Last updated 22 October 2026.
Benchmark is run by a sole trader in the United Kingdom, who is the data controller for everything below. Contact: privacy@gymbenchmark.com.
| What | Why | Lawful basis |
|---|---|---|
| Your email address and Google account id | To know which log is yours and let you back in | Contract |
| Your programme, sessions, sets and weights | It is the product | Contract |
| Body weight and body fat, only if you opt in | The two charts that plot them | Explicit consent |
| Stretch list | The checklist. No record is kept of doing them | Contract |
| Share links you create | So a link you gave someone keeps working until you revoke it | Contract |
| Feedback you send | To read it and reply | Legitimate interests |
| Payment record: that you paid, when, how much, and Paddle's transaction id | To unlock the app and handle refunds and tax | Contract and legal obligation |
Body weight and body fat are health data under UK GDPR, which needs a higher standard than everything else. Nothing is recorded until you explicitly say yes, the rest of the app works perfectly well if you never do, and withdrawing consent deletes what was already recorded rather than just hiding it. Body composition is never included in a share link — that is enforced in the database query, not hidden in the page.
No card details — Paddle handles payment and the card never touches this app. No password, because sign-in goes through Google. No tracking or analytics inside the app, no third-party scripts, and no advertising identifiers. Share links are stored only as a hash, so even we cannot reconstruct one.
Nothing is sold, and nothing is shared with anyone for advertising.
While your account exists. Delete it and share links stop working immediately; everything else is kept for 30 days in case you change your mind, then destroyed by an automatic job that runs daily. Records of payments are kept for six years, because HMRC requires it.
Two, both strictly necessary and neither used for tracking: one holding your sign-in session, one holding a token that proves a request came from this site. There is no cookie banner on the app because there is nothing to consent to.
You can get a copy of everything, in one file, from Account → Download my data — no need to ask. You can delete your account from the same screen. You also have the right to correct what is wrong, to object to or restrict processing, to withdraw consent for body composition at any time, and to complain to the Information Commissioner's Office.
For anything the app cannot do itself, email privacy@gymbenchmark.com and you will get an answer within 30 days.