Privacy Policy

Effective date: July 14, 2026 · Last updated: October 17, 2026

The Korean version of this Privacy Policy is the original, and if this English version differs from it in meaning, the Korean version prevails, except as to sections that appear only in this English version and except where mandatory laws of the country or state where you live require otherwise.

GYMKC (hereinafter referred to as "the App") is a service that provides personal workout records and coaching. The App values users' personal information and transparently explains the information collected and the purposes of its use as follows.

1. Information Collected

Category	Items	Purpose
Account	Name (nickname), email address (Google, Kakao, Naver login · Apple login upon consent), social account identifier, passkey (public key, device name, last used time)	Login and account identification
Profile	Proficiency, weekly workout frequency, workout goals, injury and caution areas (muscles and joints, whether conservative exercises are included), birth year, gender, height (stature) and weight, workout days (optional), Big 3 records (optional), target weight and deadline (optional), cardio placement (optional), session duration goal (optional), free weight preference (optional)	Routine generation, intensity adjustment, determination of reminder days
Workout records	Sessions, sets (weight, reps, RPE), routines, personal records (PR)	Record storage, progress analysis, coaching
Body records	Weight, body composition, circumferences (chest, arms, thighs), progress photos	Body change trends. Progress photos are stored only on the device and are not transmitted to the server.
Equipment and routine photos (optional)	Photos directly taken or selected by the user in the equipment recognition and routine import feature	Recommends exercises by recognizing equipment and routines in the photos. For analysis, it is transmitted to the AI service provider (Section 3), temporarily stored on the server only during processing, and deleted immediately once processing is complete (including failures), or within 7 days at the latest (immediately deleted if the request is canceled). This is a different item from the 'progress photos' above, and progress photos are not transmitted.
Advance health check (sensitive information)	Items directly selected during onboarding (chest pain, dizziness/fainting, diagnosis of heart disease/hypertension and taking medication, other chronic conditions, recent bone/joint/muscle problems) · pregnancy/postpartum status and pregnancy stage (weeks) (asked only when gender is selected as female, and can be changed in settings) · all optional	Making exercise intensity conservative and selecting exercises (for pregnancy/postpartum, movements performed lying down or face down, etc. are replaced with other exercises · for internal prescription only · not transmitted to AI). If an item is selected, separate consent is obtained and the time is retained together. Postpartum information is not used for prescription after 12 weeks have passed.
Physical fitness self-measurement	Muscular strength self-assessment, time and repetitions of standing up from a chair, achievable push-up stage, sit-and-reach distance, and whether standing on one leg is possible, directly entered during onboarding (all optional)	Determination of first-week difficulty and starting movements (for internal prescription only · not transmitted to AI)
AI coach conversation	Questions sent by the user and coach answers (conversation content)	Maintaining ongoing coaching context · displaying conversation history
Condition	Sleep, motivation, and pain check-in, stiffness by body part	Automatic adjustment of session intensity · recovery management
Health data	Exercise sessions, heart rate, active calories, sleep records, exercise distance, and calories burned from Health Connect	Reflecting watch cardio in the App's analysis (see Section 4 below)
Community (optional)	Friend connections and friend codes, workout completion posts (only if you turn on automatic sharing in Settings · the items you turn on among volume, sets, time, PRs, average RPE, exercise names, number of sets, and best set, plus a one-line note), cheers, feed comments, crews (name, membership, announcements and their comments, challenge goals, and your choice of whether to show your workouts and body weight to the crew coach), routines sent to friends, report and block records, public routines (display name for publication, routine composition, and publication scope), likes and difficulty feedback left on public routines, records of routines you saved, creator profile (handle, bio, profile photo, workout location, experience, and external links)	Sharing records and encouragement between friends, crew operation (including the crew coach’s member management · see ‘What a crew coach can see’ below), processing reports and maintaining blocks, web posting and search exposure of routines that Members decided to make public, and aggregation of popularity and difficulty
Creator verification (optional)	Verification request note (qualifications, affiliation, active channels), identity confirmation code (a phrase written in that channel's bio to confirm ownership)	Identity verification (determining the granting and revocation of verification marks)
App usage records	Time the App was opened, onboarding progress stage, skipping/replacing exercises, adjusting suggested weight and repetitions, skipping rest, reasons for failure to receive shared routines, exercise search terms	Improving prescription accuracy and screen and guidance text. Retained together with the user account and automatically deleted after 180 days.
Sign-up path	Type of the App used when signing up (iOS app, Android app, web), the advertising channel if entered through an advertising link, the person who invited if entered through a friend invitation	To count, for each advertisement, which app people signed up through and which advertisement they saw before signing up and going on to a free trial, subscription, or payment, and to use those counts to operate the service (we do not export them in a form that can identify a person), and to provide friend invitation benefits (to both the invited person and the person who invited them). Retained with the account and deleted when the account is deleted.
Ad performance measurement (App)	Advertising identifiers (the Android advertising ID, and on iPhone the IDFA if you allow tracking), device information (model, OS version, app version, language, screen size, battery status, etc.), the IP address used and the approximate region estimated from it (at the country and city level; not a GPS location), install source (which ad or link the App was installed through, as reported by Google Play and Samsung devices), the times the App was installed and opened, an identifier that the measurement company assigns to the device, and whether and when sign-up, the start of Pro, and the first payment occurred	To aggregate by advertisement which advertisement was viewed to install the App leading to sign-up and subscription (including filtering out fake installations), and to inform advertising media of the results (conversions) so that advertisements may be delivered appropriately. Name, email, workout records, and health information are not used and are not sent to measurement vendors or advertising media. Advertising identifiers may be turned off in device settings (below).
Prevention of duplicate benefits	Irreversibly transformed value of the login identifier of an account that received benefits or subscribed, and the time thereof	To prevent signing up again after account deletion to receive the free trial and invitation benefits again. Retained for 1 year (Section 6).
Language, units, and time zone	The App screen language, weight unit (kg/lb), time zone (retrieved from device settings when signing up · for Members who have already signed up: Korean, kg, Korea time)	To use for the language of screen and notification text, weight display units, the time notifications are sent, and calculation of dates and weeks. Retained together with the account and deleted together upon account deletion.
Notifications (optional)	Push subscription information	Sending rest end and workout reminders
Payment (optional)	When you subscribe on the web: the card issuer and part of the masked card number, the payment identifier, the payment date, time, and amount, and whether and when you consented to the payment conversion. If you request a refund: the time of the request, its type (a withdrawal, meaning exercise of the right of withdrawal (청약철회) under the Refund Policy, or an early termination), and the result of processing. When you subscribe in the App (Google Play or App Store): the subscription status reported by the store (product, subscription identifier, and expiration date) and the dates on which you first started and first paid	Subscription auto-renewal and payment history verification, payment consent and refund processing, aggregation of the number of free trials and payments by advertisement (refer to sign-up path). The full card number, expiration date, and CVC are neither received nor stored (processed by payment gateway Toss Payments for the web, and Google Play and App Store for the App).
Error diagnosis	The App's error message, point of error occurrence (stack), App version, screen path, browser information, and account identifier if logged in	To find the cause and fix it when the App terminates abnormally (stored only on its own servers and does not use external analytics services)
Feedback and requests (optional)	Feedback sent from the App (content and App version), requests to add an exercise (exercise name, search term, and note), and the reason you select and anything you write when you cancel a web subscription (turn off auto-renewal)	Answering inquiries, reviewing the addition of requested exercises, and service improvement. Retained together with the account and deleted together upon account deletion.

The App uses advertising identifiers only for ad performance measurement ("Ad performance measurement (App)" above). On Android, you may reset or delete the advertising ID in your device's Settings › Google › Ads, and on iPhone, you may choose not to allow it when the App first asks or turn it off in Settings › Privacy & Security › Tracking. If you turn it off, measurement is done without the advertising identifier. We do not collect contacts, address books, or call logs. The App does not display advertisements.

Statistics for service improvement. Of the information above, workout records and how the App is used (such as which exercises were skipped or replaced and whether suggested weights or reps were adjusted) are aggregated in a form that cannot identify an individual and used to improve the accuracy of prescriptions (starting weight, increments, and rest time) and the exercise list and guidance text. These aggregates do not include names or emails, and the advance health check (conditions), body composition, and progress photos are excluded from aggregation. They are not published at a size that could identify a specific individual, and they are not used for advertising or personalized marketing. If you do not want your information to be included in statistics, let us know at the contact below and we will exclude it.

Location information (GPS) is processed within the device (phone, watch) while measuring workouts only if the user has consented, and only for the purpose of calculating the travel distance and average speed of outdoor running, walking, and cycling. The location coordinates themselves are not collected. They are neither stored nor sent to the server, and only the calculated distance (meters) remains in the record. Travel routes are neither plotted nor stored; during measurement, the location is continuously read to calculate distance even if the screen is turned off, but it stops immediately when measurement is stopped, and location is not collected outside of measurement. Even if location permissions are denied, you may enter the distance directly or import it from connected smartwatch records and use all features as they are.

Scope of disclosure in public routines

When a Member makes a routine public, even persons who are not logged in may view the following:

Public display name (the default is the nickname, and it may be changed to another name)
Routine composition: exercise name, number of sets, repetition range
Aggregate figures such as the number of people who saved it, the number of likes, and the difficulty distribution

When a Member creates a creator profile, the profile's handle, bio, profile photo, workout location, and external links are also displayed together on the public routine page and creator page. A routine may be made public even without creating a profile. Profile photos and workout locations of Members under 19 years of age are not collected, and are not published on public pages either.

The following are not included in public routines.

Weights lifted by the Member and individual workout records
Physical information (height, weight, measurements), email, account identifier

If the publication scope is set to ‘Public’ (anyone can find it), the routine is included in the sitemap and may be indexed by search engines. Routines set to ‘Unlisted’ (only people with the link) are not included in the sitemap.

What a crew coach can see

The Member who created a crew (the coach) sees the following on that crew’s ‘Members’ screen.

All members: nickname, join date, workouts this week and streak in weeks (the same information already shown in the crew ranking), weekly workout goal, and whether the member chose to show their workouts to the coach
Only members who turned on ‘Show my workouts to the coach’: the date of their last workout and how many days they have rested, their 20 most recent workouts (date, workout day name, number of sets, average RPE, and duration), the sets of each workout (target and actual weight, reps, time, distance, and RPE, and why the App picked that weight, leaving out adjustments made because of pain, condition, pregnancy, or age), attendance over the last 8 weeks, and the estimated 1RM trend of their 3 most frequent barbell, machine, or dumbbell exercises
Only members who separately turned on ‘Also show body weight and measurements’: body weight over the last 12 weeks, workout volume (bodyweight exercise volume includes body weight), and the reason that a weight was held because the member is cutting

The following are not shown to the coach.

Workout notes, pain logs and adjustments made because of pain, condition check-ins, the health pre-screening, photos, and email

This is set separately for each crew. When joining a crew, showing workouts appears turned on and the member confirms it before joining (they can turn it off and still join); body weight and measurements are off by default. For members who joined before this feature, both are off. Members can change this anytime under ‘My sharing’ on the Crews screen, and once it is turned off, the coach can no longer see those records (nothing is copied to the coach in advance). Leaving the crew or blocking the coach also stops it. Notifications already delivered to the coach (a member's nickname, days without training, and the weekly summary figures) stay in the coach's inbox and are deleted within 7 days.

The coach receives one notification on the day a member who shows their workouts reaches the number of days without training set for the crew (4 days by default), and a summary of the previous week every Monday (number of members who trained, number of personal records, and number of members on a break). The personal record count leaves out the records of members who turned off personal records in their sharing settings.

2. Storage Location of Information

Server: Stored separately by account in the Cloudflare D1 database (for the purpose of multi-device synchronization).
User device: A copy is kept inside the device (IndexedDB) so that workouts are possible even offline.
Progress photos are not transmitted to the server and are stored only on the device on which they were taken. If the App is deleted, they are removed together.

3. Processing for AI Coaching

For the workout analysis, routine generation, and coach conversation features, your workout records, body and condition information, profile (gender, proficiency, goals, weekly frequency, workout days, injured areas and joints, Big 3 records, height, and weight), and age group are sent to AI models (Cloudflare Workers AI, Google Gemini) to generate coaching results. When you use the equipment recognition and routine import features, the photos you take or select are sent as well (those features currently send them only to Cloudflare Workers AI, and the photos are kept on the server only while being processed and are deleted immediately after processing, or within 7 days at the latest). Progress photos (Section 1) are not sent. Age is sent only as an age group (e.g., 30s) instead of the year of birth. Regardless of your plan, the providers above generate coaching results, and which provider processes a request depends on the type of feature and on outages (if one provider does not respond, the request is passed to another). Cloudflare is already the processor responsible for the App's hosting and database (Section 5).

Name, email, contact details, and other information that directly identifies the user are not sent.
The transmitted data is used only for the purpose of generating coaching results.

4. Handling of Health Data (Android Health Connect · iOS Apple Health/HealthKit)

The App on Android accesses Health Connect only when the user has explicitly granted permission. The App on iOS accesses Apple Health (HealthKit) on the same principle, and the read and write items and handling described below apply in the same way (data read from Apple Health is also processed only on the device and is not used for advertising or marketing).

Read: Reads workout sessions, heart rate, active calories, sleep records, workout distance, and burned calories recorded by watches, Samsung Health, etc., automatically suggests condition (readiness) at the start of a session, and displays them on the activity and analysis screens.
Write: In GYMKC, records completed strength workout sessions and burned calories of those sessions (active calories and total calories) to Health Connect. Items for which permission has not been granted are not recorded.

Health data read from Health Connect:

Is not used for advertising or marketing purposes.
Is not sold to or shared with third parties.
Heart rate, active calories, workout sessions, and sleep records are used only for display and calculation within the device, and as such, are not transmitted to the server or AI models.
There is one exception. In workouts where you enter distance and time, such as cardio, if those fields are empty, the App fills them in automatically with the values of a workout session recorded by a watch or other device at the same time, tells you where the values came from, and lets you undo it. The same applies when you fill them in with the Import button. When you complete that set, the filled-in distance and time, just like values entered directly by the Member, become part of that workout record and are stored on the server. This is to ensure that records continue even if the device is changed. Values you undo or delete are not stored, and heart rate and active calories are not transmitted in any case.

In the App's Settings › Workout settings › Health app sync, the user may delete individually or entirely data recorded by GYMKC. Permissions may be withdrawn at any time in Health Connect settings.

5. Provision to Third Parties and Overseas Transfer

The App does not sell personal information. It uses the following only to the extent necessary for service operation.

Cloudflare: Hosting, database, and generation of AI coaching results (Workers AI; see Section 3)
Cloudflare, Google: Generation of AI coaching results (see Section 3), and receipt and forwarding of customer inquiry emails
Google (Firebase Cloud Messaging): When we send notifications to the App on Android, receives and delivers the device registration token and the notification title and body. Friend and crew notifications may include the other Member's nickname and crew or routine names, and crew coach notifications may include a member's nickname, how many days they have rested, and figures from the previous week's workout summary
Apple (Apple Push Notification service): When we send notifications to the App on iOS, receives and delivers the device token and the notification title and body. Friend and crew notifications may include the other Member's nickname and crew or routine names, and crew coach notifications may include a member's nickname, how many days they have rested, and figures from the previous week's workout summary
Google Health Connect · Apple Health (HealthKit): Integration with health data on the device (see Section 4)
Kakao: Identity verification when you log in with a Kakao account (Kakao member number, nickname, and email). Workout records are not sent to Kakao.
Naver: Identity verification when you log in with a Naver account (Naver user identifier and email, and nickname if you consent). Workout records are not sent to Naver.
Apple: Identity verification when logging in with an Apple account (account identifier, name and email upon initial consent. If Hide My Email is used, a private relay address is received). Workout records are not transmitted to Apple.
Google: Identity verification when logging in with a Google account (account identifier, name, verified email). Workout records are not transmitted for login purposes.
Google Play: Payment processing and verification of subscription status when paying for a subscription in the App. Payment method information is processed by Google, and the App does not store it.
App Store (Apple): Payment processing and checking subscription status when you pay for a subscription in the App on iPhone. Payment method information is processed by Apple, and the App does not keep it.
Toss Payments: Payment processing when paying for a subscription on the web. Card information is directly received and stored by Toss Payments, and the App neither receives nor stores card numbers. What the App stores is payment identification values (billing key, order number) and payment results. In order to display the name on the card registration screen and send payment history emails, name and email are also transmitted together (items not registered are not sent).
AppsFlyer: Measurement of the App's ad performance (processing of the "Ad performance measurement (App)" items in Section 1). It counts which ad led to an install, sign-up, or subscription (including filtering out fake installs) and reports those conversion results to advertising media. Member names, emails, workout records, and health information are not sent.
Advertising media (entities running app installation advertisements, such as Naver): Receives, via AppsFlyer, whether installation, sign-up, or subscription occurred (conversion), advertising identifiers, and access IP addresses of devices that entered through advertisements of that medium, and counts advertising performance. Member name, email, and Member number are not received.
YouTube (Google): Videos in "Exercise Guide" articles on the website are loaded from YouTube only when you press the play button. Before you press it, no information goes to YouTube. When you press it, your browser connects to YouTube directly, connection information (IP address and browser information) is sent to YouTube, and the privacy policy of YouTube (Google) applies. The App does not send Member information to YouTube.

Overseas transfer

Among the above business operators, the following are located overseas, and process personal information only within the scope of entrustment of processing necessary to provide the service. The Privacy Policy of each business operator may be checked at the address below the company name.

Recipient of transfer	Country of transfer	Items transferred	Timing and method of transfer	Purpose of use	Period of retention and use
Cloudflare, Inc. cloudflare.com/privacypolicy/	United States (Headquarters) and Cloudflare Global Network	Items stored on the server under Section 1 · items sent to AI under Section 3 · photos taken or selected by the user in equipment recognition and routine import (progress photos are excluded; they are stored only on the device and are not sent) · customer inquiry emails (sender address and content)	Transmitted from time to time via the network upon use of the service · customer inquiry emails are transmitted when the user sends them	Operating hosting and the database, generating AI coaching results (Section 3), and receiving and forwarding customer inquiry emails	Until account deletion or termination of the entrustment of processing contract
Apple Inc. apple.com/legal/privacy	United States	When you log in with Apple: account identifier, and name and email at first consent (a private relay address if you use Hide My Email) · when we send notifications to the App on iOS: device token and notification title and body · when you subscribe in the App on iPhone: transaction identifier for verifying the subscription. Workout records and the items sent to AI are not sent (a notification body can include a crew coach notification's member nickname, days without training, and previous-week workout figures)	Transferred via API when logging in with an Apple account, sending notifications, and verifying subscriptions	Identity verification (login), notification delivery, subscription payment and status verification	Until the purpose of processing the request is achieved (subsequent retention follows the policy of the relevant business operator)
Google LLC policies.google.com/privacy	United States	Items sent under Section 3 (AI coaching) · device registration token and notification title and body when sending notifications (for a crew coach notification, a member's nickname, days without training, and previous-week workout figures) · account identifier, name, and email at login · payment status for App subscriptions · customer inquiry emails (sender address and content)	Transferred via API upon AI coaching request, login, and subscription verification · customer inquiry emails are forwarded through Cloudflare	Generation of AI coaching results, notification delivery, identity verification, subscription payment and status verification, receipt and forwarding of customer inquiry emails	Until the purpose of processing the request is achieved (subsequent retention follows the policy of the relevant business operator)
AppsFlyer Ltd. appsflyer.com/legal/privacy-policy	European Union (data storage · AWS, Google Cloud) · Israel (headquarters)	The "Ad performance measurement (App)" items in Section 1	Transferred from time to time via the network when using the App	Measurement of App ad performance	Until the termination of the entrustment agreement (follows the retention period of the measurement company)

Kakao and Naver (login) and Toss Payments (web payments) are domestic (Korean) businesses, so they do not involve an overseas transfer. Health Connect and Apple Health data stays on the device and is not transferred overseas (Section 4).

When you do not want overseas transfer

AI coaching (receiving analysis, routine creation, trainer chat, weekly report) is transferred only when the Member requests. If you do not use this feature, nothing is transferred to the AI business operator, and you may use the remaining features such as records, prescriptions, and timers as they are. However, for sessions conversed in trainer chat, a summary of that conversation is automatically created to continue in the next conversation.
Hosting and the database (Cloudflare) are the foundation of the service, so if you refuse this transfer, it will be difficult to use Member features. In that case, you may stop the processing by deleting your account (Section 6).

6. Retention and Deletion

Information is retained while the account exists, and when the account is deleted, the account, workout records, measurements, profile, and payment method information (billing key and card information) are deleted from the server immediately. However, under Article 6 of 「전자상거래법 시행령」 (Enforcement Decree of the Act on the Consumer Protection in Electronic Commerce), web payment contract and payment records (order number, payment identifier, product, amount, payment date, and status), payment conversion consent records (the payment date concerned, the amounts before and after the change, whether consent was given and when, and the version of the notice text), and refund request records (the payment concerned, the time of the request, its type, and the result of processing) are separated from the account and kept for 5 years after account deletion and then deleted. These records do not contain card information, names, or emails. Deleted data cannot be restored, and copies remaining in backups for disaster recovery are deleted in sequence within 30 days at most (the same standard as Article 7 of the Terms of Service).
However, three items are not deleted together on the spot. Because error and synchronization diagnostic logs are used to check App quality, the records themselves are kept and only the account identifier is immediately disconnected (it becomes impossible to know whose it is). Records of notifications already sent are automatically deleted within 7 days. App usage records are automatically deleted after 180 days. In addition, any crew created by the Member as a coach is immediately disbanded and disappears from participants' screens.
For accounts that received a free trial or invitation benefit or subscribed, the login identifier is converted into an irreversible value and kept for 1 year and then deleted (Section 1, "Prevention of duplicate benefits"). It remains for that period even after account deletion. This value alone cannot identify a person, and it does not contain names, emails, or workout records.
Workout records (exercise, weight, reps, rest, perceived exertion) are retained without reduction while the account is maintained, and are fully included in exports (JSON, CSV).
Narrative reports written by AI (sentences of session analyses and weekly reports) are retained for 12 months. Thereafter, only numerical summaries such as volume and intensity remain, and sentences are deleted. Analysis may be received again with the same records.
AI coach conversations (questions and answers) are retained while the account is maintained and are deleted together when the account is deleted. Conversation summaries for continuation are deleted after 12 months, like the narrative reports above.
Confirmation materials received for creator verification are deleted within 30 days after confirmation is completed (the verification request note and the identity confirmation code).
Screen state during exercise (temporary values for progress, such as timer start time) is cleared when the session ends. Actual rest time and recorded values remain as they are.
Plan snapshots of old sessions may be reduced in size by keeping only the items used by screens and statistics. Even then, the sets you recorded and statistical figures do not change. (For details, see Article 7 of the Terms of Service.)
Records of routines being saved: after 90 days, the individual records are deleted and only the totals are kept. What is deleted is ‘who saved it’, and the ‘number of people who saved it’ shown on the page remains as the total for the entire period.
When you delete your account, your public routines, likes, difficulty feedback, comments, and creator profile are deleted with it. However, copies of routines that other Members have already saved remain in their saved routines. This is because they are those Members' data, copied at the time of saving. Those copies do not contain an account identifier pointing to the original poster.
You may delete your account in the App under Settings → Delete account or at gymkc.org/delete-account.
Data recorded in Health Connect and Apple Health may be deleted directly in the App (Section 4).
Data stored on the device is removed together when the App is deleted.
If you wish for deletion, please make a request to the contact information below.

7. Rights of Users

Users may request access, correction, deletion, and suspension of processing regarding their information. In Settings › Data & sync in the App, you may download the workout records you created as JSON (sessions, sets, personal records, body measurements, and condition, plus the exercises, routines, and locations you created, for the entire period). Analyses and reports written by AI and trainer conversations can be viewed in the App and are not included in the file, because they are not information entered by Members but information we generated and processed on the basis of Members' records.

8. Security

All communications are encrypted with HTTPS.
Login is performed using Google · Kakao · Apple · Naver accounts (OAuth), and passwords are not stored.
Passkeys (biometric authentication) are stored only on the device, and only the public key, device name, and time of last use are retained on the server.
Data is separated on an account basis, and other users' records cannot be accessed.

9. Children's Personal Information

The App does not target individuals under 16 years of age, and does not knowingly collect personal information of children.

10. Notice of Changes

If this Policy is changed, the modified contents and effective date are posted on this page. Significant changes are also notified through notices within the App.

11. Inquiries

Inquiries and deletion requests regarding personal information
Email: support@gymkc.org
KakaoTalk channel (for users in Korea): GYMKC 1:1 chat (if you contact us by chat, your KakaoTalk profile name and the conversation are delivered to GYMKC, and Kakao's privacy policy also applies to your use of KakaoTalk)
Operator: KKC Labs (케이케이씨 랩스) · Representative: Kim KyeongChan (김경찬)
Business registration number: 705-14-02207 · Mail-order business report number: 2026-서울송파-2025
Business address: Unit 201, 5-17 Garak-ro 12-gil, Songpa-gu, Seoul, Republic of Korea

12. Chief Privacy Officer

Oversees all work related to the processing of personal information and handles users' inquiries, complaints, and requests for remedies.
Name: Kim KyeongChan (김경찬) · Title: Representative
Email: support@gymkc.org

Requests for access, correction, deletion, or suspension of processing are received at the contact above, and we act on them and notify you of the result within 10 days of receipt. As a sole proprietorship, we have no separate department, and the Chief Privacy Officer handles them directly.

13. Remedies for Infringement of Rights and Interests

If consultation or dispute mediation is needed due to personal information infringement, you may contact the institutions below. If you notify us first, it can be resolved more quickly, but regardless of that, you may use them at any time.

Personal Information Dispute Mediation Committee: 1833-6972 · www.kopico.go.kr
Personal Information Infringement Report Center: 118 without area code · privacy.kisa.or.kr
Supreme Prosecutors' Office: 1301 without area code · www.spo.go.kr
National Police Agency Cybercrime Reporting System: 182 · ecrm.police.go.kr

For California Residents

Sale and sharing: We do not sell your personal information for money. However, if you install the App from an advertisement, the App, through AppsFlyer, informs the advertising media that ran the advertisement whether the installation led to a sign-up or a subscription, together with your device's advertising identifier and IP address, so that they can count the results of their advertising and deliver advertisements appropriately (Sections 1 and 5). Under the California Consumer Privacy Act (CCPA), this disclosure may be considered a "sale" of personal information or "sharing" of personal information for cross-context behavioral advertising. We do not disclose your name, email, workout records, or health information for this purpose, and the App does not display advertisements.

Your choices: You may reset or delete the advertising identifier on Android, or not allow or turn off tracking on iPhone (Section 1). Measurement then continues without the advertising identifier.

Your rights: The rights described in Section 7 (access, correction, deletion, and suspension of processing) are also available to you. You can exercise them at support@gymkc.org.

Tracking and "Do Not Track": When you use the App, AppsFlyer and advertising media may collect information that links your device's interaction with advertisements in other apps or on other websites to your installation of and activity in the App, as described above. On our website, YouTube receives connection information only if you press the play button on a video (Section 5). The App and our website do not respond to browser "Do Not Track" signals.

Washington and Nevada Residents: Consumer Health Data

If you live in Washington or Nevada, our Consumer Health Data Privacy Policy explains what consumer health data we collect, how we use and share it, and how you can exercise your rights under the laws of those states.

For Users in Australia, Canada, New Zealand, and Singapore

Our Chief Privacy Officer (Section 12) is responsible for our compliance with the privacy laws that apply to us, including as the person in charge of the protection of personal information under the laws of Québec, and is the person to whom you may send questions, requests, and complaints about how we handle your personal information, at support@gymkc.org or at the business address in Section 11. We will look into each complaint and reply to you with the outcome.

If you are not satisfied with our response, you may also contact the privacy regulator in your country: the Office of the Australian Information Commissioner (OAIC) in Australia, the Office of the Privacy Commissioner of Canada in Canada (in Québec, also the Commission d'accès à l'information du Québec), the Office of the Privacy Commissioner in New Zealand, or the Personal Data Protection Commission in Singapore.

Privacy governance. Our Chief Privacy Officer has approved our policies and practices for protecting personal information. GYMKC is a sole proprietorship, so the Chief Privacy Officer (Section 12) handles personal information directly at every stage, from collection and use to storage, disclosure, and deletion, and the companies listed in Section 5 receive it only as described there. We keep and delete personal information as described in Section 6. You can send a complaint about how we protect your personal information as described above, and we will look into it and reply to you with the outcome.