Effective 21 October 2026.
Who we are
The app is run by GameLiftEat’s founder, Pedro Zabala, who decides how the information below is used. It’s a friends beta for now, and it’s for people aged 18 and over. Using it is also covered by the app terms.
What the app collects and why
Everything below is collected to run the app: to sign you in, to save and sync your logs, and to show them to the people you choose. None of it is used for advertising or analytics, and the app has no ad or analytics tools in it.
Your account
Your email address, and a password (stored only as a hash) if you sign up with email. If you continue with Google or Apple, they confirm who you are and send the app your email address and name. You also pick a username.
Your display name starts as your Google or Apple name or, if you sign up with email, the part of your email address before the @. It shows on your profile, including the public profile page that anyone with the link can open, until you change it in Settings → Edit profile. If you don’t want your email prefix showing, change it as soon as you sign up. A private profile means people have to ask to follow you before they can see your workouts.
What you log
Workouts (exercises, sets, weights, reps, times and notes), routines, custom exercises, gym names and any place you type for a workout (the app never reads your location), the names of training partners you add, your bio, your follows, likes, comments, blocks and mutes, and your membership of squads, sessions and challenges. Your workouts are saved on your phone first and sync to our server when you have a connection.
Photos and videos
Workout photos and videos, progress photos and your profile photo, if you add them. Progress photos are visible only to you. Your profile photo is public: anyone with its link can load it. Workout media is visible to the people who can see that workout.
Body measurements and Health data
Body weight, body fat and tape measurements you type in. If you switch on Settings → Health, the app also writes your finished workouts to Health Connect (Android) or Apple Health (iPhone), and reads your body weight from it to chart next to your other measurements. It reads nothing else. Both directions are off until you turn them on, and turning Health off stops them.
Weight read from Health becomes a body measurement in your own account, like one you typed. Health data is never used for advertising, never sold, and never shared with anyone beyond the services listed below that run the app for us. The app doesn’t use iCloud.
Notifications
If you allow notifications, the app stores your phone’s push token so it can tell you about likes, comments, follows and partner workouts. You choose each kind in Settings → Notifications, and the token is removed when you sign out. The text of a notification passes through Expo’s push service and then Apple (APNs) or Google (FCM): it includes the other person’s display name, a workout title, and the first 60 characters of a comment.
Reports
If you report a workout, comment or profile, we keep your report, its reason and any details you wrote, so we can review it.
Crash reports
Store and preview builds of the app on phones send crash reports to Sentry. A report keeps the error’s stack trace, the device model, the OS and the app version, and the screens you opened. It has no tap text, no request URLs and no logs: before a report is sent, the app removes the record of your taps (which can hold the text on the screen), the addresses of its requests to our server and its log lines. The app attaches no account id, email address or IP address to a report, so a report isn’t tied to your account. Sentry’s software on your phone may add an anonymous id for the installation, which isn’t tied to your account either. You can’t turn crash reports off in the app. The web app and development builds don’t send them.
Server logs
Our server and Cloudflare keep standard request and sign-in logs, including IP addresses and device details, to keep the service secure and working.
Who else handles it
These services handle information for us. We use them only to run the app, and we don’t share your information with them for any other purpose.
- Our own server (self-hosted Supabase). Your account, profile, logs and files are stored in a Supabase backend that Pedro runs himself on his own server, not on Supabase’s hosted cloud service. A nightly backup of it is kept for 14 days on the same server.
- Cloudflare. App traffic to our server passes through Cloudflare’s network, which also serves the web app at gle-app.zabalazone.com and the link previews for shared workouts. Cloudflare sees visitors’ IP addresses in its normal logs.
- Brevo. Sends the 6-digit codes for sign-up and password reset by email, so it receives your email address and the code.
- Expo, Apple and Google. Deliver push notifications, as described above.
- Sentry. Receives crash reports from store and preview builds, as described above.
- Google and Apple sign-in, only if you choose them. If you use Apple, our server also keeps Apple’s refresh token for your account, only so it can revoke it with Apple when you delete your account. It’s used for nothing else.
Some of these services process data outside the EU and UK, including in the United States, and rely on safeguards such as the EU’s standard contractual clauses. If you tap “Share to Story”, the app hands a picture to the app you choose on your phone; the app itself sends nothing to that app’s servers.
What we don’t do
We don’t sell or rent your information, we don’t track you across other apps or sites, and we don’t use ad networks. The app doesn’t ask for your location, contacts or microphone.
How long we keep it
- Your data: for as long as your account exists. When you delete your account, it all goes at once.
- Backups: nightly server backups roll over every 14 days, so a deletion reaches them within 14 days.
- Crash reports: kept by Sentry until its retention period ends. They aren’t tied to your account.
- Reports about content: a report about someone’s content stays as a record holding only the content’s id. Reports you made go with your account.
Deleting your data
In the app, go to Profile → the gear (Settings) → Delete account. It offers to save a backup first, asks you to type DELETE, then deletes your account and everything in it immediately: workouts, photos and videos, routines, measurements, followers and comments. If you signed in with Apple, it revokes Apple’s token first. It needs a connection. The support page has the steps, including for the web app, and how to ask us by email if you no longer have the app.
You can also delete a single workout, comment, progress photo, gym or routine in the app without deleting your account.
Your choices and rights
- Turn Health, and each kind of notification, on or off in Settings.
- Make your profile private, and block or mute people.
- Export your workouts and body measurements as CSV files, and download your progress photos, from Settings whenever you like.
- Ask us what we hold about you, or to correct or delete it, at hello@gamelifteat.com.
If you live in the EU, the UK or somewhere with similar laws, you can ask us to tell you what we hold about you and send you a copy, correct or delete it, limit how we use it, or give it to you in a format you can move. We use your information to provide the app you signed up for, and we keep logs and crash reports running because we have a legitimate interest in a secure, working service. Health data and notifications are used only if you turn them on. Email us and we’ll reply within one month. If you’re unhappy with how we handle your data, you can complain to your data protection authority, such as the ICO in the UK.
Beta note
The app is in a friends beta. We may wipe beta data to fix something, but we’ll warn you first. You can export your workouts and measurements and download your progress photos from Settings at any time.
Children
The app is for people aged 18 and over. We don’t knowingly collect information from anyone younger; if you think we have, email us and we’ll delete it.
Changes
If we change this policy, we’ll update the effective date at the top of this page.
Contact
Questions or requests? Email hello@gamelifteat.com, or see the support page.