GYMQR

Privacy Policy

Last updated: 22 June 2026

This Privacy Policy explains how INTELIGENCIA ARTIFICIAL LTD (“GYM QR”, “we”, “us”) collects, uses, and protects information when you use our website (gym-qr.com) and the GYM QR web application. We are the data controller for the purposes of the UK GDPR and the EU GDPR.

Who we are

INTELIGENCIA ARTIFICIAL LTD is a private limited company registered in England and Wales under company number 15667932, with its registered office at Highdown House, 11 Highdown Road, Leamington Spa, Warwickshire, England, CV31 1XT. If you have any questions about this policy or your data, contact us at hello@gym-qr.com.

We are the data controller for the personal data described in this policy. INTELIGENCIA ARTIFICIAL LTD is registered with the UK Information Commissioner’s Office (ICO) under registration reference ZC160001. You can verify this on the ICO’s public register at ico.org.uk.

Information we collect

  • Workout logs. When you scan a QR code and log a session, we store the session details you enter (such as machine, weight, reps, and sets). This can be saved anonymously, without an account.
  • Account information. If you choose to create an account, we collect the details you provide, such as your name, email address, and gym.
  • Gym registration. If you register a gym, we collect the contact and business details you submit.
  • Usage data. We collect privacy-friendly, aggregated analytics about how the site is used (for example pages viewed and general region). We do not use this to track individuals across other websites.

How we use your information

  • To provide and operate the GYM QR service.
  • To save your workout history so it is available next time.
  • To respond to enquiries and provide support.
  • To improve and secure the product.
  • To comply with our legal obligations.

Legal bases

We process personal data on the basis of your consent, our legitimate interests in operating and improving the service, and where necessary to perform a contract with you or to comply with the law.

Sharing your information

We do not sell your personal data. We share data only with service providers who help us run the service (such as hosting and analytics), and only as needed. Where required, these providers are bound by appropriate data-processing terms.

How we protect your data

We protect your personal and identifying information with more than one layer of encryption. Details such as your name, email address, phone number, the content of your messages and correspondence, and the contact and enquiry details you send us are individually encrypted at the application layer using AES-256-GCM before they are written to our database — in addition to the database itself being encrypted at rest.

So that we can still find your record when you sign in by email (or look you up by an exact detail) without exposing the underlying value, we use keyed one-way blind indexes rather than storing that information in plain text.

Passwords are never stored in a form we (or anyone else) can read back: they are one-way hashed with bcrypt, which cannot be reversed to reveal the original password.

Data is also encrypted in transit (over HTTPS) whenever it travels between your device and our servers.

Data retention

We keep personal data only for as long as necessary for the purposes described above or as required by law. You can ask us to delete your account data at any time.

Your rights

Subject to applicable law, you have the right to access, correct, delete, or restrict the use of your personal data, and to object to certain processing or request portability. To exercise any of these rights, contact hello@gym-qr.com. You also have the right to complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

Cookies and analytics

We set no analytics cookies. We measure site usage with Umami, which we host on our own server. It sets no cookies, does not track you across other sites, and does not build a profile of you. We removed Google Analytics in July 2026.

Our Cookie Policy lists every cookie and local storage item by name, with its purpose and duration, and explains how to clear them.

AI chat assistant

Our website includes an AI chat assistant. The messages you send are processed to generate a reply. For your convenience, your conversation is also stored locally on your own device (in your browser) so it is still there if you refresh or come back later. It is kept only on your device, you can clear it at any time using the “New chat” button in the chat, and it is automatically discarded after a period of inactivity. Please avoid sharing sensitive personal information in the chat.

International transfers

We operate in the UK and Spain. Where data is transferred outside your country, we take steps to ensure it is protected in line with applicable data protection law.

Children

GYM QR is not directed at children under 16. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The “last updated” date above shows when it was last revised.

Contact

INTELIGENCIA ARTIFICIAL LTD · hello@gym-qr.com