Privacy Policy

Data controller

Gud GmbH
Kirchenfeldstrasse 52A, 3005 Bern, Switzerland
Email: hello@gud.ch

Principle

We process personal data in accordance with the revised Swiss Data Protection Act (revDPA) and — where applicable — the EU General Data Protection Regulation (GDPR). Data is only collected when there is a clear purpose.

Waitlist

When you add your email address to the waitlist, your email address, a short source tag indicating which form you used, and your language preference (locale) are processed by Brevo (Sendinblue GmbH, trading as Brevo, EU), our email service provider. Purpose: to notify you once the app launches.

Legal basis: your consent (Art. 6(1)(a) GDPR / Art. 31 revDPA). You can unsubscribe at any time by sending an email to hello@gudrep.com.

Voice and on-device processing

Voice logging is transcribed on your device. Audio recordings never leave your phone. You confirm every parsed set before it is saved.

On-device form analysis (Beast Mode, once shipped) also stays on your device. High-accuracy form analysis uses cloud processing — and only when you explicitly trigger an analysis.

Progress photos and body composition

If you use Beast Mode body-composition tracking, your progress photos are analysed and stored entirely on your iPhone — in a Face ID-locked, encrypted vault, excluded from device backups by default. Body-fat and measurement figures are on-device estimates, not medical measurements, and are best read as change over time. Photos are never uploaded to GudRep or any AI service. You may optionally include them in your own private iCloud backup.

Apple Health

If you connect Apple Health, GudRep reads sleep, heart rate variability and resting heart rate to compute a daily readiness score. This data is processed on your device. We do not upload health metrics to our servers.

Server logs

Our hosting provider collects technical access data (IP address, browser type, timestamp) to ensure operation. These logs are deleted after 30 days and are not linked to your email address.

Cookies and analytics

This site uses Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to understand how the site is used — page views, traffic sources, device type. IP addresses are anonymised before processing (anonymize_ip).

Google Analytics is loaded with Google Consent Mode v2 set to denied by default. No analytics cookies are set and no data is sent to Google until you click Accept in the consent banner shown on your first visit. If you click Decline, or simply ignore the banner, nothing is tracked.

Legal basis: your consent (Art. 6(1)(a) GDPR / Art. 31 revDPA). You can withdraw your consent at any time by clearing this site’s cookies and local storage in your browser — the banner will reappear on the next visit.

Google may transfer data to servers in the United States. Google participates in the EU-U.S. Data Privacy Framework. Details: Google Privacy Policy.

No other tracking cookies are set. No Meta pixel. No advertising trackers. No cross-site tracking.

Third parties

Fonts: all fonts are self-hosted from this domain. No requests to Google Fonts or any other font CDN.

Brevo: waitlist data (email, source tag, locale) is held by Brevo (Sendinblue GmbH, EU), which also sends the waitlist confirmation email. Brevo is GDPR-compliant.

Supabase: app data (after launch) is stored in Supabase’s EU region (Frankfurt). Supabase is GDPR-compliant.

Resend: transactional app emails (e.g. workout assignments, password resets) are sent via Resend, hosted in the EU. Email metadata (recipient, send time, delivery status) is processed accordingly.

Your rights

You have the right at any time to access, rectification, erasure, restriction of processing, data portability and withdrawal of your consent. Requests to hello@gudrep.com.