Privacy Policy

What GymRank stores

To run a competition platform, GymRank stores the account information you provide (email, display name, country, city, profile preferences), the activities you log or sync from connected providers, and the competition data generated from them (XP, ratings, rankings, badges, challenges, teams and social interactions). Health-related metrics such as heart rate are stored only when a connected provider supplies them, and are hidden from other users by default via the “hide health data” setting in your profile.

How your data is protected

• Passwords are stored only as salted hashes — never in plain text.
• Access tokens from fitness providers (Garmin, Fitbit, WHOOP, Oura, Strava and others) are encrypted at rest and are never sent to the browser.
• API secrets and provider credentials live only on the server — never in frontend code.
• Sessions use signed, httpOnly cookies and can be revoked by you at any time.
• Private profiles are excluded from public areas, and health metrics stay hidden when you enable the privacy option.

Connected fitness providers

When you connect a wearable provider, GymRank requests read access only to the data needed for verification and scoring (for example activities and heart rate). You can disconnect any provider at any time from Data Connections in the app — disconnecting erases the stored tokens immediately. GymRank cannot read Apple Health or Android Health Connect from a browser; those will only work through the future native apps, with your explicit on-device permission.

Payments

GymRank is free to use. If you voluntarily support the project, the payment is processed entirely by PayPal under PayPal's own privacy policy. GymRank never receives or stores your payment card details.

Your controls

• Profile privacy: choose Public, Friends-only or Private visibility.
• Health data: hide heart-rate and calorie details from other users with one switch.
• Data export: request a JSON export of your data from Settings → Data.
• Account deletion: delete your account from Settings → Data. Deletion removes your profile and personal data from the platform.

Contact

Privacy questions or data requests? Use the contact form and choose “General question”. GymRank is a project by FikraGo.com.