Privacy Policy

Last updated: October 11, 2026

MuscleGains ("the app", "we") is a fitness tracking app for iOS. This policy explains what data the app collects, why, where it goes, and how you can delete it. The short version: your data exists to power your own tracking, we don't sell it, and you can have your account and everything in it deleted at any time.

Data we collect

Account

• Email address and password (password is stored only as a secure hash by our authentication provider).
• Display name and optional profile photo, if you set them (shown with your leaderboard entry).

Profile and goals

• Age, height, weight, gender, fitness goal, experience level, equipment access, and dietary restrictions you enter during onboarding.
• Daily calorie and macro targets.

Photos

• Food photos you take to log meals.
• Physique photos (front and side) you take for weekly trend tracking.
• Supplement label photos, if you attach them to intake entries.
• Photos are stored in private storage buckets accessible only to your account. They are never public, never shown to other users, and never used to train AI models by us.

Activity data

• Logged meals with estimated calories and macros.
• Body measurement estimates and trends derived from your physique photos.
• Workout plans, gym visits, discipline points, and leaderboard scores.
• Supplement or intake entries, if you choose to track them.

How AI processing works

Some features send your data to AI providers for processing, always through our own servers (your device never talks to these providers directly, and our API credentials never leave our servers):

• Google (Gemini) processes food photos to identify meals and estimate nutrition, and physique photos to estimate measurement trends.
• Anthropic (Claude) processes your profile, goals, and logged activity to generate workout plans and coaching summaries.

These providers process the data to return a result to you. We use API terms under which the data is not used to train their models.

Where your data lives

Data is stored with Supabase (database, authentication, and file storage) on servers in the United States. Every record is protected by row-level security: your account can only ever read or write its own rows.

What other users can see

Only your display name, your profile photo if you set one, your discipline point totals, and your rank — on the global leaderboards, and inside any private group you choose to join. Your other photos, meals, measurements, and any other logged data are never visible to other users.

What we don't do

• We don't sell your data or share it with advertisers.
• We don't show third-party ads.
• We don't use your photos or health data to train AI models.

Health data

Information you log in MuscleGains (weight, measurements, nutrition, supplement intake) is health-related. We treat all of it under this policy's protections, use it only to provide the app's features to you, and never disclose it except to the processors listed above, as required to operate the app, or as required by law.

Payments

The Premium free trial requires no payment details. When paid subscriptions are offered, they are processed by Apple through your App Store account — we never see or store payment details.

Data retention and deletion

• Your data is kept while your account is active.
• You can delete individual entries (meals, photos, workouts) in the app at any time.
• You can delete your entire account and all its data by sending a request through our contact form with the email on your account — we confirm by replying to that address, and deletion is completed within 30 days, permanently removing your profile, photos, logs, points, and leaderboard history. An in-app delete-account option is planned; see the support page for details.

Your rights

Depending on where you live (including under GDPR and the CCPA), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. The in-app deletion and editing tools cover most of these directly; for anything else, contact us and we'll respond within 30 days.

Children

MuscleGains is not directed at children and requires users to be at least 17 years old. We do not knowingly collect data from anyone under 17; if you believe a minor has created an account, contact us and we will delete it.

Changes to this policy

If we make material changes, we'll update this page and note it in the app before the changes take effect.

Contact

MuscleGains is made by MadeSmarter LLC. For questions about privacy or your data, reach us through the contact form.