Last updated: June 26, 2026
By downloading, installing, or using our mobile app and website, you declare that you have read, understood, and agree to this Privacy Policy and our Terms of Use. Before that, no personal data is stored or processed. If you do not agree with any part of this policy, please do not use our platform.
Gym Rank X is intended exclusively for users aged 16 and over. Users between 16 and 18 may only use the platform with the consent of their parents or legal guardians. We do not knowingly collect personal data from children under 16. Anyone who does not meet these requirements will have their account and all associated data deleted as soon as this is identified.
We collect the following categories of data, depending on the features you use:
Content visibility. Posts and check-ins marked as "public" are visible to anyone within Gym Rank X, including through search, recommendations and the feed algorithm. Posts marked as "private" are visible only to the groups the post is linked to. Reactions, comments and other interactions follow the same visibility as the post they belong to. Your name, profile photo and username are public within the network and may be found through search and recommendations.
Group visibility. Every group is public. Its name, profile photo, banner photo, member count, check-in count and other aggregate group information are visible to anyone within Gym Rank X, including through search and recommendations. Although it is public, the admission of new members may be regulated by the group's administrators. Posts, check-ins and other content do not belong to the group: they belong to the users, follow each user's privacy settings, and may or may not be linked to groups.
Rankings. Gym Rank X offers public rankings, available to everyone, based on post frequency and on goals proposed within the app — such as comments on friends' photos, check-in streaks, friends invited, among others. We also provide group rankings — global, regional and segmented by country, city, neighborhood, among others. Information used to build these rankings (such as your name, profile photo, group and aggregate activity metrics) is displayed publicly within them. Sensitive, personal and health data is never used as part of the ranking dynamics nor made public.
To understand how our app and website are used, fix problems, keep the platform secure and measure our marketing, we and our partners collect usage and technical data such as: screens and pages viewed and actions taken (registration, check-ins, level-ups, purchases); crash and error reports; device and session identifiers; web metadata such as your User-Agent, browser, operating system, language, timestamps, referral/traffic source and network telemetry; device model and screen resolution; and performance metrics. We also use your IP address for security and diagnostics and to estimate your approximate location (city, region, country). On the website, this data is only collected after you opt in (see Cookies below). On mobile, we do not record your screen.
Advertising identifiers. We also collect your device advertising identifiers (Apple IDFA on iOS — subject to App Tracking Transparency — and Google Advertising ID on Android) and match this data with advertising providers (Meta, TikTok and similar) to attribute, measure and optimize the performance of our campaigns.
On our website we use strictly necessary cookies to keep you signed in and run the site (e.g., Supabase authentication) — these do not require consent. We also use optional analytics and marketing cookies and identifiers (Google Ads / Google Tag Manager and Vercel Analytics) that are only activated after you opt in through our cookie banner. You can accept, reject or change your choice at any time via the "Cookie preferences" link in the footer.
We process your data based on the performance of our contract with you (to provide the service), our legitimate interests (to secure and improve the platform), legal obligations, and your consent. Sensitive health data — including medication and medical conditions — is optional and is processed only when you voluntarily choose to provide it (opt-in) within the app. You can choose not to provide it, stop providing it, or request its deletion at any time. Connecting Apple Health / Health Connect is always optional and based on the permission you grant on your device.
We do not sell your personal data. We share data with service providers strictly to operate the platform, including:
We also run our own processing — including the automation of social events such as posts, comments and reactions — on virtual machines hosted in public cloud located in Brazil. Some of our providers (including AI, analytics and infrastructure partners) operate servers outside Brazil and the European Union, so using the app necessarily involves transferring your data internationally. This transfer is inherent to how the app works and there is no way to opt out of it while using the service. When we transfer your data internationally, we rely on a specific legal basis for the transfer: standard contractual clauses entered into with these operators, as part of their Data Processing Agreements (DPAs), and/or the other transfer hypotheses set out in Article 33 of the Brazilian LGPD.
We retain your personal data for as long as your account is active or as needed to provide the service. As a general guide: your Geni conversations and consolidated AI memory are kept while your account is active and removed upon account deletion; health tracking and weight history are kept while your account is active; and subscription/purchase events are kept for the period required by tax and accounting obligations. After you delete your account, we remove or anonymize your personal data, except where we must keep certain records (for example, transaction history) to comply with legal, tax or security obligations.
We adopt technical and organizational measures to protect your information, such as encryption in transit, access controls, usage restrictions and continuous monitoring. Although no method of transmitting data over the internet is completely secure, we work continuously to protect your data and, in the event of a relevant incident, we will notify you and the competent authorities as required by applicable law.
Under applicable data protection laws (including the Brazilian LGPD and the GDPR), you may request access to your data, correction, deletion, anonymization, information about sharing, and you may withdraw consent at any time. You can delete your account directly in the app. To request a portable export of your data (provided within up to 30 days) or to exercise any of these rights, contact us using the details in the Contact section below.
The workout plans, diet plans and information provided by Geni and the platform are for general guidance and motivation only and do not replace advice from a qualified health professional. Always consult a doctor or specialist before starting a training or nutrition program, especially if you have any medical condition or use medication.
We may update this Privacy Policy periodically. Significant changes will be notified through the application. We recommend reviewing this page regularly.
For any matter — privacy questions, to exercise your rights, to request deletion of your account and data, or to request a portable export of your data — reach us at support@gymrankx.com. Each of these requests has a different SLA, which we will communicate to you by email.
Data controller: Grx Labs (CNPJ 67.896.580/0001-18). Data Protection Officer (Encarregado): Milton Bertachini.
Last updated: June 26, 2026