Privacy policy

Last updated 21 October 2026

GymPlan is a Shopify app made by Galaxy Fitness. It adds a workout planner to a merchant's online store and recommends products from that store. This policy explains what the app processes for merchants who install it and for shoppers who use the planner.

Merchants

When you install GymPlan we receive your shop domain and an access token from Shopify, plus the account email Shopify shares with apps. We read your products to suggest training tags, and we read orders only to find line items that came from GymPlan. For those orders we store the order id, the number of GymPlan items, their revenue and currency, and which placement sold them. We do not store customer names, emails or addresses from orders.

Shoppers

• Guests. The plan is saved in a first-party cookie on the store (gp_plan, under 600 bytes) together with a random anonymous id. It holds the quiz answers needed to rebuild the plan, nothing that identifies you.
• Signed-in customers. The same plan code is saved to your customer record in the store, in a field only GymPlan writes, so it follows you between devices.
• Analytics. Only when you have accepted analytics in the store's cookie banner (Shopify Customer Privacy API). We record the anonymous id and event counts such as "plan built" or "kit added". No free text, no IP address, no personal details.
• Cart. Items added from a plan carry hidden properties (_gymplan_src, _gymplan_sid) so the merchant can see which sales came from GymPlan.

Where data lives

App data is stored in a PostgreSQL database on a server we operate. Exercise videos are served from Cloudflare. We do not sell data and do not share it with advertisers.

Retention and deletion

We honour Shopify's mandatory privacy webhooks. On a customers/redact request we delete the order records linked to that shopper (the saved plan lives in the customer record at Shopify and is removed with it); on shop/redact, sent 48 hours after a merchant uninstalls, we delete everything stored for that shop. Shoppers can also clear the cookie in their browser at any time.

Contact

Questions or requests: support@galaxy-apps.com. Merchants can also reach us through the app listing in the Shopify admin.