Griff Gym — Privacy policy
Privacy policy for the Griff Gym mobile application
Last updated: August 2026.
This privacy policy applies to the Griff Gym mobile application (“the App”), developed and published by Paweł Rudnicki, trading as GRIFF SOFTWARE. Griff Gym uses an account so that your training history is stored safely and stays available whenever you sign in. This policy explains what we store, why we store it, and how you can delete all of it yourself at any time.
01Data controller
Controller: Paweł Rudnicki, GRIFF SOFTWARE, NIP 9552521486, REGON 383733190. Contact: contact@griffsoftware.com. For privacy matters, please email the same address with “Privacy — Griff Gym” in the subject line.
02What data we process
Account data: your email address and the account identifier supplied by your sign-in provider, plus the display name and profile picture if the provider shares them. Training data: the workouts, exercises, sets, repetitions, weights, notes and dates you record in the App, together with the strength progress calculated from them. Technical data: server logs (e.g. IP address, request time, app version) kept briefly for security and troubleshooting. The App contains no advertising, no analytics SDKs and no tracking. We do not sell your personal data and we do not use it to build marketing profiles.
03Signing in with Google or Apple
You sign in to Griff Gym with Sign in with Google or Sign in with Apple. Authentication happens on the provider’s side — we never see or store your password. The provider passes us only the basic identity data needed to create your account: an account identifier and your email address (Apple lets you hide your real address behind a private relay address). Google’s privacy information: https://policies.google.com/privacy Apple’s privacy information: https://www.apple.com/legal/privacy/
04Where your data is stored
Your account and training data are stored in our own database, on server infrastructure located in the European Union. All traffic between the App and the server is encrypted in transit (HTTPS/TLS). Our hosting provider acts as a processor and may access the data only to keep the service running. Apart from that provider and the sign-in provider named above, we do not share your data with anyone. We transfer data outside the EEA only where unavoidable, and then on the basis of the European Commission’s Standard Contractual Clauses.
05Legal basis
Account and training data: processing is necessary to provide the App and its sync features to you, i.e. to perform our agreement with you (Art. 6(1)(b) GDPR). Server logs, security and abuse prevention: our legitimate interest in keeping the service operational and secure (Art. 6(1)(f) GDPR). Anything optional beyond this will be based on your consent (Art. 6(1)(a) GDPR) and will be asked for inside the App.
06Deleting your account and retention
You can delete everything yourself: open the App and use “Delete account”. This removes your account and all training data linked to it from our database. The action takes effect immediately and cannot be undone, so export or note down anything you want to keep beforehand. Residual copies in encrypted backups are overwritten within 30 days. While you keep using the App, we keep your data so that your training history stays available to you. If you no longer have access to the App, you can ask us to delete the account by email.
07Your rights
Under GDPR you may request access to your data, rectification, erasure, restriction of processing and data portability, and you may object to processing based on our legitimate interests. Much of this you can do directly in the App — your data is visible there and can be removed in one step. For anything else, write to contact@griffsoftware.com; we reply within 30 days. You may also lodge a complaint with a supervisory authority (in Poland: UODO).
08Children’s privacy
Griff Gym is not directed at children under 16 and we do not knowingly create accounts for them. If you believe a child has provided us with personal data, contact us and we will delete the account and the data associated with it.
09Changes to this policy
We may update this policy if the App’s functionality changes; the “Last updated” date above will reflect any revision. If a change materially affects how we process your data, we will let you know in the App before it takes effect.