SETSMITH SOFTWARE ← All Privacy Policies

Privacy Policy for GymSet+

Last updated: 7 September 2026

GymSet+ is developed and operated by SetSmith Software ("we", "us", "our"), based in the United Kingdom. This Privacy Policy explains what personal data we collect through the GymSet+ app, why we collect it, how it is used, and the rights you have over it.

By using GymSet+, you agree to the collection and use of information in accordance with this policy.

1. Data We Collect

We collect the following categories of data:

Category	Examples	Purpose
Account information	Name, email address, password (hashed) — or your Google/Apple account identifier if you sign in that way instead	Creating and securing your account, login
Partner / access information	The partner code you entered at sign-up, and which gym or business it's associated with	Determining which features your account has access to. See "Partner Gyms and Businesses" below for what this does and doesn't share.
Fitness and training data	Workouts logged, sets/reps/weights, training programme selections, progress history	Generating and adapting your training plan, tracking progress
Health-related information (special category data)	Body-area or injury flags (e.g. wrist, knee, back), participation in menopause-informed or Medical Weight Loss programmes	Adjusting exercise selection to avoid aggravating a flagged area, and tailoring NHS-informed programme content. We collect this data only with your explicit, separate consent at the point you select it in the app.
Usage and device data	App interactions, crash logs, device type, operating system version	Diagnosing bugs, improving reliability and app performance
Support communications	Messages you send us and their content	Responding to support requests

2. How Your Training Plan Is Generated

GymSet+ uses a closed-loop, deterministic rules-based training engine to build and adapt your programme. It does not use artificial intelligence or large language models to process your personal data. Every plan is generated by fixed, auditable logic, and every version of the engine is logged for traceability.

3. Partner Gyms and Businesses

GymSet+ is made available to you through a partner gym or business, using an access code they provide. This partnership works as follows:

Depending on the arrangement your gym has with us, your account either has full access to the app's features directly, or access to free features plus a link to book in-person personal training with your gym's own trainers.
If a link to book in-person training is shown, it opens in your device's own web browser, outside the app. That booking, and any payment for it, is handled entirely by your gym on their own website — we are not involved in it, and do not process or see any payment information related to it.
Your gym does not have access to your individual training data. They do not see your workouts, your progress, or any health-related information you've provided, and they have no login or dashboard into GymSet+ at all. We (SetSmith Software) track how many people have used each gym's access code for our own business and billing purposes, and may share that aggregate count with the gym directly as part of our relationship with them — but never who those people are or what they've logged.
GymSet+ itself has no in-app purchases or subscriptions of any kind. Nothing is ever bought or paid for inside the app.

4. Legal Basis for Processing (UK GDPR)

Contract: processing account and training data is necessary to provide the app's core service to you.
Consent: health-related information, including body-area/injury flags and enrolment in menopause-informed or Medical Weight Loss programmes, is processed only on the basis of your explicit consent, given at the point of selection. You may withdraw this consent at any time in the app's settings, which will stop this data being used going forward.
Legitimate interests: limited technical and usage data is processed to keep the app secure and functioning correctly.

5. Third Parties We Share Data With

We use the following processors to operate the app. None of them are permitted to use your data for their own purposes.

Google Firebase / Firestore — secure cloud hosting, authentication, and database storage of your account and app data.
Google Sign-In and Sign in with Apple — if you choose to sign in this way instead of email/password, these providers confirm your identity to us. We only receive the account identifier and email address needed to create your account, never your Google or Apple password.

We do not sell your personal data. We do not share your health-related data with advertisers, and we do not use it for advertising or profiling of any kind. As set out in Section 3, your partner gym does not receive your individual data through GymSet+.

6. International Data Transfers

Our hosting provider (Google Firebase) may process data on servers outside the UK/EEA. Where this occurs, appropriate safeguards such as Standard Contractual Clauses are relied upon to protect your data.

7. Data Retention

We retain your account and training data for as long as your account remains active. If you delete your account, your personal data is deleted or anonymised within 30 days, except where we are required to retain limited records for legal or accounting purposes.

8. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Withdraw consent for health-related data processing at any time
Request a copy of your data in a portable format
Object to certain processing

You can exercise these rights directly within the app (Settings > Delete Account) or by contacting us at the email below.

9. Children's Privacy

GymSet+ is not directed at, or intended for use by, children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Data Security

We use industry-standard security measures, including encrypted storage and transmission, to protect your personal data against unauthorised access, loss, or misuse.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified within the app. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: support@setsmithsoftware.co.uk
Developer: SetSmith Software
Location: North East England, United Kingdom