Privacy Policy

Last updated 15 September 2026

The short version: GainTrack carries no ads, no analytics and no third-party trackers. Almost everything you record — workouts, weights, photos, squad — stays in your browser on your own device and never reaches us.

1. Who is responsible

GainTrack is run by Vladyslav Kovalenko, an independent developer based in Vinnytsia, Ukraine, who is the data controller for the few things we do store. Write to vlad2008.kovalenko@gmail.com or call +380 66 230 32 85 about anything in this policy.

2. What stays on your device

Your profile (name, sex, age, height, goal, avatar), every workout and routine, your body-weight history, routine cover photos, your squad, and all app settings are held in your browser’s local storage.

We cannot read any of it. It never leaves the device unless you export it yourself. Clearing your browser data erases it permanently, and we have no copy to restore.

3. What we store on our servers

If you use a cloud account, our authentication provider stores your email address and a cryptographic hash of your password — never the password itself — along with the dates the account was created and last used.

If you buy Pro we store your plan, its status, the renewal date, and the identifiers Paddle gives us for your customer and subscription records. That is how the app knows you are Pro.

4. Payments

We never see your card. Paddle collects and processes payment and billing details as merchant of record and as its own data controller, under Paddle’s privacy policy.

5. What we do not do

No advertising and no advertising identifiers. No analytics or telemetry SDKs. No behavioural profiling. No selling or sharing data with brokers. No third-party cookies — in fact no cookies at all: local storage is there to make the app work, not to follow you around.

6. Notifications

Rest-timer and personal-record alerts are produced by your own browser, and only while the app is open. There is no push server and no device token.

7. Squad

Squad members are exchanged as a short code you paste to one another. The code carries a name and a streak count, it travels by whatever means you choose, and it never passes through our servers.

8. Technical logs

Our hosting and backend providers keep short-lived server logs — IP address, timestamp, and the request made — to run the service and defend it against abuse. We do not use them to build a picture of you.

9. Who processes data for us

Supabase holds accounts and subscription records on servers in the EU (Ireland). Vercel serves the app itself. Paddle handles payments, tax and invoicing, acting as its own controller.

10. Legal grounds

We process account and subscription data to perform our contract with you (GDPR Article 6(1)(b)). We keep server logs and act against abuse on the basis of our legitimate interests (Article 6(1)(f)). Browser notifications rest on your consent, which you can withdraw in your browser at any time.

11. Where data is held

Account and subscription data is stored in the EU. Where a provider needs access from outside the EEA, that transfer runs on the European Commission’s standard contractual clauses.

12. How long we keep it

Account and subscription records last as long as your account does. Delete the account and we remove them, apart from billing records Paddle is required to keep under tax and accounting law. Server logs are rotated out after a short period.

13. Your rights

You may ask for a copy of your data, correct it, delete it, take it elsewhere, or object to how we use it. Most of that you can do yourself: export from inside the app, and delete your account whenever you like.

Write to vlad2008.kovalenko@gmail.com and we will answer within 30 days. If you think we have handled your data badly, you can complain to the data protection authority where you live.

14. Children

GainTrack is not intended for children under 16. If you believe a child has given us data, write to vlad2008.kovalenko@gmail.com and we will delete it.

15. Changes to this policy

If this policy changes in a way that matters to you, we will show a notice in the app before the change takes effect.