Your data is yours

Privacy Policy

Last updated: September 19, 2026

Overview

GRAV is a workout tracker built for strength training. This policy explains what information the GRAV app and website collect, why we collect it, and the choices you have. The short version: we collect as little as possible, we never sell your data, and your training data belongs to you.

Information we collect

Account information. If you create an account, we store your email address and authentication credentials so you can sign in and sync your data across devices.

Training data. Routines, workouts, sets, reps, weights, personal bests, body measurements, and notes you enter in the app. This is stored so the app can show your history, charts, and progress.

GRAV Coach inputs. If you use GRAV Coach, we process the goals, experience level, and equipment details you provide to generate your training program.

Device and usage information. Basic technical data such as device type, operating system version, and app version, used to fix crashes and improve the app. We do not use advertising identifiers and we do not track you across other apps or websites.

How we use your information

To provide the app: saving your workouts, building your history and charts, and syncing across your devices.

To provide GRAV Coach: generating and adapting your training programs.

To support you: answering questions you send to our support team.

To improve the app: understanding crashes and which features are used, in aggregate.

What we do not do

We do not sell or rent your personal information to anyone.

We do not show third-party advertising inside GRAV.

We do not share your training data with third parties, except the service providers listed below, strictly to run the service.

Service providers

We use a small number of infrastructure providers to run GRAV: a cloud hosting provider for the app's backend and database, and an email delivery provider if account emails need to be sent. These providers process data only on our instructions and are bound by confidentiality obligations.

Data retention and deletion

Your training data is retained while your account is active. You can delete individual workouts at any time from the History tab.

To delete your account and all associated data, contact us at hello@grav.fit and we will permanently delete your account and training data within 30 days, unless we must keep certain records for legal reasons.

Health and fitness data

Training data you log in GRAV can reveal information about your physical activity and health. We treat it as sensitive: it is never used for advertising, never sold, and only displayed to you (and, if you choose, synced to your own devices).

Children's privacy

GRAV is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will remove it.

Security

Data in transit is encrypted with TLS, and account passwords are stored only as secure hashes. No system is perfectly secure, but we design GRAV so a breach would expose as little as possible.

Your rights

Depending on where you live (for example the EU/EEA, UK, or California), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Contact us at hello@grav.fit to exercise any of these rights.

Changes to this policy

If we change this policy, we will update the date below and, for significant changes, notify you in the app before the change takes effect.

Contact

Questions about this policy or your data? Email hello@grav.fit.