Privacy Notice

Last updated 19 October 2026

Who is responsible

mygymplan.co.uk, operated by Jonny Adams, is the data controller for personal data processed through this service under UK GDPR. Contact: jonnyjadams@gmail.com.

What we collect and why

Account details (email address, name if you sign in with Google, login credentials) — to create and secure your account. Legal basis: contract.
Fitness answers (age, sex, height, weight, goals, experience, equipment, dietary preferences) — to generate plans and remember your preferences. Health-related details are used only to provide the service you request, with your explicit consent, which you can withdraw by deleting them or asking us to.
Saved plans and progress entries (workouts, body weight, notes) — to provide Premium features. Legal basis: contract and explicit consent.
Membership status (plan, renewal dates, subscription references) — to grant access you've paid for. Legal basis: contract.
Technical data (IP address, device and browser information, error logs) — for security, fraud prevention and fixing problems. Legal basis: legitimate interests.
Anonymous activity totals — daily free-plan page openings and gear-link clicks, grouped by broad referring source and live/test site. We do not store individual activity records, account identifiers, full referring URLs, IP addresses or browser identifiers in these totals, and use no analytics cookies. The anonymous totals help us assess the service and are kept for historical reporting.
Messages you send us — to provide support. Legal basis: legitimate interests.

Who we share data with

Paddle (Paddle.com Market Ltd), our Merchant of Record, for the sale of Premium, subscription management, payments, tax compliance and invoicing. Paddle collects your payment details directly.
Service providers who host the app, store data, provide sign-in and run the AI that generates plans (your fitness answers are sent to generate the plan).
Professional advisers (legal, accounting) and authorities where required by law.

We do not sell your personal data.

International transfers

Some providers may process data outside the UK. Where this happens we rely on UK adequacy regulations or approved safeguards such as standard contractual clauses / the UK International Data Transfer Addendum.

How long we keep data

We keep account data, saved plans and progress while your account is active. If you ask us to delete your account we delete or anonymise it within 30 days, except records we must keep by law. Technical logs are kept for a limited period for security.

Your rights

You have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to withdraw consent at any time. To delete your account or exercise any right, email jonnyjadams@gmail.com; we respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

Security

We use appropriate technical and organisational measures, including encrypted connections, access controls and per-user data isolation, to protect your data.

Cookies

We use only essential storage needed to keep you signed in and make checkout work. We don't use advertising or analytics cookies. You can clear them in your browser settings, but you'll be signed out.