Privacy Policy
Last updated 5 October 2026
GainBrain is a strength-training log run by Levi Houghton, an independent developer. This policy explains what the app stores about you, why, who else handles it, and how to get it deleted. Questions: support@gainbrain.app.
What GainBrain stores
- Your account: email address, the name you give, a username, and your password, which is stored only as a one-way hash, never as the password itself.
- Your training: what you enter, such as sessions, exercises, sets, weights, reps, effort ratings, rest times, notes, bodyweight, templates, training plans, custom exercises, and any history you import from another app. Each session also records its time zone so it is shown on the right day.
- Security records: to slow down password guessing and abuse, recent sign-in and request attempts are recorded against a scrambled (hashed) form of your network address, never the address itself, and discarded after a short period. Our hosting provider also keeps short-lived request logs.
- On your device: two essential cookies that keep you signed in, and a local copy of your recent training so the app opens quickly and keeps working through brief connection drops. Your light or dark theme choice is stored on the device too.
How it is used
- To run the app: storing and syncing your training and calculating your progress.
- To send account emails, meaning address confirmation and password resets. There is no marketing email.
- To understand how the app is used. The developer sees per-account usage figures (how often you log, how complete your entries are), not the content of your training. The developer can technically access the database to run and repair the service, and does not look at an individual's training except to fix a problem that person reports, or where the law requires it.
What GainBrain does not do
No advertising. No selling or renting of your data. No third-party analytics or tracking. Your data is not used to train AI models.
Who else handles your data
These services process data only to provide their part of the app:
- Vercel: hosts the app.
- Neon: the database, in the United States.
- Resend: sends account emails.
- GitHub: stores private nightly backups, each deleted after 30 days.
If you choose to connect GainBrain to Claude, the training data Claude asks for is sent to your Claude account, where Anthropic's own terms and privacy policy apply. Nothing is shared with Claude unless you connect it, and you can disconnect it at any time.
How long it is kept, and deleting it
Your data is kept for as long as your account exists. You can delete your account at any time in the app, under Account → Delete account. That immediately and permanently removes your account and all of your training from the database, and the copy on the device you delete from. Copies in the nightly backups are deleted within 30 days.
Your choices and rights
You can see and correct your data in the app, and ask for a copy of it or for its deletion by emailing support. Depending on where you live (for example in the EU, UK or California), you may have further rights over your personal data. Write to support and the request will be handled promptly.
Security
Connections are encrypted. Passwords, access tokens and one-time email links are stored only as hashes. Sign-in, password-reset and sign-up attempts are rate-limited.
Children
GainBrain is not intended for children under 13 and does not knowingly collect their data.
Health information
Bodyweight and training data can reveal things about your health. It is used only as described above. GainBrain is a training log, not a medical service.
Changes
If this policy changes, the date at the top changes too. Significant changes will be announced in the app or by email before they take effect.