Privacy policy

Jym is run by Tim Johnson in the United Kingdom. When this policy says “we”, it means him. For privacy requests, email [CONTACT_EMAIL].

The camera is used to count push-ups. Pose detection runs in your browser, on the device you are holding. The model files are downloaded from Jym’s own site. They are not loaded from a third-party network.

We do not upload the video, camera frames, or the pose points. If you sign in, a finished set can send the start time, the length of the set, the rep count, and a form score (a number from 0 to 100). The written form notes stay on the phone.

Recording is optional, and it is a Pro feature. The clip, and the pose sketch that goes with it, are stored in this browser. We do not receive them. Clearing this phone, or removing the site’s data in the browser, deletes them.

An account is optional. Sign-in uses Google or X, through Grok’s sign-in service at auth.grok.me. We never see your Google or X password. We receive the name, email address and account id they pass back, and a profile photo if they provide one.

For a signed-in account we store:

• that name, email and id
• a display name, taken from the name above and shortened
• your sets: time, length, rep count and form score
• your streak, worked out from those sets
• whether you have joined the leaderboard
• if you pay, the Stripe customer id, subscription id, plan, status and renewal date

The leaderboard is off until you turn it on. If you join, your display name, rep totals and streak are public to anyone who opens the board. Your email is not shown.

Pro is paid through Stripe. Stripe collects the card details. We never see the full card number. We send Stripe the plan you chose and an id for your account, so the payment can be matched back to you. Stripe may show the same price in your local currency.

We do not use an analytics or advertising service. These are the other parties the product actually uses:

• Google and X. Only if you choose them to sign in. They authenticate you. The request goes through Grok’s sign-in service, which receives the sign-in and returns the profile fields above.
• Stripe. If you subscribe. They receive the checkout and the payment details, and keep their own records of the charge.
• Vercel. Hosts the site. Like any host, it sees connection data such as your IP address and the page you requested, in order to serve the app.
• Neon. Hosts the database for accounts, sets, the leaderboard and billing status. That is the signed-in data described above. Video and pose points are not in it.
• Google Fonts. The typefaces are loaded from Google. Google receives your IP address and the usual browser details when the font file is requested.
• Grok. The publishing platform loads a script from grok.com so the site can run inside Grok. We do not use it to collect workouts. Fetching the script sends grok.com the usual connection data, such as your IP address.

MediaPipe, the pose detector, runs on your device. It is not a service we send camera data to.

• Contract. To provide an account, keep your sets, and run a Pro subscription you have asked for.
• Consent. The public leaderboard is off until you turn it on. You can turn it off again, which removes you from the board.
• Legitimate interests. To keep the site secure, limit abuse of display names, and understand whether a payment succeeded. The camera itself never leaves the phone, so this is not a reason to upload video.
• Legal duty. Where we have to keep a record, for example of a payment dispute. Stripe also keeps payment records under its own duties.

Signed-in sets, your profile and your billing status stay until you delete the account, or until you ask us to delete them. You disappear from the leaderboard when you switch it off. The sets themselves stay until you delete the account. Login sessions last until you sign out or the session ends. A short session cache cookie lasts about five minutes.

Data that never leaves the phone stays until you clear it, clear the site in your browser, or delete the account on that phone (which also clears the on-device copy).

You can ask for a copy of your data, ask us to correct it, delete it, restrict it, or object to a use based on legitimate interests. You can withdraw consent for the leaderboard by switching it off. You can take your sets with you: on the training page, signed-in, choose “Download my sets”.

To use any of these rights, email [CONTACT_EMAIL]. You can also delete the account yourself from the training page. We will not charge you for a request, and we will reply within one month.

You can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would like the chance to put it right first.

Jym is not for children under 13. We do not knowingly keep an account for a child under 13. If you believe we have, email [CONTACT_EMAIL] and we will delete it.

If we change this policy, we will update the date at the top. Where a change actually affects how we use your data, we will say so on this page before it takes effect.