The Short Version
Bravo Gym ("the app") is published by Shahzeb Speaks LLC for The Bravo Gym — Health & Fitness Centre, Karachi, Pakistan. This policy explains what the app collects, why, and what we never do with it.
The app collects the little the gym needs to run your membership, plus the training and health figures you choose to log. Your progress photos never leave your phone. We do not sell your data and we do not use it for advertising profiles.
The gym sees
- Your name, and email and phone if you added them or signed in with Google
- Fee dates and membership expiry
- The days you checked in
- Workouts and messages a trainer sends you
- Your weekly quiz answers
- Your set-up answers and targets, on your profile
The gym does not see
- Every weight you record, measurements and BMI
- Food, water and calorie totals
- Workouts you complete, sets and reps
- The steps and sleep you record
- Progress photos — nobody sees those
What the Gym Can See
When you set up the app you give it a name. Optionally you may add an email address and phone number. The gym's staff can see:
- Your name, and email and phone if you entered them
- Your fee payment dates and membership expiry date
- The days you checked in at the gym
- Any workout a trainer assigns you and any message a trainer sends you
- Your answers to the weekly quiz, and how quickly you answered
- Your set-up answers — height, sex, year of birth, goal weight, training goal, and your step and sleep targets. These sit on your profile, and the gym's member list reads the profile.
Only the name is asked for. Everything else on this list is either optional or something the gym itself enters.
What You Log That the Gym Cannot See
These are stored against your account and are not shown on any staff screen:
- Every weight you record, your measurements and your BMI — tracking your own progress. Your goal weight is on your profile and is in the list above; the readings you log are not.
- Food and water you log, and calorie totals
- Workouts you complete, sets, reps and weights
- The steps you record, from your phone's step counter. Your step and sleep targets are on your profile and are in the list above; the readings are not.
- The sleep you record, and your personal reminders
Steps while the app is closed. Once you allow the permission, the app asks Google Play services on your phone to keep a count of your steps, so the days you walk without opening the app are not lost. Google Play services keeps that count on your phone for up to ten days; it needs no Google sign-in and no internet. When you next open the app, each day's total is saved to your step history.
This is enforced on the server, not just left out of the app's screens. The database rules make each of these readable and writable only by the account that owns them, and administrators are excluded by name — the one place in the whole rule file where the gym's own staff are shut out on purpose.
What Never Leaves Your Phone
Progress photos. They are stored in the app's private folder on your device only. They are never uploaded, they are excluded from your phone's Android backup, and nobody at the gym can see them. If you uninstall the app, they are gone.
Your Phone's Permissions
| Permission | What it is for |
|---|---|
| Notifications | Quiz reminders, fee reminders, and reminders you set yourself |
| Physical activity | Reading your phone's built-in step counter |
| Internet | Reaching the gym's records, and loading ads |
| Run at start-up | Re-arming the reminders you set, so they survive a restart |
The step counter is a low-power chip in the phone. The app reads the count. It is not location and it does not track where you go. You can refuse this permission and enter steps by hand instead.
There is no camera permission. When you add a progress photo, Android's own photo picker hands the app that one image and nothing else.
These are the permissions the app itself uses. The Google libraries that deliver its adverts and notifications add standard ones of their own, such as checking the network connection, keeping the phone awake long enough to deliver a notification, vibration, and the advertising ID. None of them is location, camera, contacts or your files.
Advertising
The app shows banner adverts through Google AdMob. To serve them, Google may collect a device advertising identifier and approximate location derived from your IP address.
We do not give AdMob any of the data listed above. Your name, weight, food, photos, fee records and quiz answers are never shared with any advertiser.
You can reset or delete your advertising ID in Settings → Privacy → Ads on your phone.
Where Your Data Is Stored
In Google Cloud Firestore, part of Google Firebase. Google operates the servers; we control the database. Access is restricted by security rules so one member cannot read another member's records. Everything the app sends is encrypted in transit.
Two things are created automatically so the app can work without a password:
- An anonymous account identifier. It is random and is not linked to your Google account unless you choose to connect Google (see below). It is what makes your data yours without you having to sign up.
- A notification token, if you allow notifications, so reminders and gym announcements can reach your phone.
Nothing from the app is put in your phone's Android backup.
Signing In With Google (Optional)
Without it, your account belongs to this installation of the app: uninstall the app or change phone and your history stays behind. If you choose Continue with Google, your account is linked to your Google account, so signing in with Google on a new phone, or after reinstalling, brings your history back.
When you do, Google shares your name, email address and Google account identifier with the app through Firebase Authentication. The email address is saved on your profile, where the gym's trainers can see it like any other email on a membership. Your Google profile photo is not saved. We do not receive your Google password, your contacts or anything else from your Google account.
You can sign out of Google at any time under Profile. Your history stays on your account until you sign in again or delete it.
How Long We Keep It
For as long as you keep your account. If you never connect Google, the account cannot be reached again from the app once it is uninstalled; to have its records removed, email us or ask at the gym.
Deleting Your Account
In the app: open Profile and tap Delete account (on an account that has never been signed in with Google or an email address, it reads Delete my data), then confirm. If your account is connected to Google, you are then asked to choose the same Google account, to confirm it is you.
This immediately and permanently deletes your profile — name, email, phone, set-up answers and targets — and everything you logged: weight, measurements, food, water, meal plans, steps, sleep, workouts, runs and cardio, training sessions, your training split and fee records. It also deletes your sign-in.
Two records are kept, because they are the gym's as much as yours: the days you checked in, and your weekly quiz answers. They still show the name you gave the app. They have no automatic deletion date; email us and we remove them within 30 days.
Progress photos are only on your phone. Delete them from the Photos screen, or uninstall the app.
Without the app: follow the steps at shahzebspeaks.com/bravo-gym-delete-account, or email admin@shahzebspeaks.com from the address on your account. We delete the same data, and on request the check-ins and quiz answers too, within 30 days.
Children
Bravo Gym is intended for adults. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18. Where a member under 18 trains at the gym, the app should be set up and supervised by a parent or guardian.
If you believe a child's data is in the app, email us and we will remove it.
Your Rights
You can ask us to show you what we hold, correct it, or delete it. You can also delete your account yourself, from the app — see Deleting Your Account.
Email admin@shahzebspeaks.com from the address on your membership, or ask at the gym's reception, and we will act within 30 days. To stop notifications you do not need to ask: there is a switch in the app, under Profile.
Contact
Shahzeb Speaks LLC
1500 N Grant St, Denver, CO 80203, United States
Changes
If this policy changes, the date at the top changes and the new version appears at this URL.