Privacy Policy

Gorillo has two kinds of user, and the difference matters for your rights.

A trainer (or studio owner) signs up, runs their coaching business in the app, and decides what goes into each client record. For the information a trainer enters about their clients, the trainer is the one responsible for it — they decide what to collect and why. Gorillo holds and processes it on their behalf, under this policy and their instructions.

A client joins with a one-time invite code from their trainer and sees only their own training: progress, sessions, bookings, classes open to them, whether their membership is active, and their conversations with their trainer. A client is never shown a monetary balance in their app. Clients never see one another’s records, and no trainer can see another trainer’s clients. A gym has two shared spaces: its group chat and its social feed. Where a gym uses them, its members can see each other’s names, the messages posted in the chat and the posts shared on the feed.

If you are a client and want something in your record changed or removed, the fastest route is your trainer. You can also come straight to us using the contact details in section 13.

Account details. Your name, an email address and a password used to sign you in. We never store your password in a readable form. A trainer also adds their gym’s details: its name, logo, city, currency and time zone, roughly how many clients they train, their coaching preferences and, optionally, a social media handle that is printed on their post images.

Client records. What a trainer enters to run their coaching: first and last name, email, phone, date of birth, an optional profile photo, height and weight entries, training goals, and notes about injuries or limitations. Clients can add some entries themselves, such as their own workouts and body-weight readings. Some of this is health-related information, so it is treated as sensitive and is never used for anything beyond running the coaching relationship.

Session content. The sessions you log, the exercises and numbers in them, and the text of the session chat used to record them. Because that chat is written in the moment, it can include health-related remarks — an ache, an old injury, a modification. It is kept as part of the training record and used only for that. Session content also includes the workouts a trainer saves, and any workout text they paste in to have it organised.

Messages. The messages you send in Gorillo’s chat: between a trainer and each of their clients and, where a gym uses one, in that gym’s shared room. Messages are text only. Like session notes, they can include health-related remarks, and they are kept as part of the coaching relationship.

Posts. What you share on your gym’s social feed: a photo or picture, text and, for a workout, its stats, shown with your name and the gym’s logo. Everyone in the gym can see and react to it, and you can delete it.

Schedule. Bookings and classes, with times, locations, headcounts, and prices where set.

Payment records. Gorillo tracks payments; it does not take them. A trainer assigns a plan and marks a client paid. We store the amount, the plan, and the date recorded. We never receive, see, or store card numbers, bank details, or any other payment credential, because no payment ever passes through Gorillo.

Subscriptions. Trainers pay for Gorillo through the App Store or Google Play. The store handles the payment; we receive which plan you have, its status, its dates and the store’s reference for each purchase, through a subscription service provider that works on our behalf. Never card or bank details.

Reports and blocks. If you report a message in chat or a post on the feed, we keep the report, who sent it and a copy of what was reported so we can review it. If you block someone, the block list is stored with your account.

Diagnostics. If the app crashes, we may receive a crash report describing what failed, along with basic device and operating-system information. Each time the app opens, it also sends basic device and app details (model, system and app version) so we can see that the service is working. These are used to fix faults and keep the app running, and are not linked to your identity. The app also uses security checks built into your phone’s operating system to confirm that requests come from a genuine copy of Gorillo.

How you use a few features. To make them work, some of your activity is stored with your account: which conversations you have read, your reactions to posts, whether you hid the gym chat, the ratings you give the session assistant’s replies, and a daily count of your AI requests used for fair-use limits.

We do not collect your location, your contacts, data from Apple Health or Health Connect, or your activity in other apps or on other websites.

Gorillo asks for access to your phone’s features only at the moment it needs them, and uses each for nothing else. You can refuse or withdraw any of them in your phone’s settings, and the rest of the app keeps working.

• Microphone — to hear you say what happened in a session so it can be written down. On iPhone this comes with a separate speech recognition permission, to turn that speech into text.
• Camera and photos — to take or choose a profile photo, a gym logo or a photo for a post, and, when you ask, to save a post image to your photos. We access only the images you take or pick.

This is the part people ask about most, so it is worth being exact.

When you speak into a session, your phone’s built-in speech recognition turns your voice into text. Depending on your phone, its settings and the language you speak, that happens on the phone itself or through the speech service of its operating system — Apple’s on iPhone, usually Google’s on Android — under that provider’s own privacy terms. Gorillo itself never receives, uploads or stores the audio: only the resulting text reaches us.

The resulting text is then handled the same way as anything else you type into a session. To produce the confirmation replies and the end-of-session write-up, that text is processed by a specialist AI service provider working on our behalf under contract, together with the client’s first name so the replies can address them. Workout text a trainer pastes in to have it organised is processed the same way. It is sent only to produce those replies, logs and workouts. The provider does not use it to train its models, it is not used to advertise to you, and it is not sold.

In the iPhone app, Gorillo asks for your permission before it first uses the AI, and you can turn it off at any time in Settings, Privacy; without it, live sessions and workout imports don’t use the AI. If you would rather no audio left your phone, type instead of speaking. And if you would rather no session text was processed this way, keep your notes outside Gorillo and record only the final numbers in the app.

We use the information above to:

• run the app and the coaching workflow it exists to support;
• keep a training history, a schedule, and a payment record for each client;
• turn what you say or type in a session into a readable log;
• let trainers and their clients message each other;
• show a trainer which memberships are lapsing and which clients have gone quiet;
• send account emails, such as a password reset;
• keep accounts secure, prevent abuse, and diagnose crashes;
• improve the session assistant, by reading the replies you rate;
• meet legal and accounting obligations.

Where the law requires a legal basis (for example under UK and EU data protection law), we rely on: performing our contract with you; our legitimate interest in keeping the service secure and working; your consent for device permissions and, where required, for health-related information; and compliance with legal obligations.

We do not sell your personal information, and we do not share it for advertising or cross-context behavioural advertising. We have not done so at any point. Your information reaches only:

• Your trainer, or your client. The coaching relationship you signed up for. If your gym uses a shared chat room or social feed, the other members of that gym also see your name, the messages you post there and the posts you share — nothing else of yours.
• Service providers we contract with to host and store data, deliver the app, send account emails, process session text into logs as described in section 4, process subscriptions, and report crashes. They act only on our instructions, are bound to protect the information to a standard at least as strong as this policy, and may not use it for their own purposes.
• Authorities or advisers, where we are legally required to disclose something, or need to establish or defend a legal claim. We will tell you when we are permitted to.
• A successor, if the business is ever sold or merged — in which case this policy travels with your information, and you will be told before anything changes.

We deliberately do not run advertising, advertising identifiers or tracking inside the app. Crash reports, basic app diagnostics and your ratings of the assistant’s replies are used only to keep Gorillo working and to improve it.

Gorillo is operated from Europe and uses established cloud providers whose facilities may be located in, or accessible from, other countries. Where information leaves the UK or European Economic Area, we rely on recognised safeguards for that transfer — such as an adequacy decision or standard contractual clauses — so your rights travel with it.

We keep information for as long as the account it belongs to is active, and only as long as it is needed for the purposes in section 5 or to meet a legal or accounting obligation.

Deleting a trainer account. In the app, under Settings, you can delete your account. This closes your gym or studio: your login, profile, calendar and unused invite codes are deleted straight away. Your clients’ records are not, because they are also each client’s own training history — every client keeps their sessions, progress and messages with you, alongside your gym’s name and logo, and is told the gym has closed. If you want your clients’ records erased as well, ask us. Payment records may be kept for as long as accounting or tax law requires.

Deleting a client account. A client can delete their own account from Settings in their app. This deletes their login and profile and unlinks them from their trainer. Their session history and the messages they sent stay with the trainer, as that trainer’s record of coaching delivered — in the same way a written training log would. If you want that erased as well, ask your trainer, or contact us and we will help.

Without the app. If you no longer have the app, you can still ask us to delete your account: see Delete your account.

A few records are kept after an account is deleted: reports, so abuse can still be dealt with; payment, accounting and subscription records, which can include the note of a paid session, for as long as accounting or tax law requires; and small technical records that hold no messages, such as which conversations you had read and the daily count of AI requests.

Deleted information is removed from live systems straight away. Backup copies expire automatically within 14 weeks, after which it is gone.

Wherever you live, you can ask us to give you a copy of your information, correct it, delete it, or send it to you in a portable form. You can also object to or ask us to restrict certain processing, and withdraw a consent you have given at any time — withdrawing it does not undo what was done before.

If you are in the UK or the European Economic Area, these rights come from the UK GDPR and the EU GDPR, and you may also complain to your national data protection authority. If you are in California, you have the right to know what we collect, to delete it, to correct it, to opt out of sale or sharing (we do neither), and not to be treated differently for exercising any of these rights.

Most of this you can do yourself in the app. For anything else, email us at the address in section 13. We answer within 30 days, and will tell you if we need longer and why. We may need to confirm your identity first, so that nobody else can make a request in your name.

Information is encrypted in transit and at rest. Access is scoped to the account it belongs to: a trainer can reach their own clients, a client can reach their own training and conversations, and no account can read another’s records. Administrative access is limited to those who need it to operate or support the service.

No system is perfectly secure. What we can do is hold less: no payment credentials, no location, no advertising profile, and no audio recordings. If a breach ever affects your information, we will notify you and the relevant regulator as the law requires.

Gorillo is built for adult trainers and studio owners. A client record may belong to someone aged 16 or over who is coached with the involvement of their trainer and, where they are under 18, their parent or guardian. It is the trainer’s responsibility to have the appropriate permission before creating or inviting a minor’s profile.

Gorillo is not directed at anyone under 16, and we do not knowingly collect their information. The app does not verify age itself. If you believe a profile exists for someone under 16, or that a minor’s information was added without the right permission, contact us and we will delete it.

If we change how we handle your information, we will update this page and change the effective date at the top. If the change is significant, we will tell you in the app or by email before it takes effect, so you have a chance to object or close your account.

Questions, requests, or complaints about privacy: contact@courtbreakstudios.com.

Gorillo is operated by Catalin Rotaru, trading as Courtbreak Studios. Full details are in the legal notice.