Last updated: 2026-09-29
This policy explains how 曼斯特科技有限公司 ("we", "us") handles your data in GymLog. The short version first: an account is optional. Without an account, everything you enter stays on your own phone. After you create an account, your email address is stored on our servers; body photos, exercise videos and cloud sync of workout records are each separate features you have to turn on yourself — nothing is uploaded until you do.
You can use the full app without creating any account. Workout records, routines, nutrition, body weight and body measurements are all stored in the app's private storage on your phone and are not uploaded anywhere.
This also means the records are gone if you delete the app, switch phones or clear the app's data. To keep your records across phones, create an account and turn on cloud sync — staying account-free means the records live only on this phone.
You sign in with Apple or Google. From them we receive your email address (or, if you choose Apple's Hide My Email, a relay address), an account identifier, and — the first time only — your name. We never see your Apple or Google password.
We store that email address and a system-generated user ID on our servers, used to sign you in and to associate your data with you. The user name you set (or the name Apple or Google gave us) is also stored there, so a coach and trainee who are linked can see each other's name.
Body photos and exercise videos are stored on our own servers and are never stored in iCloud. Exercise videos record audio as well — if other people are talking nearby, their voices will be captured, so please check your surroundings before recording. Photos are only uploaded after your separate, explicit consent; declining does not affect the rest of the app.
Cloud sync of workout records is off by default and only starts after you turn it on in Settings. Once on, it uploads workout records, routines, custom exercises, body weight and nutrition logs, and — if you use coach mode — your client roster (the names and notes you enter for your trainees). Turning it off stops further uploads from this phone; to remove what was already uploaded, delete your account.
If you allow notifications, this device's push token is stored on our servers so notifications can reach you — for example when your coach assigns you a routine. The token is removed when you sign out, and deleted with your account. The rest-timer alert is scheduled locally on your phone and never uploaded.
Sync compares record by record and the newer version wins, based on your device's clock. We also record when the server received each record, so a mismatch (for example a wrongly set phone clock) can be traced. A record you delete on one device leaves a deletion marker containing only its ID and time, so your other devices know it was deleted and will not bring it back.
No analytics tools, no ads, no third-party tracking SDKs. We do not follow what you do inside the app. To see whether the service is working we only count totals from data already on our servers (for example how many accounts were created or how many workouts were synced this week) — never a report about any one person.
We do not collect your location, contacts, photos you did not actively pick, or anything else unrelated to the app's features.
We never sell or share your data with any third party.
Records on your phone are visible only to you. Unless you actively enter an invite code from a coach to link up, nobody can see your workout records. After you link a coach and turn on cloud sync, that coach can see your synced workout records — except sessions you individually hide — until you unlink, which you can do at any time. Routines a coach assigns to you are stored on our servers as part of this.
Body photos and exercise videos are private to you by default. Showing them to a coach requires a separate grant from you, which you can revoke at any time; the permission check runs on the server, not just inside the app. Every time a coach views one of your photos the server keeps a log entry (who, when, which photo); email privacy@cloudmonster.tw to request a copy of this log.
If a coach deletes their account, the access log entries remain but show as "deleted account" — the time and the photo stay, the coach's identity is gone. Your right to audit access to your own data does not disappear because the other side deleted their account.
Our operations staff may come into contact with server data while handling incidents. To prevent abuse (such as uploads that are illegal or violate other people's rights), operations staff may review uploaded photos and videos when necessary and remove violating content. Beyond that, nobody looks at your photos. The files live in a separate, non-public object store and never appear in server logs.
If you set a profile picture while signed in, it is uploaded to our servers and shown to accounts you are linked with — your coach, or your trainees if you are a coach. It is meant to be seen, like a messenger avatar: it is not part of the body-photo timeline, and viewing it is not written to the photo access log. Replacing it deletes the old one; removing it or deleting your account deletes it from our servers.
Messages you send through Help → Contact us are stored on our servers together with the app version and platform, so we can reproduce problems and follow up. If you are signed in, the message is linked to your account; you can also send feedback without an account. It is used for nothing else.
When the app runs into an error it asks whether to send us the technical details (you can also choose "Ask me", "Send automatically" or "Don't send" under Help → About). A report contains only the error type, where in the code it happened, and the app and system versions. Email addresses, long numbers and quoted text are removed before sending, so what you logged is not included.
Error reports go to our own server, not to a third party. They are not linked to your account and we do not store your IP address with them. They are deleted after 90 days.
Health data, body composition, body photos and exercise videos are "sensitive personal data" under Article 6 of Taiwan's Personal Data Protection Act. We treat them as such and obtain your separate consent before collecting any of them.
Per Apple App Store Review Guideline 5.1.3, data read from the Health app, body photos and exercise videos are never used for advertising or marketing, never mined for usage data, and never stored in iCloud.
Steps, active energy, heart rate and sleep read from the Health app are used on your device only and are never uploaded. Body weight read back from the Health app is saved on this phone but is not uploaded by cloud sync either; only weights you enter yourself in GymLog are synced.
While your account exists, data on the server is retained.
When you delete a single photo, the original, its thumbnails and related records are actually deleted — not just marked as deleted.
When you delete your account, everything of yours on the server is deleted; copies in backups are cleared within thirty days.
Keeping a copy: sign in and turn on cloud sync to keep a server copy that follows you to a new phone. You may also request a copy of your personal data by email (below).
Delete account: the Account page in Settings deletes your account directly; server data is permanently deleted and cannot be recovered.
Reset local data: the reset in Settings clears every record on this device, irreversibly. Deleting your account and clearing local data are two separate actions — you can do either one on its own.
Under the Personal Data Protection Act you may also request to review, copy, supplement or correct your personal data, or to stop its collection, processing and use. Write to privacy@cloudmonster.tw.
This app is not suitable for users under 13. Features involving body weight and calories can affect teenagers negatively; minors should use the app with an adult's guidance.
When the policy changes substantively we update the version date and show a notice in the app.
If where your data goes were ever to change (for example enabling sync of workout records), we would ask for your consent before turning it on — never silently.
General questions and support: support@cloudmonster.tw
Personal-data requests (review, copy, correction, stop collection, deletion): privacy@cloudmonster.tw
Under the Personal Data Protection Act you may exercise these rights at any time; we will not charge you or restrict your use of the service for doing so.