OnnJoyGym ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform (the "Service"). This policy is governed by the laws of Estonia and the EU General Data Protection Regulation (GDPR).
The data controller for your information is OnnJoyGym, operating from Tallinn, Estonia.
1. Information We Collect
We collect personal data to provide and improve our Service.
Account Data: When you register, we collect your email address, (hashed) password, gender, bodyweight, and Telegram username. Your email is used for account verification.
Profile & Preference Data: You may voluntarily provide information to complete your profile, such as a bio, fitness goals, experience level, body type, and nutrition goal. To use the "Training Buddies" feature, you must provide preferences including training goal, preferred gym locations, daily schedule, social behavior, and age range.
Training & Wellness Data: If you use the Training Log, we collect your logged workouts (exercises, sets, weights, effort levels) and your daily wellness check-ins (self-rated sleep quality, stress, energy, motivation, and muscle soreness). If you use the Nutrition Log, we collect your self-reported daily calorie, protein, and carbohydrate totals and your supplement checklist entries (creatine, protein powder). This data exists solely to power your personal training recommendations and is never shared with other users.
User-Generated Content (UGC): We collect the videos you upload for the Leaderboard, including the video file and associated metadata (e.g., category, weight, reps).
2. Legal Basis for Processing
We process your data based on the following legal grounds:
Performance of a Contract (Art. 6(1)(b) GDPR): To provide the core services you requested, such as creating your account, matching you with buddies, and running the training clubs.
Legitimate Interest (Art. 6(1)(f) GDPR): To moderate content, ensure the security of our platform, and analyze service usage for improvements.
Consent (Art. 6(1)(a) GDPR): For any non-essential data processing, we will ask for your explicit consent.
3. How We Use and Share Information
Your privacy and safety are paramount. We do not sell your personal data.
To Provide the Service: Your data is used to operate the buddy-matching algorithm, personalize club programs, and verify your leaderboard submissions.
Training Buddies: Your profile preferences are used to calculate match scores. Your Telegram username is only revealed to another user after you have both mutually accepted a buddy request. It is not visible to general users.
Public Content: Approved leaderboard submissions (including the video, your username, and lift details) are publicly visible.
AI Coaching: To generate personalized coaching notes and weekly reports, summaries of your training, nutrition, check-in, and supplement data are processed by Anthropic's Claude API (Anthropic PBC) acting as a data processor. This data is pseudonymized (no name, email, or contact details are sent), is not used by Anthropic to train models, and the AI never makes training decisions — it only explains recommendations produced by our own rule engine.
Service Providers: We use third-party companies to process data on our behalf: Amazon Web Services (hosting, database, and video storage in the EU — Stockholm region), Vercel (web application hosting), and Anthropic (AI coaching notes, as described above). They are contractually bound to protect your data.
Legal Compliance: We may disclose your information if required by law or in response to valid requests by public authorities in Estonia.
4. Data Security & Retention
We implement reasonable technical and organizational measures to protect your data from unauthorized access, use, or disclosure. We retain your personal data only for as long as necessary to provide the Service, or as required by law.
5. Your GDPR Rights
As a user in the EU, you have the right to:
- Access your personal data.
- Rectify inaccurate information.
- Erase your data (right to be forgotten).
- Restrict processing of your data.
- Data Portability.
- Object to processing.
To exercise these rights, please contact us at tallinntraining@gmail.com.
6. Changes to This Policy
We may update this Privacy Policy. We will notify you of any changes by posting the new policy on this page.