Privacy Policy

Last updated: August 25, 2026

App: Gym Anyway (とりあえずジム)

Operator: HOKKALON Inc.

Address: Kataoka Bldg. 3F, Minami 2 Nishi 3-13-4, Chuo-ku, Sapporo, Hokkaido, Japan

HOKKALON Inc. ("we", "us") respects the privacy of users of the mobile app "Gym Anyway" (Japanese name: とりあえずジム, the "App") and handles information according to this policy. The App requires no account registration and is local-first: your workout data is stored on your device and is not stored on our servers.

1. Information We Collect

Stored on your device: Workout logs (exercise, weight, reps, sets, date and time), plan structure, the gym you registered and its equipment, the answers you gave during onboarding (goal, training experience, weekly target, usual session length, target muscle mass, body parts to avoid), notification settings, display language, and other preferences. These are stored in a local database (SQLite) and the OS preference storage on your device, and are not sent to our servers.
Sent for subscription verification: When you use paid features, the anonymous app user ID issued by RevenueCat, the platform (e.g. iOS), the app version, and the display language code are sent to our Cloudflare Workers API (api.gymanyway.hokkapp.com). No name, email address, or phone number is included.
Sent when loading form videos: When a form video or step-by-step instructions are shown, the exercise ID (an identifier we assign) is sent to our API, which then retrieves the video URL and instructions from MuscleWiki.
Purchase information: When you purchase a subscription, the App Store and RevenueCat process the receipt and subscription status. We only read the entitlement status (active / inactive) and an anonymous ID; we never receive your credit card details.
Usage analytics: To improve the App, we may collect anonymous usage events (screen views, feature usage, workout start and completion, errors) via Mixpanel. No name, email address, or contact information is sent.
Crash and error reports: If the App crashes, we collect crash reports (location in the code, device model, OS version, app version) via Sentry to investigate the cause. The content of your workout logs is not sent.
Automatically collected: When our API is accessed, Cloudflare temporarily records the IP address and access time for rate limiting and abuse prevention.

2. Purpose of Use

Providing, operating, and improving the App (plan generation, exercise swapping, form videos, workout summaries)
Subscription billing and purchase restoration (via the App Store / RevenueCat)
Detecting and preventing abuse and API misuse
Investigating and fixing defects, and responding to support requests
Improving service quality through aggregate usage analysis

3. Third-Party Services

The App uses the following third-party services. Each service's own privacy policy applies.

Cloudflare (Workers / D1 / KV): API delivery, rate limiting, edge computing, hosting of this website
MuscleWiki: Exercise data and form videos
RevenueCat: Subscription management and entitlement checks
Apple App Store: App distribution and billing
Mixpanel: Anonymous usage analytics
Sentry: Crash and error reporting

4. Retention and Deletion

On-device data: Deleted entirely when you uninstall the App.
API logs: We do not permanently store request bodies on the server. Short-lived operational logs are deleted within 30 days.
Purchase information: Retained by the store and RevenueCat to the extent required by law (accounting and tax).

5. Your Rights

If you would like your data disclosed, corrected, or deleted, contact y-ishiba@hokkalon.com. You can delete on-device data yourself at any time by uninstalling the App.

6. Security

API traffic is encrypted with TLS. Our API implements rate limiting and signed session token authentication to help prevent abuse.

7. International Transfers

The servers of Cloudflare, RevenueCat, Mixpanel, Sentry, and MuscleWiki used by the App are located outside Japan (primarily in the United States). Using the App may cause the information described above to be sent to those servers. Appropriate safeguards are in place at the destinations.

8. Children's Privacy

The App is not directed at children under 13. Minors should use the App with the consent of a parent or guardian.

9. Changes to This Policy

We may update this policy as needed. Material changes will be announced in the App or on this page.

10. Contact

Questions about this policy can be sent to y-ishiba@hokkalon.com.