Privacy policy

Updated October 9, 2026

GAINimals is operated by Legitimate LLC. This policy covers our iPhone app and this website. Questions or privacy requests can be sent through our support form.

In the current app

No account is required. Your buddy nickname, training preferences, self-reported workout logs, routines, game progress, equipped items, and settings are stored locally on your device. We do not receive these records through the current app. The app’s data folder is excluded from cloud backup, so deleting the app or losing the device can remove this history.

Optional progress photos are selected by you using Apple’s photo picker. The app stores its local copies with file protection and excludes them from cloud backup. They do not affect scores and are not uploaded, sent to AI services, or included in share cards. You can delete a local photo in Journey; deleting that copy does not delete the original in your Photos library.

Sharing

If you choose to share a card, it contains your fictional buddy, its equipped look, game statistics, and an optional nickname. Check the preview before sharing. Private photos and detailed workout notes are excluded. The app or person you share with handles the shared card under their own practices.

HealthKit, AI, and purchases

The current app does not access HealthKit or import Apple Health data. The custom buddy preview uses saved artwork locally and does not send descriptions to an AI provider. Live AI generation and HealthKit imports are future features; this policy and the relevant permission screens will be updated before those features collect or share data.

Plus is coming soon. The current TestFlight build does not sell subscriptions; local development builds use Apple’s StoreKit test environment. If App Store purchases become available, Apple will process payment and transaction information under its own privacy policy. We do not collect card numbers. Pricing and subscription terms will be shown before purchase.

Website waitlist

When you join, we store your email address, signup time, and the version of the launch-update consent shown to you. We use this to send GAINimals launch updates, not unrelated marketing. Joining is not an app account and does not reserve a paid purchase. We keep waitlist information until you request removal or for up to 12 months after launch, whichever comes first.

Support

If you use our support form, we store your reply email, request category, message, ticket reference, and time. We use them to respond, resolve issues, and carry out privacy requests. Avoid including photos, detailed health records, or payment credentials. Support requests are kept for up to 12 months after resolution unless a longer period is required by law.

Hosting and abuse prevention

This site and its database run on infrastructure we control. Cloudflare provides DNS, HTTPS delivery, and security, and processes connection information such as IP addresses and request metadata to deliver and protect the website. Our application uses a rotating, keyed hash of your IP address for short-lived rate limiting, without storing your raw IP address in the waitlist or support database. Rate-limit records expire after about one hour. We use a hidden bot field and do not use third-party analytics, advertising trackers, or tracking cookies. Ordinary service providers may process information outside your country, including in the United States.

Your choices

You can request a copy, correction, or deletion of your waitlist or support information through support. Use the email you signed up with so we can verify the request. We may ask for verification before disclosing or deleting records. You can delete workout entries and photos in the app, or remove all of its local data by deleting the app. We do not sell personal information or share it for targeted advertising.

Adults and policy changes

GAINimals is designed for adults 18 and over and is not directed to children. If a child has submitted personal information, contact us for removal. We will update this page as our practices change and seek permission where required before introducing new data sharing.