Privacy Policy

Last updated: November 2, 2026

Effective date: July 28, 2026

Gymwork Inc. ("Gymwork", "we", "us") provides the Condi mobile application, Apple Watch application, widgets, website and related services (together, the "Service"). This Privacy Policy explains what information we process, why, where we store and transfer it, who we share it with, and the rights you can exercise.

This is the international version of our Privacy Policy. If you are in the Republic of Korea, the Korean-language version applies to you.

1. Who is responsible for your data

For questions about this policy or to exercise your rights, contact us at support@gymwork.pro.

2. Information we process

What we process depends on the features you use and the permissions you grant.

2.1 Account and profile

2.2 Health and wellness data

If you grant access to Apple Health, Android Health Connect or Garmin, we may read or write:

We do not access Apple Health, Health Connect or Garmin data beyond the scope you permit. You can change permissions in your device or in the external service at any time.

2.3 AI features

When you use AI features we may process:

Please avoid including other people's personal data, or sensitive information you do not need to provide, in photos or free-text fields.

2.4 Payment and subscription

Actual payment details such as card numbers are processed by Apple (App Store) or Google (Google Play). We never receive or store them.

2.5 Device, usage and support

3. How we collect information

4. Why we process your data, and our legal basis

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases under Article 6 (and, for health data, Article 9) of the GDPR.

PurposeLegal basis
Creating and authenticating your account, keeping you signed inPerformance of a contract (Art. 6(1)(b))
Syncing, displaying and analysing health, activity, sleep and nutrition data; providing personalised metricsYour explicit consent (Art. 9(2)(a)), given when you grant health permissions
AI-assisted logging, explanations, summaries and responses you requestYour explicit consent (Art. 9(2)(a)) and performance of a contract
Apple Watch, widgets, Live Activities and cross-device syncPerformance of a contract (Art. 6(1)(b))
Verifying purchases, providing subscription benefits, restoring purchases and supportPerformance of a contract (Art. 6(1)(b))
Fault detection, security, fraud prevention, quality improvement and aggregate statisticsOur legitimate interests (Art. 6(1)(f))
Advertising measurement using device identifiersYour consent, given through the App Tracking Transparency prompt
Responding to enquiries, sending essential notices and meeting legal obligationsLegal obligation (Art. 6(1)(c)) and legitimate interests

We do not use health information for targeted advertising, advertising profiling or data brokerage.

You may withdraw consent at any time by revoking the relevant permission in your device settings or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and the related features may stop working.

5. Storing and processing health data

Condi uses Apple Health on iOS and Health Connect on Android as the primary source of on-device health data. Some data you record manually may be written to Apple Health depending on your choices.

To provide sync, backup, multi-device use, analysis and AI features, some health and wellness information you select or record is transmitted over encrypted connections to our servers, where it is stored and processed. Condi's health data therefore does not remain solely on your device.

Information needed for widgets and Apple Watch integration may be stored temporarily on your device and in the Apple App Group container.

We do not use data received from HealthKit for advertising, and we do not sell it to data brokers. We use it only to provide health and fitness features and the functions you explicitly request.

5.1 Galaxy Watch HRV measurements

The Condi Wear OS app uses Samsung Health Sensor SDK on supported Galaxy Watches. Only after you provide separate consent in the phone app and grant the watch sensor permissions does it read heart rate and inter-beat intervals (IBI) to calculate HRV (RMSSD) on the watch. With background sensor access, short periodic measurements can run while you rest or sleep, even when the app is not visible.

Raw inter-beat intervals are used only for calculation on the watch and are neither stored nor transmitted. Valid HRV values, the average heart rate for the same measurement window calculated from the inter-beat intervals that passed the quality check, measurement times, context and quality are synchronized over encrypted connections with the paired phone and our servers to provide recovery and condition scores and trends. Measurements that do not meet the quality threshold are recorded only with their time, quality information and exclusion reason, without raw inter-beat intervals; they are excluded from default calculations and displays but remain available for you to view. You can disable collection and delete Galaxy Watch HRV records in the phone app, and revoke sensor permissions in watch settings. Galaxy Watch HRV records on our servers are also deleted when you delete your account.

HRV measured directly on Galaxy Watch and metrics derived from it are excluded from external AI services, including external AI services you connect to Condi in the app. This exclusion also applies to the general AI description below. This health data is not used for advertising or sold.

6. AI features and third-party AI providers

AI features run only when you submit a request by entering text or selecting a photo. To process your request, your input, photos and related recent records may be transmitted in encrypted form to third-party AI providers, including Microsoft's Azure OpenAI Service.

We aim to send only what is reasonably necessary to process the request. Information provided for AI processing may allow inferences about your health, so please review the guidance and consent information before using AI features.

AI providers process information under their own contracts, security standards and privacy policies. Generative AI output can be inaccurate or incomplete and is not medical advice, diagnosis or treatment. Verify the underlying information and consult a healthcare professional before making important decisions.

You can use the rest of the Service without using AI features, although AI-assisted logging and analysis will be unavailable.

7. Sharing and processors

We do not sell or rent your personal data. The following categories of providers process data on our behalf so we can operate the Service:

We assess the privacy and security standards of processors and bind them by contract to purpose limitation, safeguards, sub-processor management, and return or deletion on termination.

We may also disclose personal data where permitted by law:

8. International transfers

We are based in the Republic of Korea, and some providers process information outside your country, including in the United States, Japan, the European Economic Area and other regions those providers operate.

Where we transfer personal data out of the EEA, the UK or Switzerland, we rely on an applicable safeguard, such as the European Commission's adequacy decision for the Republic of Korea, or Standard Contractual Clauses combined with supplementary measures where required. You can request a copy of the relevant safeguard at support@gymwork.pro.

Transfers connected to optional features occur only when you choose to use Apple, Google or Garmin integrations or AI features. You can decline these transfers by not using those features or by withdrawing the relevant permission; the related features will then be limited.

9. How long we keep data

We keep personal data for the minimum period needed for the purpose, and delete or de-identify it without undue delay after account deletion or once the purpose is met.

Where law requires longer retention, we store that data separately for the required period. We may also retain limited information where necessary to establish or defend legal claims, prevent fraud, investigate security incidents, or complete a transaction you requested.

10. Deletion

When a retention period ends or the purpose is met, we destroy personal data in a manner that makes recovery impracticable. Electronic files are securely deleted and paper documents are shredded or incinerated.

Information remaining in backups is deleted on the backup rotation schedule. Until then we restrict access and do not use it for ordinary purposes such as service delivery.

11. Your rights

Subject to applicable law, you can:

You can change Apple Health permissions in your device settings, change Health Connect permissions in the Health Connect app on Android, and disconnect Garmin in the integration settings. Apple or Google sign-in connections can also be revoked in those account settings.

To exercise your rights, email support@gymwork.pro. We will verify your identity and respond within the period required by law, which is normally one month under the GDPR. If you are in the EEA, the UK or Switzerland, you may also complain to your local data protection authority.

12. Account and data deletion

You can delete your account in the app under Settings, or by emailing support@gymwork.pro. When deletion completes, your access ends and we delete or de-identify your personal data, except information we must retain by law or need for security and dispute handling. When you delete your account in the app, the health and lifestyle records, profile information, AI inputs and outputs, photos and device information stored on the Condi service servers are deleted, and your account information on those servers is de-identified. Payment and subscription transaction records are kept separately from other data for the statutory retention periods in Section 9. Some account information synced to our company-wide account and operations systems (such as email address, name and device identifiers), as well as security and access logs and backups, may not be deleted immediately by deleting your account in the app; you can request deletion of this information at support@gymwork.pro.

Deleting your account does not cancel your App Store or Google Play subscription. To stop a paid subscription, cancel it separately in your Apple subscription settings on iOS or in Google Play Store subscriptions on Android.

Data already stored in external services such as Apple Health, Health Connect or Garmin may not be deleted by deleting your Condi account. Manage that data directly in each device and external service.

13. Children

The Service is not directed to children. We do not knowingly collect personal data from children under 16, or under the minimum age set by your country's law where that age is lower (13 in some jurisdictions), without the consent of a holder of parental responsibility.

If you believe a child's information has been collected without valid consent, contact support@gymwork.pro and we will take the necessary steps without undue delay.

14. Security

We apply reasonable technical, organisational and physical safeguards, including:

No transmission or storage system is completely secure. Please also maintain reasonable safeguards such as device locks, operating system updates and account protection.

15. Tracking technologies and advertising

We do not sell health information or use it for targeted advertising or marketing. We may process minimal device and usage information for reliability, security, subscription verification and product improvement.

We use Meta App Events to measure whether people install the app or subscribe after seeing our ads. We send app install and open events, paywall view, checkout start and subscription purchase events, and your Condi member number to Meta. On iOS, the advertising identifier is sent only if you allow tracking in Apple's App Tracking Transparency prompt. On Android, the advertising ID and these events are sent only if you allow it in the prompt the app shows once or in the app's Settings › Other › "Ad performance measurement". Until you allow it, if you decline, or if you later turn it off, neither the events nor the advertising ID are sent, and you can turn it off in the same setting at any time. You can also delete or reset the advertising ID in your device settings. We never send health information to Meta.

Where our website uses essential cookies or similar technologies, you can manage them in your browser settings. Blocking essential technologies may break some functionality.

16. Third-party links

The Service may link to third-party websites or services. Information those services collect and use independently is governed by their own terms and privacy policies. We do not control their independent processing.

17. Changes

We may update this policy to reflect changes in law, the Service or our processing. We will announce material changes in advance through the app, our website, email or another reasonable method, stating the effective date and the reason for the change.

18. Contact