This is an English translation of the Polish privacy policy, provided for convenience. In case of any discrepancy between the two versions, the Polish version prevails.

Privacy policy

Last updated: 17 October 2026

1. General information

  1. This policy applies to the website available at junglegymai.app and to the JungleGYM mobile app for iOS and Android devices (together: the “Service”).
  2. The operator of the Service and the controller of personal data is: CodeCrafter Szymon Piecuch, Henryka Dąbrowskiego 67/21, 43-100 Tychy, Poland (the “Controller”, “we”).
  3. For any matter concerning personal data you can contact us at: kontakt@junglegymai.app.
  4. The Service is a personal trainer based on artificial intelligence (AI): using your profile and training history, it prepares a training plan, guides you through workouts and replies to chat messages.
  5. The Service is intended for adults only. We do not knowingly collect data from minors — if we learn that an account was created by a minor, we will delete it.

2. What data we process

  1. Account data: email address, first and last name, and password (stored only as a hash). If you sign in with Apple or Google, we receive from them your email address (in the case of Apple this may be a relay address that hides your real address) and your first and last name, if you share them.
  2. Training profile from the questionnaire you fill in after creating an account: training goal (including a description of your own goal, if you enter one), experience level, number of training days per week, workout length and training location, and — if you choose to provide them — sex, age, height and weight.
  3. Training data: planned and completed workouts, their duration, logged results (e.g. weights and number of reps), workout difficulty ratings and comments on workouts.
  4. Chat messages with the AI coach.
  5. Subscription and payments: subscription status and period. For purchases in the App Store or Google Play, the payment is handled by Apple or Google respectively, and we receive only transaction identifiers and status — we do not receive your card details. For payments on the website, the payment is handled by Stripe; we store billing data (including invoices) and basic card information (brand, last four digits, expiry date), and only Stripe receives the full card details.
  6. Device data: push notification token, platform (iOS or Android) and app version.
  7. Correspondence: data provided in the contact form or in an email (first name, last name, email address, message content).
  8. Technical data: IP address, browser and device information, server logs and error reports.
  9. Visit source: the site that referred you to the Service, the first page you visited and the campaign tags in the link (utm parameters), recorded when you create an account on the website.
  10. We do not collect your location, contacts, photos or recordings. The mobile app contains no advertising or analytics tools and does not track your activity in other apps and websites.

3. Purposes and legal bases of processing

  1. Creating and maintaining your account, preparing your training plan, guiding workouts, chatting with the coach, notifications about your plan and messages, and handling your subscription — to perform the contract for the provision of services (Article 6(1)(b) GDPR).
  2. Transferring data to the artificial intelligence provider (OpenAI), described in section 4 — on the basis of your consent (Article 6(1)(a) GDPR), and to the extent that the data transferred (e.g. weight) may constitute data concerning health — on the basis of your explicit consent (Article 9(2)(a) GDPR).
  3. Billing, invoicing and keeping accounting records — to comply with legal obligations (Article 6(1)(c) GDPR).
  4. Keeping the Service secure, preventing abuse, detecting and fixing errors, website visit statistics and learning where new users come from, replying to messages, and establishing, exercising and defending legal claims — on the basis of our legitimate interest (Article 6(1)(f) GDPR).
  5. Providing data is voluntary, but without an email address you cannot create an account, and without a training profile and the consent described in section 4 the AI coach will not prepare a plan or reply to messages.

4. The AI coach and transferring data to OpenAI

  1. The training plan, chat replies and messages sent on the coach’s initiative (e.g. when a new plan is ready or when you miss planned workouts) are created by an artificial intelligence model from OpenAI.
  2. We transfer data to OpenAI only after you give your consent. In the mobile app you give it by starting or restoring a subscription — information about what data we transfer is shown directly above the purchase button. Only then does the coach start working.
  3. We transfer to OpenAI: your first name; training goal, experience level, number of training days and workout length, and training location; sex, age, height and weight, if they are in your profile; your training history (dates, duration, difficulty ratings, logged results) and planned workouts; the content of chat messages and comments on workouts. We do not transfer your email address.
  4. OpenAI processes this data on our behalf, as a processor, solely to generate replies. Under OpenAI’s policies for API services this data is not used to train OpenAI’s models and may be retained by OpenAI for up to 30 days for abuse monitoring. The data may be processed in the United States (see section 6).
  5. You can withdraw your consent at any time by writing to kontakt@junglegymai.app. From that moment we will stop transferring your data to OpenAI, which means that the AI coach will no longer be able to prepare your plan or reply to messages. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal and does not cancel your subscription — you cancel your subscription in the App Store or Google Play settings or on the website.
  6. AI-generated content is general in nature and does not constitute medical advice. We do not make decisions about you based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you.

5. Recipients of data

  1. We entrust your data only to entities that help us provide the services, under agreements obliging them to protect the data:
    • Amazon Web Services — hosting of the website and server, processing of AI coach tasks, real-time chat, and sending and receiving emails (servers in Frankfurt, EU);
    • MongoDB — database (Amazon Web Services servers in Frankfurt, EU);
    • OpenAI — generating the AI coach’s plans and replies (see section 4);
    • Apple — Sign in with Apple, App Store payments and delivering push notifications to iOS devices;
    • Google — Sign in with Google, Google Play payments, website visit statistics (Google Analytics), playing exercise instruction videos (YouTube), push notifications on Android devices (Firebase Cloud Messaging) and the mailbox that receives messages from the contact form;
    • Stripe — handling payments on the website;
    • Sentry — monitoring and diagnosing errors on the website and server.
  2. We may also share data with entities providing us with accounting and legal services and with public authorities, if required by law.
  3. We do not sell your data and do not share it for advertising purposes.

6. Transferring data outside the European Economic Area

  1. OpenAI, Sentry, Google, Apple and Stripe may process data in the United States. The transfer takes place on the basis of the European Commission’s adequacy decision (the EU-US Data Privacy Framework) for entities covered by it, or on the basis of standard contractual clauses approved by the European Commission.
  2. You can obtain a copy of the safeguards applied by writing to kontakt@junglegymai.app.

7. How long we keep data

  1. Account data, profile, training data, visit source and chat messages — for as long as you have an account.
  2. After your account is deleted we delete your data within 30 days, except for data we must keep longer under the law: billing documents are kept for the period required by tax and accounting regulations (as a rule 5 years from the end of the year in which the tax obligation arose), and data necessary to establish, exercise or defend legal claims — until those claims become time-barred.
  3. Activation links and password reset links expire after 1 to 7 days.
  4. We keep server logs and error reports for no longer than 12 months.
  5. We keep correspondence for as long as needed to handle the matter, and then until the limitation period for any claims expires.
  6. Data transferred to OpenAI may be retained by OpenAI for up to 30 days (see section 4).

8. Deleting your account

  1. You can delete your account in the mobile app (Account tab → Delete account) or by writing to kontakt@junglegymai.app. The account is disabled immediately, and we delete the data within the period described in section 7.
  2. Deleting your account does not cancel your subscription — payments will continue to be charged until it is cancelled. Before deleting your account, cancel your subscription: one purchased in the App Store or Google Play — in the store settings, and one purchased on the website — at junglegymai.app/subscribe.

9. Your rights

  1. You have the right to: access your data and receive a copy of it, rectify your data, erase your data, restrict processing, data portability, object to processing based on legitimate interest, and withdraw your consent at any time (without affecting the lawfulness of processing carried out before its withdrawal).
  2. To exercise these rights, write to kontakt@junglegymai.app. We will reply without undue delay and no later than within one month.
  3. You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).
  4. You can change your training profile at any time in the mobile app or on the website.

10. Push notifications

  1. The app sends push notifications only if you allow them in your device’s system settings.
  2. Notifications tell you about new messages from your coach (with the coach’s name and the beginning of the message) and about a ready training plan. We do not send advertising in them.
  3. You can turn notifications off in your device’s system settings.

11. Cookies and device storage

  1. The website uses cookies:
    • essential — keeping you signed in (valid for up to 365 days) and remembering your chosen language;
    • statistical — Google Analytics, which lets us understand how the website is used, and our own cookie remembering the visit source (valid for up to 90 days);
    • third-party — set by Stripe during payment, by YouTube after you open an exercise video, and by Google on the sign-in page.
  2. You can change your cookie settings in your browser at any time, including deleting or blocking them. Blocking essential cookies will prevent you from signing in to the website.
  3. The mobile app does not use cookies. On your device it stores the data needed to keep you signed in and a copy of downloaded data so that it works faster and without network access; signing out removes it.

12. Security

  1. Connections to the Service are encrypted (TLS), we store passwords only as hashes, and only people and entities that need access to provide the services have access to the data.

13. Changes to the privacy policy

  1. We may update this policy when the way the Service works or the law changes. We will inform you about significant changes in the Service, and if a change concerns the data transferred to OpenAI, we will ask for your consent again.