Privacy Policy

Last updated: 20 September 2026

This Privacy Policy explains how Gym Progress collects, uses, and stores your personal information when you use the Gym Progress application. Gym Progress is operated by Dream Tech.

Eligibility and age requirement

Gym Progress is intended for use by adults aged 18 and over. You must be at least 18 years old to create a Gym Progress account, and we ask for your date of birth partly to enforce this requirement.

This is a self-declared age check based on the date of birth you provide when you sign up. It confirms that the date of birth you entered indicates you are 18 or over, but it is not independent identity or age verification. Gym Progress is not intended for children or anyone under 18, and we ask that you do not create an account, or provide any personal information to us, if you are under 18.

Information we collect

We collect the following categories of personal information when you use Gym Progress:

• Account and identity information, such as your name, email address, username, and date of birth.
• Fitness and body information, such as height, weight, and other body measurements you choose to record.
• Workout and exercise information, such as exercises, workouts, training history, and the sets, reps, weights, duration, and notes you record.
• Photos and user-created content, such as progress photographs you upload and custom workouts you create.
• Technical and authentication information, such as the information needed to create, sign in to, and secure your account.

You control how much fitness and body information you provide — height, weight, body measurements, and progress photographs are all optional, and you should only record information you are comfortable storing in your account.

How we use your information

• to create and manage your Gym Progress account;
• to enforce the 18+ age requirement for creating an account;
• to let you record and view your fitness and body progress over time;
• to store and display your workout and exercise history;
• to store custom workouts and other content you create;
• to store the progress photographs you choose to upload;
• to operate, secure, and maintain the Gym Progress service;
• to communicate with you about your account or the service, where necessary.

We do not use your information for advertising or profiling, and we do not currently provide personalised health, fitness, or nutrition recommendations based on your data.

Legal basis for processing your information

Where UK data protection law requires us to identify a legal basis for processing your personal information, we generally rely on:

• Contract / necessary to provide the service — to create your account, check you meet the 18+ age requirement, and provide the features of Gym Progress you sign up for, including recording the fitness, body, workout, and photo information you choose to enter as part of using those features.
• Legitimate interests — to keep the service secure and operating properly.

Fitness and body information

Some of the fitness and body information you choose to record — such as body measurements — may, depending on its exact nature and context, be considered health-related or special category information under UK data protection law. We only use this information for the purposes described in this policy, and it is not shared with other Gym Progress users and is available to you within your account. We encourage you to record only the level of detail you are comfortable providing.

How your account is authenticated

Signing in to Gym Progress is handled using AWS Cognito, a third-party authentication service. Your password is set and managed by AWS Cognito directly — it is not stored as plain text within the Gym Progress application database.

Cookies and browser storage

Gym Progress does not currently use any analytics, advertising, or tracking technologies, and we do not set cookies to track you across sites or for advertising purposes.

We do use browser storage for two purposes necessary to run the service:

• to keep you signed in — the authentication technology we use (AWS Cognito, via the AWS Amplify library) stores a cookie in your browser to maintain your signed-in session; and
• to remember your preferences — such as whether you have dismissed the “Install Gym Progress” prompt, using your browser's local storage, so it does not reappear on every visit.

Neither of these is used for analytics, advertising, or tracking.

Service providers and hosting

Gym Progress is built on AWS Amplify and uses the following AWS services to operate:

• AWS Cognito — to authenticate and manage sign-in for user accounts.
• AWS AppSync and Amazon DynamoDB — to process and store your account, fitness, and workout data.
• Amazon S3 — to store files you upload, such as progress photographs.

These services host, process, and store Gym Progress data on our behalf. We do not currently use any other third-party analytics, advertising, or data-processing services.

International data transfers

Gym Progress's infrastructure currently runs on Amazon Web Services in the US East (N. Virginia) region. As a result, your personal information may be processed and stored in the United States, outside the UK.

Payments

Gym Progress does not currently charge for access, and no payment or subscription features are active. If this changes in the future, we will update this Privacy Policy before any payment processing begins.

Data retention and account deletion

We keep your account and the information associated with it for as long as your account remains active. We do not currently have an automated data retention or deletion schedule.

Gym Progress does not currently provide a fully self-service way to delete your account or all of your data from within the app. If you would like your account or personal information deleted, please contact us (see Contact us below) and we will action your request manually.

Your rights

Depending on where you live, you may have rights over your personal information under data protection law, including the right to:

• ask us what personal information we hold about you, and get a copy of it;
• ask us to correct inaccurate information — you can update most of your own account and profile information directly within Gym Progress;
• ask us to delete your information;
• object to, or ask us to restrict, certain processing;
• ask for your information in a portable format.

To exercise any of these rights, contact us using the details below. If you are in the UK and are not satisfied with our response, you also have the right to complain to the Information Commissioner's Office (ICO).

Security

We take reasonable steps to protect your personal information, including using AWS Cognito for authentication and AWS's managed infrastructure to host and store data. However, no online service can guarantee complete security, and we cannot promise that your information will never be lost, accessed, or disclosed without authorisation.

Changes to this Privacy Policy

We may update this Privacy Policy as Gym Progress develops. If we start collecting a new category of personal information, or start using your information for a new purpose, we will update this policy at that time. We encourage you to check this page occasionally for the latest version.

Contact us

If you have any questions about this Privacy Policy, or want to exercise any of your rights, please contact us at privacy@gymprogress.com.