Privacy Policy

Last updated: 8 August 2026

Gymopol AB (“Gymopol AB” or "we") provides Gymopol, a social platform for fitness enthusiasts (“Gymopol” or the “Services”). In connection with your use of the Services, we process personal data. This Privacy Policy explains how and why we process personal data.

Personal data that we collect and process

We process personal data that you provide when you register a user account (“Account”) and when you use the Services, as well as technical data generated by your use. This may include:

  • Account and profile data (for example name/nickname, email, date of birth, gender, biography, profile photo, privacy settings, training preferences and activities);
  • Clubs/gyms you add to your profile and related map or visitor interactions;
  • Posts, captions, comments (including image or voice comments), reactions and likes;
  • Stories (also called joins), including media, audience filters (such as age or gender), mentions, links, views and optional location or club context;
  • Groups you create or join (membership, roles, group profile information, group posts and group chat);
  • Meetups (details, location, attendance and audience limits such as gender);
  • Messages and media in direct chats, group chats and club chats;
  • Connections, waves, blocks, mutes and reports;
  • Location and proximity data used for Finder, Feed, groups distance and optional post or story location;
  • Share and QR-related data needed to open shared profiles, posts, stories, groups or meetups;
  • Payment and subscription status for premium membership (processed via app stores / payment providers);
  • Technical information (such as IP address, device, app version, operating system and usage logs).

Use of personal data

We use personal data to:

  • Manage registration, pause, suspension or termination of your Account and membership;
  • Provide and operate the Services described in our Membership Terms (including discovery, connections, messaging, stories, groups, meetups, clubs/map and sharing);
  • Apply your privacy and notification settings;
  • Manage premium membership and related entitlements;
  • Support safety and integrity (reports, moderation of reported content, abuse prevention);
  • Provide customer support.

The legal basis for the processing above is the agreement (“Agreement”) you have entered into with us for the Services. Processing of personal data related to your health (if any) is based on your consent, provided through your use of the Services. Depending on applicable law, separate consent may be requested. We also use personal data for:

  • Marketing of the Services and third-party products and services, such as advertisements, promotions and offers;
  • Analysis and development of the Services.

The legal basis for marketing is your consent, which can be withdrawn at any time. The legal basis for analysis and development is our legitimate interest.

Who has access to personal data?

With the exception of information that is visible to other members according to your settings and the features you use, we will not disclose personal data outside Gymopol AB except to external IT service providers (for example authentication, hosting, support and media storage providers) who process personal data on our behalf. We also use payment solution providers (such as Apple and Google) who process payment data under their own responsibility. Personal data may be shared with other members as described below, and with authorities if required by law.

Publicly available information and visibility

What other members can see depends on your Account privacy setting (Settings → Account Privacy: “Private”, “Semi-private” or “Public”), whether you are connections, and the settings of groups, meetups and stories. In “Finder” you can search for other members nearby (within about 100 km). “Feed” shows content from members in a wider local radius (about 300 km). “Explorer” can show content from members worldwide. If you “Wave” and the other member waves back, you become connections and can generally access each other’s profiles as if public and message each other. If a connection is removed, related direct conversations between those members end. Connections appear in Messenger under Contacts.

Private

If you choose “Private”, certain features such as Finder may be unavailable, and your Account will not be shown to other members in Finder.

Profile Information

  • Biography: visible to all members.
  • Date of Joining: visible to all members.
  • Gender and date of birth: private to you.

Posts

  • Content, captions and reaction counts: visible to you and your connections, not via Feed, Explorer or public profile access.
  • Reactions: your identity as a reactor to others’ public posts is visible to the post owner.

Stories

  • Stories are shown according to the audience you choose (for example connections and/or age and gender filters).
  • Viewers of your stories may be visible to you.

Activities, music and clubs

  • Activities, Spotify music and clubs/gyms on your profile: private to you.

Groups and meetups

  • Group membership and meetup attendance follow the group’s and meetup’s own visibility and membership rules; private Accounts may still participate where invited or joined.

Location

  • City and distance may be shown to nearby members within about 100 km when location features are used.

Statistics

  • Post, activity and reaction counts may be visible to other members.

Messenger and club/group chats

  • Connections and waves: private to you.
  • Direct, group and club messages (including images and voice): visible to participants of that conversation. We do not apply automated content monitoring to conversations; we examine conversations only if reported.

Semi-private

Your Account may appear in Finder and you may use Finder. Gender, date of birth, activities and clubs may be used in search matching without being shown directly as on a Public profile. Posts remain limited as for Private (you and connections). Stories follow the audience you set. Music remains private to you. Clubs may be used in matching. Location, statistics and messenger rules are otherwise as for Private.

Public

Your Account may appear in Finder and you may use Finder. Posts may appear in Feed (local), Explorer (worldwide) and on your profile. Activities, music and clubs may be shown to other members (clubs typically to members within about 100 km). Gender and date of birth may be used in matching. Stories still respect the audience filters you set. Messenger contents remain limited to conversation participants.

Sharing links and QR codes

If you share a profile, post, story, group or meetup link or QR code, recipients who open it in Gymopol may see the shared item subject to its visibility rules and their Account status. QR images are stored to provide that sharing feature.

Where and for how long is personal data stored?

Personal data is stored in Gymopol systems and with our IT service providers (including media storage). Data is kept for as long as needed to provide the Services. After you terminate your Account, we delete or anonymize Account data no later than about 30 days after termination, unless we must keep data to defend a legal claim or as required by law. Soft-deleted content (such as posts, comments, messages, groups or meetups) and ended direct conversations may be permanently deleted, including related media files, after a 30-day grace period. Finished stories may remain stored after they are no longer shown to other members. Personal data processed on the basis of consent is deleted if you withdraw consent, subject to legal exceptions.

Your rights

You have the right:

  • To know what personal data we process about you and for what purpose,
  • To know who receives the personal data and how long we keep the personal data,
  • To request that inaccurate or incomplete personal data be corrected or that we delete such personal data,
  • To object to certain processing of personal data and request that the processing of personal data is restricted,
  • To obtain the personal data you have provided in a machine-readable format and to transmit it to another personal data controller.

If you are not satisfied with our processing of personal data, you also have the right to complain to the Swedish Authority for Privacy Protection (IMY), which is our supervisory authority for the processing of personal data.

Contact us for more information

Gymopol AB is the data controller for the processing of your personal data as described above. We have a Data Protection Officer and you can always reach us at gdpr@gymopol.com.