recent progress.
• Your linked trainers: your profile, your routines (which they can edit), your sets and sessions, and what you send them in chat, photos included. If you turned on «Usar mis datos de salud» (Use my health data), your trainer sees all your health data: your injuries and conditions, your PAR-Q questionnaire and what you share from Apple Health or Health Connect (for example steps, heart rate, sleep, calories, weight and body fat %). If you turn it off, they stop seeing it; they still see the weight you entered by hand in the app. They can also record in Gojan their fee and whether you paid it (the payment happens outside Gojan). When a trainer uses the AI tools to build or adjust your routine, your profile and routine data go to Anthropic as in §9, only if you have «Usar Gojan AI» on. When you unlink, the trainer loses access.
• Your gym, if you join one: the gym (its owners and administrators) sees your name and photo, since when you have been a member, which of the gym's trainers train you, which days you trained and how long each session lasted, and your active routine, without being able to change it. It never sees your health data (except your medical clearance, if you send it to the gym; see below), your injuries or your questionnaire, your weight or your measurements, your photos, your conversations with the coach, your friends, the time of your gym visits or your private trainers. The trainers the gym assigns you are like your linked trainers (see above), your health data included if you turned on «Usar mis datos de salud» (Use my health data). If the gym shares your file with all its trainers, or lets any of them work with any student, those trainers see your profile, your routines (which they can edit) and your sessions, but not your health data. To charge the gym for its plan we count how many of its students trained each month, and the gym sees that list. When you leave or the gym removes you, the gym and its trainers stop seeing you at that moment; in its «Se fueron» (Left) list you stay with your name and the date.
• Your medical clearance, if they ask for it. Your gym or your trainers can ask you for your medical clearance (apto médico). If you send it, whoever asked sees the file, its date and until when it is valid, and we keep a record that you sent it, to whom and when, and of every time they open it. If you don't send it, they only see that they asked and whether you are getting it. Trainers who work with you because the gym shared you with all its trainers, or because the gym is open, don't see it. You can stop sharing it or delete it whenever you want from Profile → «Tu apto médico» (Your medical clearance); if you leave the gym or stop training with someone, they stop seeing it at that moment. We never send it to the AI. Gojan does not check whether the clearance is valid: that is between you, your doctor and whoever asked for it.
• A certified reviewing trainer: if your readiness questionnaire answers call for a review, an assigned certified trainer sees your answers, your goals, the injuries and conditions you declared, your weight, height and date of birth, and the routine under review. Every access is logged. If you turn off «Usar mis datos de salud», they stop seeing your answers, injuries and conditions.
• Our team: accesses data only to run the Service, give you support, review reports, fix bugs and comply with the law.
• Blocks and reports: you can block anyone from the ⋯ on their profile, on one of their sessions or on a trainer, and they stop appearing in your Connect; you unblock them from Perfil → Privacidad → Personas bloqueadas (Profile → Privacy → Blocked people). To report a person or content (a profile, a photo, a session, a routine, a message or a coach reply), tap «Reportar» (Report) in the app; if you can't, write to team@gojan.app. Our team sees the reported content, reviews it and may remove it or close the account. We never tell the reported person who reported them.
• Support: in «Chatear con nosotros» (Chat with us) an AI assistant answers you using the help center and facts about your account, only if you have «Usar Gojan AI» (Use Gojan AI) or «Usar Gojan AI en soporte» (Use Gojan AI in support) turned on (see §9); it never receives your health data. Otherwise, a search and guided questions over the help center's topics help you, with no AI. If you ask to talk to a person, the Gojan team receives a summary of the conversation, without emails, phone numbers or names, and the messages you send after that, as you write them, in the team's private WhatsApp group, and replies to you in the app.

8. Providers we share data with

We share data only with these providers, which process it on our behalf to provide the Service:

• Supabase (database, authentication, files and server functions): stores all account data, on Amazon Web Services servers in São Paulo, Brazil. Privacy policy.
• Anthropic (Claude AI models; a US company): receives what §9 describes. It stores the data in the US and may process it in any of the countries where it runs its infrastructure. Privacy policy.
• WhatsApp (Meta's messaging service; a US company): only when you ask to talk to a person in support, it receives what §7 («Support») describes. Privacy policy.
• Google: Firebase Crashlytics receives crash reports (app state, device model, installation ID); Firebase App Check verifies that requests come from the genuine app; Google Places receives what you type when searching for your gym; YouTube API Services (see §10); and Firebase Cloud Messaging delivers notifications on Android. If you sign in with Google, Google also processes your sign-in. Google Privacy Policy.
• Google Analytics for Firebase and Google Ads (Android only): they receive your phone's advertising ID, an identifier for this install, a location estimated from your IP address (which Google truncates), the phone model, which ad your install came from, and the milestones "first open", "finished onboarding" and "first workout". We do not give them your name, your email or any other account data. Google uses this to measure and optimize our ads and to show you Gojan ads in other apps and sites (personalized ads or remarketing), under its Privacy Policy and how it uses data from apps that use its services. If you do not want personalized ads (this also withdraws your consent in §4): delete your advertising ID in Android's settings (Google → Ads), turn off personalized ads in Google's My Ad Center, or write to team@gojan.app.
• Apple: Sign in with Apple and notifications on iOS. Apple Privacy Policy.
• Expo (USA): delivers push notifications to your phone, with your notification token and the notice text, and app updates. Privacy policy.
• Resend (USA): sends the Service's emails to your address. Privacy policy.
• Vercel (USA): hosts the gojan.app site. Privacy policy.
• Cloudflare Turnstile: checks that you are not a robot on the web page for deleting your account. Privacy policy.
• Authorities, only when the law requires it.

We share data with no one else. Never with data brokers, and with Google Ads only what is above.

9. The AI: Anthropic

• What it is: Gojan's coach and support assistant run on Claude, an AI model by Anthropic, a US company. Our servers send it the data; your phone never connects to Anthropic.
• What we send in the coach chat: what you type or dictate (as text, never the audio), the photos you attach, a summary of earlier messages and, with each message: your first name, gender, age, height, starting and target weight, days per week and session length, equipment, preferences, your goals, what you find hard about training, your active routine (days, exercises, sets, reps, weights and notes), the names of your other routines (and the content of one of them when the coach needs to read it) and, if you turned on «Usar mis datos de salud», the injuries and conditions you declared and, if you connected Apple Health or Health Connect, your latest health summary (steps, distance, active calories, average and resting heart rate, sleep, last workout, body fat and latest weight). If you didn't turn it on, the only part of the health summary that goes is the last weight you entered by hand, and the coach knows you chose not to share your health data. Each message also carries your recent training: if you are training right then, which day of which routine, and your last three days trained, with the routine and day names, the minutes and how many exercises and sets you did. And when it is needed to answer you, your training record from any date: which days you trained, which routine and which exercises you did, with their sets, reps and weights. When you ask about your training, we also send how many days and how many minutes you trained in the period you ask about and your weekly goal and, if you turned on gym visit detection, how many visits and roughly how long you were at the gym. Never the exact times, or your gym's name or address.
• When building your first routine: your onboarding answers (goal, gender, age, weight, height, when you last trained, days per week, session length, equipment, preferences and, if you turned on «Usar mis datos de salud», injuries) and, if you want, the description and photos of the routine you do today.
• AI tools for trainers: only if the trainer turned on «Usar Gojan AI» and the student didn't turn it off: the trainer's messages and photos, and the student's name, days per week, goals, injuries (if the student shares their health data), equipment and routine. Also the photo of the trainer's certificate, to verify it; if the trainer didn't turn on Gojan AI, a person reviews the certificate.
• If you use «Chatear con nosotros» (Chat with us), your support messages, only if you have «Usar Gojan AI» or «Usar Gojan AI en soporte» turned on. «Usar Gojan AI en soporte» applies to support only (the coach stays off), and you can turn it off at any time in Perfil → Privacidad (Profile → Privacy).
• What we do not send: your readiness questionnaire answers (our server evaluates them), your email, your location, and your friends' data.
• Your consent: nothing goes to Anthropic unless you turn on «Usar Gojan AI» (or, for support only, «Usar Gojan AI en soporte»). «Usar Gojan AI» is a separate and optional permission we ask for when you create your account (if you already had one, once when you open the app); «Usar Gojan AI en soporte», the first time you open support. «Ver todo lo que le mandamos» (See everything we send) shows this same list. Turn it off at any time in Perfil → Privacidad → Tu salud y Gojan AI (Profile → Privacy → Your health and Gojan AI): the coach turns off across the app, our server refuses any AI request with your data (except your support messages, if you turned on «Usar Gojan AI en soporte»), and your history stays stored. If you only disconnect Apple Health or Health Connect, new data stops, but your last synced weight still goes with each message.
• What Anthropic does with the data: it uses it only to generate the answer. It does not use it to train its models and does not sell it. It deletes it from its systems within 30 days, unless it must keep it longer to enforce its usage policy or by law.
• The AI can be wrong. Its answers are general guidance, not medical advice. It makes no automated decisions with legal effects on you: you can always change or ignore what it suggests, and in the cases in §7 a person reviews the routine.
• Reporting an answer: if a coach answer seems wrong or dangerous, press and hold it and tap «Reportar» (Report); if you can't, write to team@gojan.app. We use it to improve the coach's safety rules.

10. YouTube videos

The videos showing how to do each exercise are found with YouTube API Services and play in the YouTube player. Our servers search for each video by the exercise name, with none of your data. When you watch a video, YouTube and Google may receive data from your device under their own rules. By watching them you agree to the YouTube Terms of Service, and Google processes that data under its Privacy Policy.

11. International transfers

Your data is stored in Brazil (Supabase). Anthropic stores it in the US and may process it in any of the countries where it operates; the other providers process it mainly in the US (Resend, Expo, Vercel, Google, WhatsApp). Those countries may not have a data protection law equivalent to your country's. Each provider commits by contract to protecting the data (their data processing agreements), and we transfer to them only what they need to provide their service. By accepting this Policy you expressly consent to those transfers.

12. How long we keep data

• Your account, profile, routines, logs, health data, messages and photos: while you have the account (your health data, until you tap «Borrar mis datos de salud», see §5). What you delete earlier (a photo, a routine) is deleted right away.
• App error logs: 90 days.
• Our server logs: up to 12 months.
• Crashlytics crash reports: up to 90 days.
• Campaign measurement data in Google Analytics: 2 months.
• Remarketing lists in Google Ads: 2 months from your last milestone.
• Usage events: while you have the account. When you delete it, they are unlinked from you and remain only as statistics.
• Your time at a gym: while you have the account. When you delete it, it stays without identifying you (in the gym's list, «Cuenta borrada», Deleted account), and the counts of months already closed remain as numbers.
• Your medical clearance: while you have it uploaded; if it expired, we delete it one year later; if you upload a new one, the previous one is deleted after 30 days.
• Reports you send us: up to 12 months after review, or until you delete your account.
• Data at Anthropic: up to 30 days (see §9).
• Support cases handed to a person: in Gojan, while you have the account; in the team's WhatsApp group, up to 90 days (the group uses disappearing messages).

13. How to delete your account

• In the app: Profile → "Eliminar cuenta".
• On the web, without installing the app: at gojan.app/en/delete-account, with a code we email you.
• By email: write to team@gojan.app from your account's address.

Deletion is immediate and final in our database: your account, profile, routines, training log, health data, gym visits, conversations, photos, your medical clearances and whom you sent them to, connections and your time at gyms. Messages of a support case in the team's WhatsApp group disappear on their own after 90 days. We email you a confirmation. A copy of what you deleted can remain for up to 8 days in our provider's encrypted backups, until they are overwritten. We keep only what §12 leaves without identifying you, and what the law requires us to keep. If you signed in with Apple, you can also remove Gojan in your Apple ID settings (Sign in with Apple).

14. Your rights

You can access your data, correct it, ask for it to be deleted, object to processing, ask us to restrict it, ask for a portable copy, and withdraw your consent at any time, without affecting what was done before. You can change or delete many things yourself in the app; for the rest, write to team@gojan.app. We answer access requests within 10 calendar days and correction or deletion requests within 5 business days, as Argentina's Law 25.326 requires.

Under Law 25.326, you may exercise your right of access free of charge at intervals of no less than six months, unless a legitimate interest is shown (article 14, paragraph 3). Argentina's AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, as the supervisory authority under Law 25.326, handles complaints from anyone whose rights are affected by a breach of the data protection rules.

If you live in another country, you may also complain to its data protection authority. If you live in California or another U.S. state with a privacy law, you have the right to know what data we hold, and to access, correct and delete it; we do not sell your information. On Android we share the advertising ID and the milestones in §8 with Google to measure our ads and for remarketing, which some laws call "sharing" for advertising; you can opt out as §8 says. We will not discriminate against you for exercising these rights.

15. Phone permissions

Each permission is asked for only when you use the feature, and you can remove it in your phone's settings: camera and photos (to pick a photo and to scan your gym's QR), microphone and speech recognition (to dictate), location, including in the background (only for gym visits), Apple Health or Health Connect (reading the data in §5), notifications and Face ID (to sign in). On Android, Gojan can read the phone's advertising ID: it is not asked for as a permission, and you delete or reset it in Android's settings (see §8). If you do not grant a permission, the rest of the Service keeps working.

16. The website and cookies

The gojan.app site counts visits with Umami, an analytics tool we host ourselves that uses no cookies and does not follow you across sites. We use no advertising cookies.

17. Security

We use encrypted connections, encrypted password storage, database access rules so each person sees only what is theirs, private files with links that expire (the profile photo is the exception, see §7), and logging of access to health data in reviews. No system is fully secure: if a breach affects you, we will notify you and the authorities as the law requires.

18. Minors

The Service is only for people 18 and over. We do not knowingly collect data from anyone under 18; if we find an account belonging to a minor, we close it and delete its data.

19. Changes

If we change this Policy, we publish the new version with its date. If the change is significant, we tell you by email or in the app before it takes effect, and if it needs your consent (for example, for a new use of your data), we will ask you for it.

20. Contact

Ondaform Labs LLC — 30 N Gould St, Ste N, Sheridan, WY 82801, USA — team@gojan.app · gojan.app