Privacy Policy

Gorillo has two kinds of user, and the difference matters for your rights.

A trainer (or studio owner) signs up, runs their coaching business in the app, and decides what goes into each client record. For the information a trainer enters about their clients, the trainer is the one responsible for it — they decide what to collect and why. Gorillo holds and processes it on their behalf, under this policy and their instructions.

A client joins with a one-time invite code from their trainer and sees only their own training: progress, sessions, bookings, classes open to them, and whether their membership is active. A client is never shown a monetary balance in their app. Clients are not connected to one another, and no trainer can see another trainer’s clients.

If you are a client and want something in your record changed or removed, the fastest route is your trainer. You can also come straight to us using the contact details in section 13.

Account details. An email address and a password used to sign you in. We never store your password in a readable form.

Client records. What a trainer enters to run their coaching: first and last name, email, phone, date of birth, an optional profile photo, height and weight entries, training goals, and notes about injuries or limitations. Some of this is health-related information, so it is treated as sensitive and is never used for anything beyond running the coaching relationship.

Session content. The sessions you log, the exercises and numbers in them, and the text of the session chat used to record them. Because that chat is written in the moment, it can include health-related remarks — an ache, an old injury, a modification. It is kept as part of the training record and used only for that.

Schedule. Bookings and classes, with times, locations, headcounts, and prices where set.

Payment records. Gorillo tracks payments; it does not take them. A trainer assigns a plan and marks a client paid. We store the amount, the plan, and the date recorded. We never receive, see, or store card numbers, bank details, or any other payment credential, because no payment ever passes through Gorillo.

Diagnostics. If the app crashes, we receive a crash report describing what failed, along with basic device and operating-system information. These are used to fix faults and are not linked to your identity.

We do not collect your location, your contacts, data from Apple’s Health app, or your activity in other apps or on other websites.

Gorillo asks for four permissions, each only at the moment it is needed, and each used for nothing else. Every one of them can be refused or withdrawn in your iPhone’s Settings, and the rest of the app keeps working.

• Camera — to take a profile photo for a client.
• Photo library — to choose an existing photo for a client’s profile. We access only the image you pick.
• Microphone — to hear you say what happened in a session so it can be written down.
• Speech recognition — to turn that speech into text for the session chat.

This is the part people ask about most, so it is worth being exact.

When you speak into a session, your voice is converted to text on your device, using your iPhone’s built-in speech recognition. The audio is not uploaded, not stored by us, and not retained after it becomes text.

The resulting text is then handled the same way as anything else you type into a session. To produce the confirmation replies and the end-of-session write-up, that text is processed by a specialist AI service provider working on our behalf under contract. It is sent for the sole purpose of generating that session’s reply and summary. It is not used to advertise to you, and it is not sold.

If you would rather no session text was processed this way, type or dictate your notes outside Gorillo and record only the final numbers in the app.

We use the information above to:

• run the app and the coaching workflow it exists to support;
• keep a training history, a schedule, and a payment record for each client;
• turn what you say or type in a session into a readable log;
• show a trainer which memberships are lapsing and which clients have gone quiet;
• keep accounts secure, prevent abuse, and diagnose crashes;
• meet legal and accounting obligations.

Where the law requires a legal basis (for example under UK and EU data protection law), we rely on: performing our contract with you; our legitimate interest in keeping the service secure and working; your consent for device permissions and, where required, for health-related information; and compliance with legal obligations.

We do not sell your personal information, and we do not share it for advertising or cross-context behavioural advertising. We have not done so at any point. Your information reaches only:

• Your trainer, or your client. The coaching relationship you signed up for, and nobody outside it.
• Service providers we contract with to host and store data, deliver the app, process session text into logs as described in section 4, and report crashes. They act only on our instructions, are bound to protect the information to a standard at least as strong as this policy, and may not use it for their own purposes.
• Authorities or advisers, where we are legally required to disclose something, or need to establish or defend a legal claim. We will tell you when we are permitted to.
• A successor, if the business is ever sold or merged — in which case this policy travels with your information, and you will be told before anything changes.

We deliberately do not run advertising, advertising identifiers, or third-party tracking or analytics tools inside the app.

Gorillo is operated from Europe and uses established cloud providers whose facilities may be located in, or accessible from, other countries. Where information leaves the UK or European Economic Area, we rely on recognised safeguards for that transfer — such as an adequacy decision or standard contractual clauses — so your rights travel with it.

We keep information for as long as the account it belongs to is active, and only as long as it is needed for the purposes in section 5 or to meet a legal or accounting obligation.

Deleting a trainer account. In the app, under Settings, you can delete your account. This removes your profile, your gym or studio details, your client records, and the photos stored with them.

Deleting a client account. A client can delete their own account from Settings in their app. This removes their account and unlinks it from their trainer. Their session history remains with the trainer as that trainer’s record of coaching delivered — in the same way a written training log or an invoice would. If you want that history erased as well, ask your trainer, or contact us and we will help.

Deleted information is removed from live systems straight away. Copies inside routine backups are overwritten on our normal backup cycle, after which they are gone.

Wherever you live, you can ask us to give you a copy of your information, correct it, delete it, or send it to you in a portable form. You can also object to or ask us to restrict certain processing, and withdraw a consent you have given at any time — withdrawing it does not undo what was done before.

If you are in the UK or the European Economic Area, these rights come from the UK GDPR and the EU GDPR, and you may also complain to your national data protection authority. If you are in California, you have the right to know what we collect, to delete it, to correct it, to opt out of sale or sharing (we do neither), and not to be treated differently for exercising any of these rights.

Most of this you can do yourself in the app. For anything else, email us at the address in section 13. We answer within 30 days, and will tell you if we need longer and why. We may need to confirm your identity first, so that nobody else can make a request in your name.

Information is encrypted in transit and at rest. Access is scoped to the account it belongs to: a trainer can reach their own clients, a client can reach their own training, and no account can read another’s. Administrative access is limited to those who need it to operate or support the service.

No system is perfectly secure. What we can do is hold less: no payment credentials, no location, no advertising profile, and no audio recordings. If a breach ever affects your information, we will notify you and the relevant regulator as the law requires.

Gorillo is built for adult trainers and studio owners. A client record may belong to someone aged 13 or over who is coached with the involvement of their trainer and, where they are under 18, their parent or guardian. It is the trainer’s responsibility to have the appropriate permission before creating or inviting a minor’s profile.

Gorillo is not directed at children under 13 and we do not knowingly collect their information. The app does not verify age itself. If you believe a profile for a child under 13 exists, or that a minor’s information was added without the right permission, contact us and we will delete it.

If we change how we handle your information, we will update this page and change the effective date at the top. If the change is significant, we will tell you in the app or by email before it takes effect, so you have a chance to object or close your account.

Questions, requests, or complaints about privacy: privacy@gorilloapp.com.

Gorillo is operated by [legal entity name], [registered address].