Consumer Health Data Privacy Policy
Last updated: 22 September 2026
This policy applies to "consumer health data" as those laws define it, and supplements our Privacy Policy, which covers everything else. Where the two overlap, this one governs for consumer health data. Medorius is the regulated entity; contact us at support@medorius.com.
1. What consumer health data we collect
Because Gymwise is a workout tracker, most of the information you enter is health data as those laws define it. Specifically:
- Training records: the exercises, sets, reps, weights and durations you log, the routines you build, personal records, and notes you attach.
- Body measurements you choose to enter, such as body weight, body fat percentage and circumferences.
- Apple Health data, only if you grant permission: heart rate and active energy during a session, and body mass and body fat percentage for your stats.
- Training summaries we calculate from the above, such as weekly volume per muscle and recovery estimates. These are derived from your own records and shown only to you.
We do not collect precise geolocation, biometric identifiers, reproductive or sexual health information, or any health data from sources other than you and your own device.
2. Where it comes from
- You, when you log a workout, build a routine or enter a measurement.
- Your device, via Apple Health, and only after you grant the permission in iOS. You can see and revoke exactly what is shared in the Health app under Sharing → Apps.
- Our own systems, which calculate summaries from the data above.
3. Why we collect it
Solely to provide the service you asked for: recording your training, displaying it to you, syncing it between your iPhone and Apple Watch, restoring it on a new device, and, if you choose, saving workouts to Apple Health. We collect nothing beyond what those purposes need, and we do not use consumer health data for advertising, marketing, profiling, research, or any purpose you have not requested.
4. Who it is shared with
We do not sell consumer health data, and we do not share it with anyone for their own purposes. It is processed only by the service providers that run Gymwise, acting on our instructions under contract:
| Recipient | Role |
|---|---|
| Google (Cloud Firestore) | Stores your synced training records, measurements and settings. |
| Google (Firebase Authentication, App Check) | Identifies your account and blocks abuse. |
| Apple | Delivers the app, and holds any data you choose to save to Apple Health on your device. |
None of these may use your health data for anything other than providing our service. No affiliate of ours receives it. If you use Gymwise without an account, your data stays on your device and is not sent to us at all.
5. Consent
Collecting the data above is necessary to provide the product you have chosen to use, which is the basis the law allows without separate consent. Apple Health data is collected only with the explicit permission you grant in iOS. We will not collect additional categories of consumer health data, or share it for any new purpose, without first asking for your clear and separate consent.
6. Your rights
- Confirm and access: ask whether we hold consumer health data about you, and receive a copy, including a list of the third parties it has been shared with.
- Withdraw consent at any time: delete a measurement, revoke the Health permission in iOS, or delete your account.
- Delete: ask us to delete your consumer health data. We will delete it from our live systems and instruct our service providers to do the same, and it is gone from backups within 30 days — the same timetable as the Privacy Policy.
- Appeal: if we refuse a request, reply and a different person will review it within 45 days. If you remain unsatisfied, you may contact your state attorney general.
Exercise any of these by emailing support@medorius.com from the address on your account, or by deleting your account in the app under Profile → Account. We will respond within 45 days, and will not discriminate against you for making a request.
7. Changes
If this policy changes materially we will update the date above and tell you in the app before the change takes effect. We will not expand how we collect or share consumer health data without your consent.
8. Contact
Medorius
support@medorius.com
medorius.com