Privacy Policy

Last updated: September 26, 2026

Information We Collect

Gym Navigator is a free gym directory and exercise guide. We collect minimal information to provide and improve our services. If you use the Gym Navigator Coach connector inside an AI assistant, the section Gym Navigator Coach connector below describes the additional data involved.

• Usage data: Pages visited, time spent, and interactions with our site through Google Analytics
• Device information: Browser type, operating system, and screen size for optimizing your experience
• Search queries: Terms entered in our gym search to improve search results

How We Use Information

We use collected information to:

• Maintain and improve the gym directory and exercise content
• Understand which features and content are most useful
• Detect and prevent technical issues
• Display relevant advertisements through Google AdSense

Third-Party Services

We use the following third-party services that may collect information:

• Google Analytics: Website traffic analysis. Google Privacy Policy
• Google AdSense: Advertising. Google may use cookies to serve ads based on your interests. How Google uses advertising cookies
• Google Maps: Map displays on gym pages. Google Privacy Policy
• Affiliate networks: Some outbound links are affiliate links. Clicking one may set a cookie on the retailer's site that attributes a purchase to us. See our Affiliate Disclosure.

Affiliate Links

Some links on this site earn us a commission if you buy something, at no extra cost to you. This does not affect which gyms we list or how we rank them. Full details are on our Affiliate Disclosure page.

Cookies

We use cookies and similar technologies through our third-party services (Google Analytics, Google AdSense). These cookies help us understand site usage and serve relevant advertisements. You can control cookie settings through your browser preferences.

Data Retention

The website itself does not store personal data directly. Analytics data is retained by Google according to their data retention policies. We do not maintain user accounts for the website. The only exception is the Coach connector, where a small amount of data is kept to maintain your authorization, as described in the next section.

Gym Navigator Coach connector

Gym Navigator Coach is an optional connector (an MCP server at https://coach.gymnavigator.com/mcp) that lets an AI assistant such as Claude or ChatGPT search our exercise library, gym directory and blog, build workout plans, and log your training sessions. This section applies only if you add the connector to an assistant. If you never connect it, nothing in this section applies to you.

What the connector processes

When your assistant calls a connector tool, the request passes through our server (a Cloudflare Worker) and is handled for that request only. Depending on the tool, that request can contain:

• Search terms: exercise names, muscle groups, equipment, a city or country for gym search, or a blog search phrase
• Workout plans: a plan title, an optional subtitle and equipment line, and the exercises, sets, target reps and rest times your assistant designed
• Training log entries: a session date, the exercises performed, reps and weight per set, and an optional free-text note
• Google account details: your Google account email address and OAuth tokens, only if you choose to sign in with Google (see below)

We do not log the content of tool calls. The only usage record we keep is an aggregate daily counter (for example, how many plans were saved on a given day). It contains no user identifier, no plan identifier, no IP address and no browser information, so two people saving a plan on the same day are indistinguishable in it.

Your training journal lives in your own Google Drive

If you sign in with Google when connecting, your training journal is stored as a single file named gn-journal.json in your own Google Drive, not on our servers. The file is plain JSON with this structure: a version number and a list of sessions, where each session has a date (YYYY-MM-DD), the exercises performed (an exercise name, an optional Gym Navigator exercise id, and a list of sets with reps and weight), and an optional notes field. You can open, edit, download or delete that file in Google Drive at any time.

When your assistant logs a workout, the connector reads the current file, merges the new session in, and writes the file back. When your assistant asks for history or progress, the connector reads the file to answer. In both cases the journal is held in memory only for the duration of that request. We do not copy it, cache it, or keep it on our servers.

If you do not sign in with Google, the connector stores nothing about your training. Your journal is then held by the assistant inside your conversation, and it is subject to that assistant provider's own privacy policy, not ours.

Google permissions we request and why

Signing in with Google asks for three scopes:

• openid and email: we read your Google account email address so that we can tie your connector authorization to you and match later requests to the correct Google tokens. We do not use it for marketing and do not share it.
• drive.file (See, edit, create, and delete only the specific Google Drive files you use with this app): this is the narrowest Drive permission Google offers. It lets the connector create and update the gn-journal.json file it made. It cannot see, search or read any other file in your Drive.

Gym Navigator's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the journal feature described here. We do not sell it, use it for advertising, or let humans read it except with your consent, for security purposes, or where required by law.

What we keep on our servers, and for how long

• Authorization records: to keep the connector working between conversations we store your Google account email address, a Google access token and a Google refresh token in Cloudflare KV storage. The tokens are stored encrypted with key material that only your assistant holds, so they cannot be read from our storage alone; the email address is stored unencrypted as the label of that authorization. A refreshed access token may also be cached for up to one hour. The access token itself expires after one hour, but the authorization record does not expire on its own: removing the connector in your assistant stops it being used, and does not delete it here. You can delete it yourself at any time, in a minute and without contacting us, at coach.gymnavigator.com/me/delete/.
• Saved workout plans: each plan your assistant saves is stored in Cloudflare KV under a random 10-character id and served at gymnavigator.com/plan/<id>/. The plan is not linked to your email or Google account. Anyone who has the link can open it, so treat the link like any shared document, and avoid putting personal details in the plan title or notes if that matters to you. Plans do not expire automatically.
• Progress snapshots: when your assistant asks for progress, the figures computed from your journal are stored under a random 32-character token so the page at gymnavigator.com/me/progress/ can draw your dashboard. That is the headline numbers (session count, total volume, best estimated one-rep max, best set weight, and a trend) plus the charts' data: totals per week, one value per training day, the names of the exercises you logged with the best set and estimated one-rep max for each session, your records, and how your sets split across rep ranges and weekdays. It does not include your email address, your name, free-text notes, or the journal file itself. The snapshot carries no identity and is deleted automatically after 24 hours.
• Aggregate counters: the daily usage counts described above, kept indefinitely.

The workout timer page

The plan page is an interactive timer. The reps, weights, effort ratings and bodyweight you enter while training are saved only in your own browser's local storage so a refresh does not lose your session. They are not sent to our servers. At the end, the page builds a text summary that you copy into your assistant yourself. Plan and progress pages show Google AdSense advertising, covered in the Third-Party Services section above.

Who else sees this data

• Your AI assistant provider (for example Anthropic for Claude, or OpenAI for ChatGPT) sees everything you say in the conversation and everything the connector returns. Their handling of it is governed by their privacy policies, not this one.
• Google stores your journal file in Drive and issues the OAuth tokens. Google Privacy Policy
• Cloudflare hosts the connector, the plan and progress pages, and the storage described above, as our infrastructure provider. Cloudflare Privacy Policy

We do not sell connector data and do not share it with anyone else.

Disconnecting and deleting your data

1. Remove the connector in your assistant's settings (Connectors in Claude, Apps or Connectors in ChatGPT). The assistant then stops calling it. This step alone does not delete the authorization record we hold, which is what steps 2 and 4 are for.
2. Revoke Google access at myaccount.google.com/permissions by removing Gym Navigator Coach. This invalidates the tokens we hold, so they can no longer be used to reach your Drive.
3. Delete your journal by removing gn-journal.json from your Google Drive. We never had a copy.
4. Delete what we hold at coach.gymnavigator.com/me/delete/. Sign in with the Google address you connected, and the authorization record is deleted immediately; paste the links of any saved plans you also want removed. Saved plans carry no identity by design, so nothing connects them to your address for us to find on our own, which is why you name them. If you would rather not use the page, email support@gymnavigator.com from the connected address and we will do the same thing by hand.

Who is responsible for this data

Internet Thinking, the company that operates gymnavigator.com and coach.gymnavigator.com, is the data controller for the connector data described in this section. Contact details are in the Contact section below.

Your Rights

You have the right to:

• Opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on
• Manage cookie preferences through your browser settings
• Request information about data collected about you

Children's Privacy

Gym Navigator is not directed at children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

Contact

For privacy-related questions, contact us at support@gymnavigator.com.