“Encrypted” is one of the most abused words in software. So if you are looking for an encrypted fitness app, here is exactly what GymAI means by it, including the part most companies leave out.
GymAI is not open yet. What follows describes how it is designed, so you can decide before it launches whether that is the kind of protection you want.
What is sealed with your key
- Your body measurements
- Your pain history
- Your reasons for missing a session
- Your custom activities
These are sealed with a key only you hold. There is no copy kept for us and no operator key. Nobody at GymAI can read them, and neither can your gym, because there is no mechanism by which they could. That is cryptography, not a promise.
What is not sealed, and why we say so
Your training history, such as the sets and weights you log, is stored so the app can calculate your next session. It is protected by access control in our code, not by your key. We will not claim we cannot read it, because technically we could. We say plainly which protection covers which data.
There is a practical reason for this split. The app works out your next weights and reps from your own history, and it ramps you back after days off. That needs the history to be available to the part of the system doing the calculation.
How an encrypted fitness app should explain itself
A useful test for any app that says it is encrypted: ask which data is sealed, who holds the key, and what happens if you lose it. If the answer is vague, the protection probably is too. Our answers are short:
- Which data: body measurements, pain history, missed-session reasons and custom activities.
- Who holds the key: you, and only you. No recovery copy, no operator key.
- If you lose it: recovery codes cover a lost device. Losing every device and every recovery code loses the sealed set; your training history comes back at your next sign-in.
Why the distinction matters
Pain and reasons for missing training are health data, the kind that deserves the strongest protection. Of the 41 competing products we examined, not one declares end-to-end encryption.
Encryption is one layer. GymAI also has no advertising product, no telemetry and no third-party calls: no outside scripts, no pixels and no cookies that are not ours. A trainer or physio sees only what you hand them, for as long as you leave it handed over.
Frequently asked questions
Can GymAI read my workouts?
Your training history is protected by access control, not by your key, so technically it could be read. Your sealed data cannot be read by us.
Can my gym see my pain notes?
No. Pain history is sealed with your key, and your gym is never even told that you chose it.
What if I lose my phone?
Use a recovery code. That is what they are for. Keep them somewhere safe, away from the phone.
If that is the kind of app you want, join the GymAI waiting list.
No comments yet
Nobody has written anything here. You can be the first.