Privacy policy
Last updated 24 October 2026
Using RoomGym 1.0.x? The consent screen and Privacy choices described below are in version 1.1 and later. In version 1.0.x, health details you type are used only to build your workout, are not stored on our servers, and you can leave them blank. Update the app from Google Play to get the new choices.
RoomGym ("we", "us") is provided by Albion AI Solutions UK Ltd and builds workouts from a photo of your equipment. This policy explains what information the app handles, who it is shared with, and the choices you have. Questions or requests: info@albionaisolutions.co.uk. Health details have their own page: Consumer health data privacy policy.
What we handle
| Information | Why | Where it goes |
|---|---|---|
| Photos you take of your room or equipment | To identify your equipment and build the workout | Sent over an encrypted connection to our server, then to our AI provider for processing. We do not save your photos. |
| Health and fitness details you type: injuries or limitations, time available, intensity, time of day, whether you have eaten | To make the workout safe and suitable | Sent with the photo to build the plan. We do not store it on our servers. |
| Premium personalisation (optional): height, weight, goal, focus areas, a specific target | To tailor the plan. BMI is calculated from your height and weight | Sent only when you use this Premium feature, to build the plan. Not stored on our servers. |
| Male or female choice (RoomGym 1.0.x only, optional, in targeted workouts; removed in version 1.1) | To choose sensible exercise emphasis and starting loads for that workout | Sent with the targeted-workout request only if you pick one, to build the plan. Remembered on your phone so you do not have to pick again; not stored on our servers. |
| A random device ID created by the app (not linked to your name or account) | To count scans per day and to recognise a Premium subscription | Our server and our database; RevenueCat (subscriptions) |
| Network address | To limit abuse of the service | We keep only a one-way hash, never the address, and delete it within 7 days. Our hosting provider also processes it as part of normal request handling. |
| Your history: saved plans, reps you log, ratings, notes, your figure choice and last-used settings | To show your progress and repeat workouts | Stored only on your phone. Not sent to us. |
| Ad and purchase data | To show ads and process subscriptions | Google AdMob and Google Play / RevenueCat, under their own policies (see below) |
RoomGym has no account system. We do not ask for your name, email or phone number.
Health information and your consent
Anything you enter about your health (injuries or limitations you type, and height and weight if you use the Personalised plan) is used only to shape the workout you ask for. The app asks for your explicit consent before it uses it. You choose what to enter, and you can leave it blank. If you say no, RoomGym still works: it simply does not use or send health details, so plans will not adapt to your limits.
You can withdraw your consent at any time in the app under Privacy choices. When you do, the app stops using and sending health details straight away. Withdrawing does not affect anything done before. You can also delete everything stored on your phone from the same screen. See the Consumer health data privacy policy for more.
RoomGym provides general fitness guidance, not medical advice. Check with a doctor or qualified professional before starting any exercise programme, and stop if you feel pain, dizziness or unwell.
Who we share it with
- Anthropic (AI processing): receives your photo and the details above to generate the workout, under its own terms and privacy policy.
- Cloudflare (hosting and database): runs our server and stores the usage counters described above.
- Google AdMob (ads, free version): shows ads and may collect device and advertising identifiers and usage data. We request non-personalised ads, and where the law requires it we ask for your consent first. Premium removes ads.
- RevenueCat and Google Play (subscriptions): process purchases and tell us whether your subscription is active.
- jsDelivr (content delivery): serves the exercise reference photos, illustrations and line art, so your device contacts it when you view them. Illustrations are exercise data by RepDB (repdb.co); line art is the Workout Guide by Bryl Lim (CC BY-SA 4.0, based on Everkinetic); photos are from the public-domain free-exercise-db project.
We do not sell your personal information.
How long we keep it
- Scan counters and hashed network keys on our server: deleted automatically within 7 days.
- One record that your free targeted-workout taster was used: kept so it is not offered twice.
- Photos and health details: not kept by us.
- Data on your phone: until you delete it, clear the app's data or uninstall.
- Subscription records: held by RevenueCat and Google Play under their policies.
Your choices and rights
- Use Privacy choices in the app to switch health details off (withdraw consent) and to delete your data on your phone. You can also clear the app's storage or uninstall.
- Skip the optional health and personalisation fields.
- Email us to ask what we hold about your device ID, to have it deleted, or to exercise any right below. Include the Support ID shown in the app (Privacy choices or the Premium screen) so we can find it. We aim to reply within 30 days.
- Wherever you live, you can ask to see, correct or delete your personal information, withdraw consent, and object to how it is used. We do not charge for this and we will not treat you worse for asking.
The sections below add detail for people in particular places.
United Kingdom and European Economic Area
You have rights of access, correction, erasure, restriction, objection and portability, and the right to complain to your data protection authority (in the UK, the Information Commissioner's Office, ico.org.uk).
United States
If you live in California, Washington, Nevada, Connecticut or another US state with a privacy law, you may have the right to know what personal information we collect, to access, correct and delete it, to withdraw consent for consumer health data, and to opt out of the sale or sharing of personal information. We do not sell your personal information or your consumer health data, and we do not use health information for anything other than creating the workout you ask for. Where ads are shown, a US privacy choices screen from Google may appear, and you can reopen it from Ad choices in the app to opt out of sharing for advertising. To use any right, email info@albionaisolutions.co.uk. If we decline, you can reply asking us to review the decision, and you can contact your state's Attorney General. Washington residents: see our Consumer health data privacy policy.
South Africa (POPIA)
For people in South Africa, Albion AI Solutions UK Ltd is the responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA). Our Information Officer can be reached at info@albionaisolutions.co.uk. Health details are special personal information, so we process them only with your consent, for the purpose of building the workout you ask for, and we collect only what the app asks for. We keep your information only as long as described above, and we protect it with encrypted connections and by not storing health details on our servers. Your information is processed outside South Africa (in the United Kingdom and the United States and wherever our providers operate); by agreeing in the app you consent to that transfer, and our providers are bound by their own privacy terms. You may ask to access, correct or delete your information, withdraw consent, or object to processing, and you may complain to the Information Regulator (South Africa): inforegulator.org.za.
United Arab Emirates, Philippines, Malaysia and Indonesia
These countries have their own data protection laws (the UAE Personal Data Protection Law, the Philippines Data Privacy Act of 2012, Malaysia's Personal Data Protection Act 2010, and Indonesia's Personal Data Protection Law). We follow the same approach everywhere: we ask for your explicit consent before using health information, use it only to build your workout, tell you where it goes, keep it only as long as needed, protect it, and let you access, correct, delete or withdraw it. Your information is processed outside your country, in the United Kingdom, the United States and wherever our providers operate, and by agreeing in the app you consent to that. You may also complain to your national data protection authority (for example the National Privacy Commission in the Philippines, privacy.gov.ph, or the Personal Data Protection Commissioner in Malaysia, pdp.gov.my).
Legal bases (UK and EEA)
We process this information to provide the service you request (performance of a contract), to keep it secure and prevent abuse (legitimate interests), and, for ads where required, with your consent. Where you enter health details, we rely on your explicit consent, given in the app and withdrawable at any time, for the purpose of creating your workout.
Security and transfers
Traffic between the app and our server is encrypted (HTTPS). Our AI, hosting, ads and subscription providers operate internationally, including in the United States and the United Kingdom, so your information is processed outside your country. Where the law requires it we ask for your consent in the app, and we rely on recognised transfer safeguards.
Children
RoomGym is not intended for anyone under 18, and we do not knowingly collect information from children.
Changes
If we change this policy we will update the date above and, for significant changes, tell you in the app.
Contact
RoomGym · Privacy policy · Health data policy · Terms of use · info@albionaisolutions.co.uk