GemFit · Privacy and data

GemFit Privacy Policy

Effective date: 15 October 2026

This Privacy Policy explains how khanvex ("we", "us", or "our") handles information when you use the GemFit Android application and related support services. GemFit helps users discover workout content, select or schedule workout plans, create workouts, record sets and timed activity, and review fitness activity history.

Information we collect

Account and profile information: your email address, authentication account identifier, display name, and authentication/security records needed to create and protect your account.
Fitness preferences: the fitness goal, experience level, preferred workout location such as home or gym, training days, preferred session duration, and equipment choices that you provide. "Workout location" is a preference you select; GemFit does not collect your GPS or precise device location.
Workout and fitness activity: selected plans, schedules, workout drafts, exercises, targets, completed or skipped sets, repetitions, optional resistance values, timers, workout status, completion dates, duration, history, and synchronization state.
Technical and security information: session and request identifiers, synchronization metadata, deletion-request status, network/service diagnostics, and security or abuse-prevention logs generated when the app communicates with its service providers.
Support communications: information you choose to include when you contact support. Do not send passwords, one-time codes, authentication tokens, reset links, or identity documents unless support has explained why specific additional information is necessary.

GemFit does not request access to your device's precise or approximate location, contacts, camera, microphone, photos, media library, body sensors, Health Connect records, advertising ID, or payment information. GemFit does not provide a personal photo, video, or document upload feature. Public exercise images and videos are GemFit product content, not user uploads.

How we use information

create, authenticate, secure, recover, and delete your GemFit account;
save your profile and fitness preferences;
match and display suitable workout content based on the preferences you choose;
create schedules, retain workout drafts, record actual workout activity, synchronize devices, and display progress and history;
operate, troubleshoot, secure, and improve the reliability of GemFit; and
respond to support, privacy, and account-deletion requests.

Storage and service providers

Supabase provides authentication, database, server-function, and related infrastructure used to store account, profile, preference, schedule, workout, activity, and security information. Account-scoped data is also stored in GemFit's private app storage on your device so drafts, active workouts, pending synchronization, and recovery state are not silently lost. Cloudflare-backed khanvex.tech infrastructure serves public exercise and workout-plan images and videos. Our hosting and email providers process website requests and support or authentication email as necessary to provide those services.

We use service providers to operate GemFit. We do not sell personal information, and the current app contains no advertising, behavioral-advertising, or third-party analytics SDK. Service-provider processing and any legally required disclosure are subject to applicable agreements and law.

Data retention

Account data is kept while your GemFit account is active and as needed to provide the features you use. Workout drafts and pending synchronization data may remain in private app storage until synchronized, explicitly discarded, or removed after confirmed account deletion. A minimal server-side deletion receipt containing request identifiers, status, and timestamps is retained for retry and recovery; completed receipts are scheduled to expire after seven days.

Supabase, hosting, email, and Cloudflare providers may retain service logs and backups under their applicable agreements, security requirements, and operational retention schedules. These provider-controlled records are not governed by GemFit’s seven-day deletion-receipt cleanup and may remain for different periods. Limited information may also be retained when reasonably necessary for security, fraud prevention, dispute resolution, enforcement, or legal compliance. We do not promise that provider backups or security logs are erased on the seven-day deletion-receipt schedule.

Account controls

Delete your GemFit account

You can permanently delete your GemFit account in the Android app. Sign in, then open Profile → Account settings → Delete account. Review the warning, enter your current password to verify ownership, and confirm deletion.

If you cannot access the app or your account, email support@khanvex.tech with the subject GemFit account deletion request and the email address associated with your account. Do not send your password, one-time code, authentication token, reset link, workout details, or identity documents unless GemFit support explains why specific additional information is necessary. Sending an email does not automatically delete an account; we must verify account ownership before destructive processing.

Confirmed deletion removes your GemFit authentication account, profile and display name, fitness preferences, personal plan assignments and scheduled occurrences, workout sessions and recorded sets, progress and activity history, and account-scoped drafts or pending workout changes on a device after that device receives confirmation. Account deactivation or freezing is not used as a substitute for deletion.

Shared exercise records, starter workout programs, images, and videos are GemFit product content and are not deleted with an account. Minimal deletion receipts and limited provider logs or backups may remain for the periods and reasons described in the Data retention section.

Security

GemFit uses encrypted network transport, account-scoped access controls, private application storage, and database security controls intended to protect user information. No storage or transmission method is guaranteed to be completely secure, and GemFit does not claim end-to-end encryption.

Fitness and medical disclaimer

GemFit provides general fitness information and workout logging for educational and wellness purposes. It is not medical advice, a medical device, or a substitute for advice from a qualified healthcare professional. Workout suggestions are based on preferences you choose and are not individually prescribed or clinically validated. Stop exercising and seek appropriate professional guidance if you experience pain, dizziness, or other concerning symptoms.

Children and intended audience

GemFit is intended for users aged 15 and older. GemFit is intended for a general fitness audience aged 15 and older and is not directed to children under 15.

International processing and your rights

Information may be processed in countries where we or our service providers operate. The privacy rights available to you depend on Pakistan and the laws that apply to you. You may contact us to ask a privacy question or request access, correction, or deletion. We may need to verify your identity before acting on a request.

Changes to this policy

We may update this policy when GemFit's features, providers, or legal obligations change. We will update the effective date on this page and provide any additional notice required by applicable law.

Contact

GemFit is published by khanvex. For support, privacy questions, or account-deletion help, email support@khanvex.tech.