Privacy Policy

1. Who we are

GymMonster ("we", "us", "our") is operated by McDevLabs. This policy explains what data we collect when you use the GymMonster Telegram Mini App and bot (the "Service"), how we use it, and the choices you have. If you have any questions, contact us at mcdevlabs.com.

2. Information we collect

Account information from Telegram

When you open the Mini App, Telegram provides us with basic profile data so we can create and secure your account:

• Your Telegram user ID
• First name and (if set) username
• Language preference

We never receive your phone number, password, or contact list from Telegram.

Data you create in the app

• Workouts, exercises, sets, reps, weights and durations
• Routines, supersets and drop sets you build
• Personal records, goals and body measurements (including bodyweight) you enter
• Notes and settings (units, theme, language)
• Friend and referral relationships used for the leaderboard

Payment information

Premium subscriptions are purchased with Telegram Stars. Payments are processed entirely by Telegram — we never see or store your card or payment-method details. We store the Telegram charge identifier and your subscription status (plan type and expiry) so we can provide Premium features and process refunds.

3. How we use your information

• To provide the Service: log workouts, generate charts, calendars and reports
• To run social features such as the friends leaderboard (streaks, workout counts, hours and levels are visible to people you are connected with)
• To send workout reminders you have enabled
• To manage your Premium subscription and process refunds
• To maintain security, prevent abuse and fix bugs

4. How we share information

We do not sell your personal data. We share data only as needed to run the Service:

• Telegram — for authentication and payment processing, under Telegram's own privacy policy.
• Your friends — limited leaderboard statistics (such as streak, workout count and level) are visible to accounts you connect with.
• Legal — where required by law or to protect our rights and users.

5. Where data is stored

Your data is stored in a PostgreSQL database hosted on servers in the European Union (Hetzner). It is transmitted over encrypted (HTTPS) connections.

6. Data retention

We keep your data for as long as your account exists. If you delete your account, your workouts, records and related data are removed from our active systems. Backups are rotated and purged on a regular schedule.

7. Your rights and choices

• Access & export — you can export your training data to Excel at any time from the Progress screen.
• Correction — edit or delete any workout, record, goal or measurement directly in the app.
• Deletion — request full account and data deletion by contacting us.

Depending on where you live (e.g. the EU/UK), you may also have rights to object to or restrict processing. To exercise any right, contact us using the details below.

8. Children

GymMonster is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the "Last updated" date above. Continued use of the Service after changes means you accept the updated policy.

---

Home | Terms of Use | Contact | Русский