01Data controller

The data controller is Andrei Lazar, developer of the GymTally application (com.reilaus.gym_tally).

Contact for anything concerning this policy: info@andreilazar-dev.com.

02What data the app handles

GymTally works without registration: it never asks for a name, email address, phone number or any personal identifier, and it does not collect advertising identifiers.

The data the app creates and keeps is what you enter while using it:

Workouts: exercises performed, sets, reps, loads, RIR/RPE, rest times, date, time and duration of sessions, any notes.
Programs and planning: programs, days, planned exercises, reference maxes, reminders you set.
Custom exercises you add to the catalogue.
Equipment: available plates and bars, bar weight.
Preferences: units, language, default rest duration and similar settings.

Loads, sets and workout history are health-related data (GDPR art. 9). That is precisely why they stay on the device, never appear in diagnostic logs, and are used for no purpose other than showing you your own training.

03Where it is stored

All data is stored locally on your device, in an application database inside the app's private storage area. The developer runs no server and has no access to this data at any time.

04When data leaves the device

Only on your explicit action, and only to the destination you pick:

Export and sharing: you can export a full backup or CSV data and share it with any app you like (email, cloud storage, file manager). From that point the file follows the rules of the service you hand it to.
Encrypted backup: an export can be protected with a passphrase you choose (AES encryption). The passphrase never leaves your device and cannot be recovered: if you lose it, that backup can no longer be read — not by the developer either.
Sync: optional and off by default. In the current version it writes a copy of your data to a folder on the device that you choose. If that folder is itself synced by a third-party service (a cloud backup app, for instance), that service's privacy policy applies to that copy.
Import: importing a backup reads the file from the device; nothing is transmitted.

GymTally makes no network connection to send your training data anywhere.

05No tracking, no advertising

The app contains no advertising SDKs, analytics, profiling, third-party crash reporting or tracking of any kind. No profiles are built and no automated decisions are made about you.

Technical diagnostics are local only, serve development, are disabled in released builds, contain no personal or health data and are never transmitted.

06Permissions and why

Permission	What it is for
Notifications	Telling you when rest between sets is over, and delivering the workout reminders you set. You can deny it: the app still works, without notifications.
Exact alarms (Android)	Ending the rest timer at the right moment: a timer that rings a few minutes late would be useless.
Boot completed (Android)	Re-scheduling your reminders after the phone restarts, otherwise they would be lost.
File access	Only at the moment you pick a file to import or a destination to export to. The app reads no other files on the device.

07Retention

Data stays on your device until you delete it. There is no server-side retention, because there is no server.

You can erase everything at any time from Settings → Data inside the app, or by uninstalling it, which removes the local database. Files you exported yourself stay where you put them: only you can delete those.

08Your rights

The GDPR grants you rights of access, rectification, erasure, restriction, objection and portability (arts. 15-21). Since the data never leaves your device and the developer holds no copy, you exercise them directly in the app:

access and portability: export your data in a readable format (backup or CSV);
rectification: edit or correct entries in the app;
erasure: Settings → Data, or uninstall the app.

For anything else write to info@andreilazar-dev.com. You also have the right to lodge a complaint with your data protection supervisory authority.

09Children

GymTally is not directed to children and does not knowingly collect data from children under 13. As the developer collects no data at all, no children's data is processed remotely.

10Store services

The app is distributed through Google Play and the Apple App Store. Those stores may collect their own data about installation and use (aggregate download statistics, operating-system crash reports and the like) under Google's and Apple's respective privacy policies. Those are the stores' own processing activities, independent from the app, outside the developer's control and not fed by any data from the app.

11Changes to this policy

If the app changes in a way that affects any of the above — for example by adding sync to a cloud service — this page will be updated before that release, and the effective date at the top will change accordingly.