Privacy Policy

Last updated: 30 August 2026

This Privacy Policy explains how Gravity ("we", "us", the "App") collects, uses, and protects your personal data when you use the Gravity mobile application. The data controller is Vincent Van der Struis, developer of Gravity. If you have any questions, contact us at hyrudotcom@icloud.com.

1. Data we collect

• Account data: your email address, used to create and secure your account. Your password is handled and stored in hashed form by our authentication provider; we never see it in plain text.
• Training and profile data (health & fitness): the workouts you log — exercises, sets, repetitions, loads, effort ratings, and dates — plus assessments, selected programs and progress. When you provide them, this also includes age, biological sex, height, weight, goals, training schedule, available equipment, and limitations or injuries.
• Account identifier: a unique user ID that links your training data to your account.
• Optional profile photo: if you choose one, Gravity stores a cropped copy only on this device. It is not synced to our backend.
• Crash and app-hang diagnostics: if the production build crashes or hangs, our diagnostics processor Sentry may receive a crash or app-hang report, app version, device model, operating-system version, and the technical breadcrumbs needed to diagnose it. On Android, Sentry's native crash handling may also attach a randomly generated identifier that remains stable for that app installation. This is not an advertising identifier, and Gravity does not attach your account email or Gravity account ID. The diagnostic request exposes the sender's IP address to Sentry, which may retain it and derive a coarse location. We disable session replay, screenshots, performance tracing, advertising identifiers, and default personal-information capture.

If you choose Find my location on the park map, your precise device location is used to center the map and request nearby park results. Location is requested only after that tap, and Gravity does not save a location history. If you search the park map, the place query is sent to MapTiler to return a result. Gravity does not attach the query to your Gravity account or store it in your account, although MapTiler may retain technical request logs under its applicable terms. We do not collect contacts, browsing history, or device advertising identifiers. We do not use behavioral or product analytics or tracking. We do not use your data for advertising or share it with advertisers or data brokers.

2. How and why we use your data (legal bases)

• To provide the App (create your account, store and sync your training across your devices): processing necessary for the performance of our contract with you (Art. 6(1)(b) GDPR).
• Optional reminders (local notifications): based on your device permission, i.e. your consent (Art. 6(1)(a) GDPR). You can revoke this at any time in your device settings.
• Security and integrity of the service: our legitimate interest (Art. 6(1)(f) GDPR).
• Crash diagnosis and reliability: our legitimate interest in finding and repairing failures (Art. 6(1)(f) GDPR).

3. Storage and processors

Your data is stored locally on your device and, when you sign in, synced to our backend provider Supabase (PostgreSQL database and authentication), which processes data on our behalf. We use Sentry to process production crash and app-hang diagnostics and MapTiler to provide map tiles and place search on the park map. These providers act under their applicable data-processing terms. Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

4. Retention

We keep account and training data for as long as your account exists. When you delete your account, your account and associated training data are permanently deleted from our systems. Crash and app-hang diagnostics are kept only for the limited period configured with our processor and needed to diagnose and prevent recurring failures.

5. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. You may withdraw consent (e.g. for notifications) at any time.

• Delete your account and data: in the App, open Home avatar → Settings → Account → Delete account.
• Delete an individual workout session: open Progress → Recent sessions, tap the trash icon beside the session, then choose Remove history.
• Other requests: email hyrudotcom@icloud.com.

You also have the right to lodge a complaint with your local data protection supervisory authority.

6. Children

Gravity is not directed to children under 16, and we do not knowingly collect data from them.

7. Security

Data is encrypted in transit (HTTPS/TLS). Access to your data is restricted to your authenticated account through row-level security on our database.

8. Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

9. Contact

Vincent Van der Struis, developer of Gravity — hyrudotcom@icloud.com