GymPlannerX
What the GymPlannerX app (Android com.blackforest.gymplannerx, iOS com.akilon.workout.ios) keeps on your phone, what reaches our servers, and how to get rid of it. Published by Black Forest Software.
Last updated: 12 October 2026
1.The short version
The app works offline and it never asks you to sign in. Your programs, your workouts, your weight and your meals live on your phone.
Your body measurements and your food log never leave the device at all. There is no advertising in the app and no advertising identifier in the build. We do not sell data to anyone.
The rest of this page is the detail behind those three sentences.
2.Who we are
GymPlannerX is operated by Black Forest Software, a software business registered in Malaysia (SSM IP0624469-P), based in Impian Heights, Puchong Jaya, 47100, Selangor, Malaysia. In this policy “we”, “us” and “our” mean Black Forest Software as the operator of the app, and we are responsible for the personal data it handles.
The app plans gym training and estimates daily food targets. It is general fitness information. It is not medical advice and it is not a medical device.
3.Your body and your food
This is the part people care about most, so it comes first.
Your weight, your height, your age, your sex, and every meal you log are stored only on your phone. They are never sent to our servers. They are never put into analytics. They are never used for advertising, and there is no advertising in the app at all.
The app uses those numbers on the device to estimate what you burn and what to eat. Nothing about that calculation leaves the phone.
You can erase all of it at any time: More > Your data > Erase my body and food data. Your programs and workouts stay.
4.What reaches our servers, and only if you ask
The app never asks you to sign in, and no feature is behind a login. An anonymous account is created for you only the first time you do something that needs our servers:
- Cloud backupPart of Pro. Your programs and the sets you log are stored so another phone can restore them. Nothing about your body is included.
- CoachingIf you coach someone or are coached, the shared program and the notes between the two of you are stored.
- Redeeming a codeThe code and the entitlement it grants.
- FeedbackThe message you type and any screenshot you attach, so we can read it and reply in an update.
That account holds no name, no email address and no password. It is identified by an id generated on your device. The app shows it under More > Your data.
Our servers run on Amazon Web Services in the United States. The database is MongoDB Atlas. Data is encrypted in transit and at rest.
5.What you type into the AI features
If you describe your training in the AI planner, tune your meal schedule, or speak a set into the workout runner, the text or the transcript is sent to our server and on to Anthropic to be read, and the answer comes back to the app.
We do not store what you typed or said. The only thing we keep is a counter of how many requests you made, so nobody can run up the bill, and it expires by itself.
Those requests deliberately carry no body data. See Anthropic’s Privacy Policy.
6.What we count
We use Amplitude for product analytics: which screens get used, and whether a purchase completed. Those events are tied to an anonymous id for your device. That id is not your name and we never ask for one.
No weights, no meals, no body measurements, no program content and no exercise names are ever sent to analytics. None of it is used for advertising, and none of it is sold or shared with data brokers.
You can switch it off: More > Your data > Let us count taps. It takes effect on the next event, and the app is otherwise unchanged.
7.Who we share data with
We do not sell your personal data. We share it only with the providers that run parts of the service for us:
- Amazon Web ServicesHosting for our API. See the AWS Privacy Notice.
- MongoDB AtlasThe database behind backup and coaching. See MongoDB’s Privacy Policy.
- AmplitudeProduct analytics. See Amplitude’s Privacy Policy.
- AnthropicThe model behind the AI features, for the text you send it. See Anthropic’s Privacy Policy.
- Google (YouTube)Some exercises have a demonstration video. When you open one of them, the YouTube player loads from Google, so Google receives your IP address and device details and may set cookies. See Google’s Privacy Policy.
- Apple and GooglePayment for in-app purchases, under their own terms. We never see your card or bank details.
We may also disclose data where the law requires it, or to protect our rights, our users, or the security of the service.
8.How long we keep it
Anything on your phone stays until you delete it or uninstall the app. We have no copy of it and no way to reach it.
Anything on our servers is kept while your account exists. Delete the account and it is removed from our database immediately, with no grace period.
Our database keeps a daily backup, and the last 8 days are kept. So a copy of deleted data can stay in those backups for up to 8 days, until the oldest backup is dropped.
Store receipts, the purchase records Apple and Google send us, are not deleted with the account. We keep them for accounting and fraud checks, for as long as tax and accounting records must be kept. A receipt holds the store’s record of the purchase and the anonymous account id it was made under, never your card or bank details.
9.Your choices and rights
- Erase your body and food dataMore > Your data > Erase my body and food data. Immediate, on the device.
- Delete your accountMore > Your data > Delete my account. Immediate, and it removes everything of yours from our servers. If you have already uninstalled the app, use the account deletion page.
- Turn analytics offMore > Your data > Let us count taps. Switch it off and the app stops sending product analytics from that moment. Nothing is queued and nothing is sent later. Everything else works exactly the same.
- Ask us anything elseFor a copy of what we hold, a correction, or any other request, email akilonx@gmail.com. We reply within 30 days.
Deleting your account does not cancel a subscription. Pro is billed by Apple or Google and you cancel it in your store account.
Personal data is handled in line with Malaysia’s Personal Data Protection Act 2010 (PDPA). Wherever you live, Malaysia included, the data in sections 4 to 6 is processed in the United States: our servers and database run there, the AI text goes to Anthropic there, and analytics go to Amplitude there.
If you are in Australia, we handle your personal information in line with the Australian Privacy Principles. To complain about how we handled it, email akilonx@gmail.com. We reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner.
10.Security
Traffic between the app and our servers uses HTTPS, and data at rest is encrypted. Access to production systems is limited to the people who need it.
The strongest protection here is the design: the most sensitive data the app touches, your body measurements and your food log, never leaves your phone, so there is nothing of it on a server to lose.
11.Children
The app is not directed at children under 13 and we do not knowingly collect data from them. The app also refuses to put anyone under eighteen on a calorie deficit, whatever their programme is set to.
If you believe a child has sent us data, email akilonx@gmail.com and we will remove it.
12.Changes to this policy
If this policy changes we update this page and move the date at the top. Material changes will also be announced in the app.
13.Contact us
Black Forest Software, SSM IP0624469-P, Impian Heights, Puchong Jaya, 47100, Selangor, Malaysia. Email akilonx@gmail.com.
See also the GymPlannerX terms of use.
