Privacy Policy

LOCAL DATA SOVEREIGNTY AS A CORE PRINCIPLE:
Protecting your privacy is the fundamental concept of our App. All workout-related data (such as exercises, sets, weights, progress, and notes) as well as your personal profile settings (age, height, weight) are stored exclusively locally in a secure database on your mobile device. We do not have access to your personal data at any time. Data is only transmitted if you actively utilize features such as Auto-Backup or contact us voluntarily.

Last updated: October 2026

Table of Contents

1. Data Controller

Michael Palm
bytes.for.individuals
Gartenweg 1
21521 Aumuehle
Germany

Phone / Support Mobile: +49 (0) 15678 339865
Email: impressum@bytesforindividuals.com
Website:
bytesforindividuals.com

2. Overview of Data Processing

The following overview summarizes the types of data processed and the purposes of their processing.

Types of Processed Data

Purposes of Processing

3. Relevant Legal Bases

We process personal data in accordance with the following legal bases under the General Data Protection Regulation (GDPR):

4. Security Measures

In accordance with statutory requirements and taking into account the state of the art, we implement appropriate technical and organizational measures (TOMs) to ensure a level of protection appropriate to the risk. This includes protecting the local database on your mobile device via system security as well as encrypted data transmission between your device and our web services (HTTPS / SSL encryption when accessing our website and sending emails).

5. Transmission of Personal Data

Personal data is only transmitted to third parties if necessary for contract performance (e.g., payment processing via Google Play) or if we employ specialized IT service providers (e.g., STRATO AG for domain management & email reception, Brevo / Sendinblue GmbH for outgoing email delivery, or Cloudflare for website hosting & DNS protection). In all cases, we adhere strictly to statutory GDPR requirements and have executed Data Processing Agreements (DPA).

6. International Data Transfers

If data is transferred to service providers outside the EU (e.g., Google or Cloudflare in the USA), this occurs on the basis of statutory permissions and the EU-U.S. Data Privacy Framework (DPF) or Standard Contractual Clauses issued by the European Commission.

7. Data Storage and Deletion

We delete personal data as soon as it is no longer required for its intended purpose. Since your workout logs are stored exclusively locally on your device, you are solely responsible for their deletion (e.g., by uninstalling the App or clearing app data in your Android system settings). Contact data processed by us (support emails) is deleted after completing the inquiry, unless statutory retention duties apply.

8. Rights of Data Subjects

As a data subject, you possess the following rights under the GDPR:

9. Specifics of the GYMLOG. Mobile App & Auto-Backup

Within the mobile application, data is processed as follows:

10. Payment Processing (In-App Purchases)

To acquire the Pro version, we utilize the platform's In-App Purchase service:

11. Website Provision, Domain & Email Infrastructure (STRATO, Brevo & Cloudflare)

To operate our website, manage our domain, and maintain email infrastructure, we employ specialized service providers:

12. Social Media, WhatsApp & Communication

We utilize social networks, messengers, and phone communication for support and marketing:

13. Definitions