No Pain No GainPrivacy Policy
Effective September 27, 2026 · Updated November 3, 2026
No Pain No Gain ("the app") is a workout tracker made by Lightning Studio LLC ("we", "us"). We are responsible for the personal data described here (the data controller under the GDPR). The app works fully on your device without an account. This policy explains what leaves your device, why, and how to remove it.
Summary
| Data | When it leaves your device | Why |
|---|---|---|
| Workouts, plans, body metrics, settings | Only if you sign in (sync and backup) | To sync across your devices |
| Start and end time of each finished workout (nothing else about it) | When the app collects free Sparks (the welcome gift, levels, badges), with or without an account | To check the Sparks were earned by training |
| Email address | Only if you sign in with email, Apple or Google | To identify your account and send sign-in codes |
| Purchase records | When you buy Pro or Sparks | To verify purchases with Apple or Google and unlock features |
| Advertising identifier and ad interactions | Free tier, when an ad is requested (with consent where required) | To show ads through Google AdMob |
| App usage events and crash reports | While you use the app (you can opt out) | To fix bugs and improve the app (Firebase Analytics, Sentry) |
| AI requests | Only when you use an AI feature | To generate replies and plans (processed by OpenAI) |
| Voice clips | Only when you hold the mic to log a set by voice (Pro) | To turn speech into text (processed by OpenAI); not stored |
| Website visit logs (page, time, the site you came from, browser, country, IP address) | When you visit nopainnogainapp.com in a browser (not when you use the app) | To count visits as anonymous daily totals and keep the website secure; deleted after 3 days |
| Apple Health / Health Connect data | Never | Stays on your device |
Health data
If you connect Apple Health or Health Connect, the app writes your finished workouts there and may read your body weight, steps and workouts from other apps to show your weight trend and weekly activity. Health data is never sent to our servers, advertisers, analytics providers or AI providers, and is never used for advertising.
AI features
When you use the AI coach, AI plans or other AI features, the app sends a short summary of your goals, plan and recent training (never Health data) and your message to our server, which forwards it to OpenAI to produce a reply. If "Use my profile to personalize AI" is on (the default; Settings → About you), the summary also includes the age, sex, height and weight you entered there. Turn it off to leave them out. OpenAI does not use API data to train its models. We keep a record of usage (time, feature, cost) for up to 180 days, not the conversation. Your chat history stays on your device.
Voice logging records a short clip (up to 20 seconds) only while you hold the mic button. The clip goes to our server and to OpenAI to be turned into text, then is discarded; we keep only its length for the usage record.
Advertising
The free version shows ads from Google AdMob. In the EEA, UK and Switzerland we ask for consent before personalized ads; on iOS we ask for tracking permission. If you decline, you may still see non-personalized ads. Pro removes ads. See how Google uses data from apps.
Exercise videos
Some exercises have a demonstration video from YouTube. The app uses YouTube API Services (YouTube's embedded player) for these. A video loads only when you tap "Watch demo", in YouTube's privacy-enhanced mode (youtube-nocookie.com). Once it plays, YouTube receives your IP address and device information, may store cookies or similar data on your device, and may show its own content, as for any video you watch on YouTube. Nothing about your workouts, health or account is sent. See the Google Privacy Policy; by watching you also agree to the YouTube Terms of Service. Questions or complaints: see Contact below.
Website visits
This section is about visiting nopainnogainapp.com in a browser, not about the app. The website doesn't use cookies, tracking scripts or third-party analytics. To learn how many people visit and which pages they read, and to keep the website secure, we count visits from its access logs. Our hosting provider, Amazon Web Services, writes a log entry each time your browser loads a page or file from the website: the page, the time, the site you came from, your browser's name and version, your country and your IP address.
A program turns these entries into anonymous daily totals, such as views per page, visits per country, the sites visitors came from, and the browsers and devices they use. To count each visitor once a day, it uses a scrambled, one-way version of your IP address and browser (a hash with a key that changes every day), which it deletes after 2 days. All invite links (/invite/…) count as one page, so invite codes never end up in the totals. The logs themselves are deleted after 3 days. We keep only the totals, which can't identify you.
Service providers
Amazon Web Services (hosting, United States), Google (Firebase Analytics, Firebase Cloud Messaging, AdMob, Google Play, YouTube for exercise videos you choose to watch), Apple (App Store, Sign in with Apple, push notifications), OpenAI (AI features), Sentry (crash reports). They process data only to provide their service to us.
Retention
Account data is kept while your account exists. Deleting your account removes it from our servers immediately and from backups within 35 days. Purchase records may be kept as long as tax law requires. Website access logs are deleted after 3 days; we keep only the anonymous visit totals.
Your choices and rights
- Use the app without an account; nothing about your workouts leaves your device except each finished workout's start and end time, to check free Sparks.
- Export your data: You → Account → Export.
- Delete your account in the app (You → Account → Delete account) or at nopainnogainapp.com/delete-account.
- Turn off analytics in Settings → Privacy, and change ad consent there at any time.
- Depending on where you live (for example the EU/UK under GDPR, or California under CCPA/CPRA), you can access, correct, delete or port your data and object to processing. We do not sell personal information.
Children
The app is not directed to children under 13 (under 16 in the EEA), and we do not knowingly collect their data.
Security
Data is encrypted in transit (TLS) and at rest. Sign-in uses short-lived tokens; codes and refresh tokens are stored only as hashes.
Changes and contact
We will post changes here and update the date above. Questions or requests about your data: Lightning Studio LLC (Florida, USA), privacy@nopainnogainapp.com.