Privacy Policy
Sodhera Intelligence Private Limited ("Sodhera," "we," "us," or "our") operates the GymBlock application for iPhone (the "App"). GymBlock helps you keep your phone away between sets, time your rests, log your sets, and see like-for-like strength progress. This Privacy Policy explains what information we collect when you use the App, why we collect it, where it is stored, who processes it on our behalf, and the choices you have. By using GymBlock, you agree to the practices described in this Privacy Policy.
We are committed to transparency and to safeguarding your personal data. Please read this Privacy Policy carefully. If you do not agree with any part of it, please do not use the App.
At a glance. Everything you log is kept on your iPhone and synced to your account in our own database. We record how the App is used (screens, taps, workout events) in that same database, and only there. No advertising SDKs, no cross-app tracking, and your data is never sold. "Blocking" other apps is simulated: GymBlock does not control, monitor, or read other apps.
1. Information We Collect
1.1 Account Information
GymBlock uses Sign in with Apple or Sign in with Google to create your account. Authentication is handled by Supabase Auth on our behalf. We never see or store a password.
| Data Category | Specific Data | Purpose |
|---|---|---|
| Account identifier | A unique account ID assigned when you first sign in | Link your workouts, settings, and subscription to your account |
| Email address | The email address Apple or Google shares with us. If you use Apple's "Hide My Email," this is a private relay address rather than your real email | Identify your account, let you sign in again on another iPhone, and let us verify requests you send us |
| Name | The name Apple or Google shares at sign-in (Apple lets you edit or withhold it) | Pre-fill your profile name |
| Session tokens | Access and refresh tokens issued by Supabase Auth, stored on your iPhone | Keep you signed in and authorize sync requests |
1.2 Information You Provide Directly
| Data Category | Specific Data | Purpose |
|---|---|---|
| Profile | Name, gender, height, weight, preferred units (metric or imperial), language | Personalize the App and show weights and heights in your units |
| Onboarding answers | How you use your phone between sets, estimated minutes per rest, the apps you chose to "block," your preferred rest length, alert preferences, and the pledge you make at the end of onboarding | Set up your rest timer and alerts, and show you the estimate of time spent on your phone |
| Splits | Named lists of exercises you create or edit (for example "Push," "Pull," "Legs") | Rotate your training days and compare progress within the same split |
| Workouts and sets | For every set you log: the exercise, weight, reps, minutes (for timed exercises), start and end timestamps, set duration, rest and gap durations, and warm-up or unsuccessful flags; plus the workout's start, finish, and pause times | Keep your training log, time your rests, and calculate like-for-like progress |
1.3 Information Generated Automatically
| Data Category | Specific Data | Purpose |
|---|---|---|
| Install ID | A random identifier created when the App is first installed on an iPhone | Tell one installation from another, including before you sign in |
| Device record | Device model, iOS version, App version, locale, time zone, and the install ID | Support, compatibility, and understanding which devices and versions are in use |
| Subscription status snapshot | Whether GymBlock Pro is active, the plan (monthly or yearly), expiry and renewal state, and Apple transaction identifiers | Unlock Pro features, restore purchases, and resolve billing questions |
| Product analytics events | Described in Section 1.4 | Understand how the App is used and improve it |
| Error reports | The type of error, where in the App it happened, and the device and version information above | Find and fix bugs |
1.4 Product Analytics
GymBlock records how the App is used. This is first-party analytics: the events are written by the App to our own database (hosted by Supabase) and nowhere else. We do not use any third-party analytics, attribution, or advertising SDK. We want to be clear that this logging is extensive:
- Screens: every screen you view and how long you stay on it.
- Interactions: every button tap, toggle, and choice you make, including the option you selected.
- Workouts: when a workout starts, pauses, resumes, and finishes; each set logged, edited, or deleted; each rest started, skipped, or completed, with durations.
- Onboarding: each onboarding step you reach, the answer you give, and where you stop if you do not finish.
- Purchases: paywall views, purchase attempts, completions, failures, and restores.
- Account: sign-in and sign-out.
- Errors: failures the App detects.
Each event carries a timestamp, the install ID, a session ID, your account ID when you are signed in, the App version, the device model, and the iOS version. Events are linked to your account so they can be deleted with it.
We use these events to understand which parts of the App are used, where people get stuck, whether rests and alerts work as intended, and how to improve the App. We do not use them for advertising, do not share them with advertisers or data brokers, and do not combine them with data about you from other companies. There is no separate analytics switch inside the App at this time; you may object to this processing or ask us to delete your events at any time by emailing admin@sodhera.com, and deleting your account deletes the events linked to it.
1.5 Information We Do NOT Collect
We want to be explicit about what GymBlock does not collect or access:
- ❌ Passwords — sign-in goes through Apple or Google; we never receive or store a password
- ❌ Information about other apps — GymBlock does not read which apps are installed, which apps you open, or how long you use them (see Section 3)
- ❌ Apple Health / HealthKit data — the App does not read from or write to Apple Health
- ❌ Camera or photos — the App does not access your camera or photo library
- ❌ Microphone — the App does not record audio
- ❌ Location — the App never requests or uses your location
- ❌ Contacts — the App does not access your address book
- ❌ Advertising identifier (IDFA) — we do not read or use it, and we do not ask for App Tracking Transparency permission
- ❌ Payment card details — payments are made to Apple; we never see your card number
- ❌ Browsing history — the App does not track your activity outside the App
- ❌ Third-party analytics or advertising SDKs — none are included in the App
2. How We Use Your Information
We use the information we collect for the following purposes:
- Providing the App: storing your splits, workouts, and sets; keeping a copy on your iPhone and in your account; and restoring your data when you sign in on another iPhone.
- Timing rests and alerts: your rest length and alert preferences drive the rest timer, local notifications, and the Lock Screen Live Activity. These run on your iPhone.
- Showing progress: like-for-like progress is calculated from the sets you log, comparing the same exercise within the same split with reps or load held constant. The "time on your phone" figure is calculated from your onboarding answers. These are calculations from what you entered, not measurements of you.
- Subscriptions: confirming whether GymBlock Pro is active and restoring purchases.
- Understanding and improving the App: the product analytics described in Section 1.4.
- Support, security, and legal obligations: answering your questions, verifying requests, protecting accounts and systems, complying with applicable law, and enforcing our Terms of Service.
We do not use your data for advertising, do not sell it, do not rent it, and do not share it with third parties for their own marketing. We do not make decisions about you that have legal or similarly significant effects.
3. App Blocking: What GymBlock Actually Does
GymBlock's purpose is to keep your phone away between sets, and the App talks about "blocking" apps. In the current version of the App, blocking is simulated and representational. When a workout is running, the App shows a block screen and treats the apps you chose during onboarding as blocked, but:
- GymBlock does not control, restrict, monitor, or read other apps on your iPhone.
- GymBlock does not use Apple's Screen Time, Family Controls, or Managed Settings frameworks, and never asks for those permissions.
- GymBlock receives no information about which apps are installed on your iPhone or how you use them.
- The list of "apps to block" you pick during onboarding is stored only as your answer to that question.
If a future version adds real enforcement, we will update this Privacy Policy, describe exactly what the feature can and cannot see, and ask for any required system permission at that time.
4. Notifications and Live Activities
- Local notifications: GymBlock can notify you when a rest ends and remind you if a workout has been left running. These are scheduled by the App on your iPhone; we run no push notification server, and notification content never leaves your device. Turn them off in iOS Settings → Notifications → GymBlock.
- Live Activity: during a workout, GymBlock can show the current rest or set on your Lock Screen and in the Dynamic Island, rendered by iOS from data already on your iPhone.
5. Where Your Data Lives
5.1 On Your iPhone
A local copy of your profile, settings, splits, workouts, and sets is stored in the App's sandboxed storage on your iPhone, so the App works offline and responds instantly. Session tokens and the install ID are also stored on the device. Analytics events are queued on the device and sent when a connection is available.
5.2 In Your Account
The same data is synced to your account in a PostgreSQL database hosted by Supabase. Every row is associated with your account ID and protected by Row Level Security, so only requests authenticated as you can read or change your rows. Deleting your account deletes these rows (see Section 9).
6. Service Providers and Data Sharing
We share your data only with the service providers below, each acting on our instructions for the purposes described. We never sell, rent, trade, or otherwise commercially transfer your personal information to any third party.
| Provider | Role | What they receive | Their policy |
|---|---|---|---|
| Supabase | Processor. Authentication, database, and hosting | Everything in Sections 1 and 5: account, profile, settings, splits, workouts, sets, device records, subscription snapshot, and analytics events | supabase.com/privacy |
| RevenueCat | Processor. Validates App Store purchases and reports whether GymBlock Pro is active | An app user ID (your account ID, not your name or email), App Store receipts and transaction identifiers, product identifiers, and entitlement status | revenuecat.com/privacy |
| Apple | Independent controller. Sign in with Apple and App Store billing | Your Apple Account and purchase records; Apple shares your name and email (or a relay address) with us at sign-in | apple.com/legal/privacy |
| Independent controller. Sign in with Google, only if you choose it | Google shares your name and email with us at sign-in | policies.google.com/privacy |
6.1 No Other Third Parties
We do not integrate any of the following:
- Advertising networks or ad mediation platforms
- Third-party analytics, attribution, or crash-reporting SDKs
- Social media SDKs (other than the sign-in providers above)
- Data brokers
6.2 Other Disclosures
We may disclose personal data if required by law, court order, or a lawful request by a public authority; to protect the rights, safety, or property of Sodhera, our users, or others; or as part of a merger, acquisition, or sale of assets, in which case we will notify you before your data becomes subject to a different privacy policy.
7. Subscriptions and Payment Data
GymBlock Pro is an optional auto-renewing subscription, currently USD 4.99 per month or USD 49.99 per year (local prices are set by Apple and shown in the App before you buy). All payments are processed by Apple through the App Store under your Apple Account. We never receive or store your payment card details. Apple and RevenueCat provide us with transaction identifiers, the product purchased, and the subscription's status and expiry, which we keep as your subscription status snapshot. Cancellation and refunds are handled by Apple: open iOS Settings → Apple Account → Subscriptions, or see our Terms of Service.
8. Data Security
We implement the following measures to protect your data:
- TLS encryption for all data in transit between the App and our providers
- Row Level Security in our database so that only the account owner's authenticated session can read or modify their rows
- No passwords held by us; sign-in relies on Apple and Google
- Encryption at rest on Supabase infrastructure
- Least-privilege access to production data within Sodhera, limited to what support and maintenance require
While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
Data breach notification. If a breach of your personal data is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay (where feasible, within 72 hours of becoming aware of it), explain what happened and what we are doing about it, and report the breach to the relevant supervisory authority where the law requires.
9. Data Retention
- While your account exists: we keep your account information, profile, settings, splits, workouts, sets, device records, subscription snapshot, and analytics events so the App can work and restore your data.
- Log out: logging out ends your session on that iPhone but keeps your account and its data, and keeps the local copy on the device, so you can sign in again.
- Delete account: Settings → Delete account in the App deletes your account and all of its data from our database immediately and wipes the local copy from that iPhone. You can also email admin@sodhera.com from the account's email address. See User Data Deletion.
- Backups: encrypted database backups held by our hosting provider roll off within 30 days after deletion.
- Aggregated statistics: we may keep statistics that cannot identify anyone (for example, how many workouts were logged in a month).
- Legal records: we may retain limited records where the law requires it, for example transaction records needed for tax or accounting.
10. Your Rights and Choices
10.1 All Users
- Access and correction: your profile, settings, splits, and workouts are visible and editable in the App.
- Deletion: delete your account in Settings → Delete account, or email us.
- Export: email admin@sodhera.com for a machine-readable (JSON) copy of your data within 30 days.
- Notifications: manage or turn off notifications and Live Activities in iOS Settings.
- Sign-in privacy: Sign in with Apple lets you hide your email behind a private relay address.
- Analytics: email us to object to, or request deletion of, the analytics events linked to you.
10.2 European Economic Area, United Kingdom, and Switzerland
If you are in the EEA, the UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), the UK GDPR, and the Swiss Federal Act on Data Protection, including the rights to access, rectify, erase, restrict, port, and object to the processing of your personal data, and the right to lodge a complaint with your local data protection authority.
Legal bases for processing: performance of our contract with you (providing the App and your subscription); our legitimate interests (understanding and improving the App through first-party analytics, securing our systems, and providing support), balanced against your rights; consent, where we ask for it (for example, iOS notification permission); and compliance with legal obligations.
Automated decision-making (GDPR Article 22): GymBlock does not make automated decisions that produce legal or similarly significant effects on you. Progress figures and estimates are informational calculations only.
10.3 California Residents (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect, use, and disclose; the right to delete it; the right to correct inaccurate information; the right to opt out of its sale or sharing; and the right not to be discriminated against for exercising these rights. We do not sell or share (for cross-context behavioral advertising) your personal information, and we do not use or disclose sensitive personal information for purposes that require a right to limit.
10.4 India
If you are in India, the Digital Personal Data Protection Act, 2023 gives you the right to access a summary of the personal data we process and how, the right to correction and erasure, the right to grievance redressal, and the right to nominate a person to exercise your rights if you are unable to. You may withdraw consent at any time by deleting your account; withdrawal does not affect processing carried out before it. Grievances may be sent to admin@sodhera.com and we will respond within the time required by law.
10.5 Nepal
If you are in Nepal, your personal data is protected under the Individual Privacy Act, 2075 (2018) and its regulations. We process your data in accordance with these laws, and you may exercise your rights under them by contacting us.
10.6 How to Exercise Your Rights
Email admin@sodhera.com from the email address linked to your account. We may ask you to confirm your identity (for example, by replying from that address or confirming details only the account owner would know) before acting. We respond to requests within 30 days, and sooner where the law requires. You may also appoint an authorized agent where your local law permits.
11. International Data Transfers
Sodhera is established in Nepal. Our providers host data on infrastructure that may be located in the United States or other countries, which may have data protection laws different from those of your country. Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on our providers' data processing agreements, which incorporate the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum where applicable, and on providers that maintain robust data protection practices.
12. Children's Privacy
GymBlock is not directed at children under the age of 13, and you must be at least 13 years old (or the minimum age of digital consent in your country) to use it. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us at admin@sodhera.com and we will delete the account and its data promptly.
13. Third-Party Links
The App may link to Apple's subscription management and refund pages and to this website. Third-party services are governed by their own privacy policies, for which we are not responsible.
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in the App, our providers, or the law. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, notify you in the App. We encourage you to review this policy periodically. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Email: admin@sodhera.com
- Company: Sodhera Intelligence Private Limited
- Address: Satdobato, Lalitpur, Bagmati Province 44700, Nepal
- App: GymBlock for iPhone
We aim to respond to all inquiries within 30 days.
16. Apple App Store Privacy Disclosure Summary
The following summary aligns with Apple's App Store privacy label categories:
Data Used to Track You
- None. We do not track you across other companies' apps or websites and do not use the advertising identifier.
Data Linked to You
| Data Type | Purpose |
|---|---|
| Contact Info (name, email address) | App Functionality |
| Fitness (workouts, sets, exercises, height, weight) | App Functionality |
| Identifiers (account ID, install ID) | App Functionality, Analytics |
| Purchases (subscription status and transaction identifiers) | App Functionality |
| Usage Data (product interaction) | Analytics, App Functionality |
| Diagnostics (error reports) | App Functionality |
| Other Data (onboarding answers, splits, preferences) | App Functionality |
Data Not Collected
- Health data from Apple Health
- Location
- Contacts
- Photos, videos, or audio
- Browsing history or search history
- Financial information (payment card details)
- Advertising identifier
- Information about other apps on your device
This Privacy Policy is governed by the laws of Nepal, without regard to conflict of law principles.