Privacy Policy

BananaGym for Android. Effective 4 September 2026.

BananaGym is a private training app for adults. Because of what it does, the information you enter into it is about your body and your sex life, which is among the most sensitive data there is. This policy explains exactly what the app stores, where, why, and how you can delete it. It is written to be read, not skimmed. If anything is unclear, contact us at the address at the end.

1. Who is responsible

The data controller is [OPERATOR LEGAL NAME], [postal address], reachable at [CONTACT EMAIL] ("we", "us"). The app is published under the name BananaGym.

2. Who may use the app

BananaGym is only for people aged 18 or older. The app asks you to confirm this before it can be used. We do not knowingly collect data from anyone under 18; if we learn that we have, we delete the account and its data. See section 8 for how deletion works.

3. Two ways to use the app: guest or account

Guest mode

You can use every training feature without creating an account. In guest mode everything you enter stays in the app's private storage on your device. Nothing is sent to us or to any server. If you uninstall the app or erase your data from Settings, it is gone and cannot be recovered. We have no copy.

Account mode

If you create an account, the records listed in section 4 as "synced" are copied to a cloud database so that they survive a lost phone and can be restored on a new one. Only you can read your records; see section 7.

4. What data the app handles

Data	Where it is stored	Why
Account details: your email address and a random user ID. If you sign in with Google, also the name and profile picture URL that Google shares with us.	Google Firebase Authentication (cloud). Not stored in guest mode.	To sign you in and to link your synced records to you.
Measurements you record: penis length (bone-pressed and non-bone-pressed), girth, an erection-quality score, the date, and any notes you type.	On your device. Synced to the cloud in account mode.	To show your progress over time.
Daily check-ins: erection-quality and libido ratings, whether you had a morning erection, the date, and any notes.	On your device. Synced in account mode.	To show health trends.
Exercise logs: which exercise or routine you did, when, for how long, repetitions, the goal it belongs to, and notes.	On your device. Synced in account mode.	To keep your history and unlock levels.
Training progress: which lessons and levels you have completed and when.	On your device. Synced in account mode.	To resume where you left off.
Consistency tracker entries: the dates you record a reset in the optional pornography-use tracker, and the reason you type in.	On your device. Synced in account mode.	Only if you choose to use that feature.
Profile and settings: age band, goals, experience level, training frequency and session length, baseline and target measurements, unit system, reminder time, and notification preference.	On your device only, even in account mode.	To personalise your plan and schedule reminders.

Measurements, check-ins, exercise logs, and tracker entries are data concerning your health and sex life. Under EU law this is "special category" data and we process it only with your explicit consent. You give that consent when you accept these terms while creating an account or starting as a guest, and you can withdraw it at any time by erasing your data (section 8).

5. What the app does not collect

No advertising identifiers, no ads, and no advertising networks.
No analytics or crash-reporting SDKs. We do not track how you use the app.
No location, contacts, photos, camera, or microphone access. The app requests only the notification permission, and only if you turn reminders on.
No sale or sharing of your data for marketing, ever.

Google Firebase, which provides sign-in and the cloud database, records technical details such as your IP address and the time of each sign-in for security and abuse prevention. That processing is described in Google's Firebase privacy documentation.

6. Why we process your data and on what legal basis

Providing the app you asked for (contract): storing your records, syncing and restoring them, and sending the reminders you set.
Your explicit consent for the health and sex-life data listed in section 4. Without it the app cannot do its job.
Security (legitimate interest): keeping accounts safe and preventing abuse of the service.
Legal obligations, for example responding to a lawful request from an authority.

We do not use your data to make automated decisions with legal or similarly significant effects, and we do not build profiles for marketing.

7. Who can see your data

Only you. Cloud records are stored under your user ID, and the database rules allow a record to be read or written only by the signed-in account that owns it. Our staff do not look at individual records except to resolve a support request you have made, or when the law requires it.

We use these service providers, which process data on our behalf under contract:

Google LLC, Firebase Authentication: sign-in with email and password or with a Google account.
Google LLC, Cloud Firestore: the cloud database that holds synced records.

Google may store this data on servers outside the European Economic Area. Transfers are covered by Google's data processing terms and the European Commission's standard contractual clauses. We do not share your data with anyone else, and we will never sell it.

8. Your control: viewing, exporting, and deleting

Delete everything. Settings > "Delete account and data" removes your account and every synced record, then wipes the device. Guests use Settings > "Erase all my data". Both are immediate and cannot be undone.
Sign out. Signing out removes your records from the device while keeping them in your account, so a shared phone does not expose them.
Access, correction, and export. Your records are visible and editable inside the app. To receive a copy in a machine-readable format, or to have us correct or delete something you cannot reach in the app, email us. We answer within one month.
Withdraw consent at any time by deleting your data as above. This does not affect processing that happened before.
Complain. If you are in the EU you may complain to your national data protection authority. In Greece that is the Hellenic Data Protection Authority, dpa.gr.

9. How long we keep data

Synced records and your account: until you delete them. We do not keep backups of deleted records beyond the short window our provider needs to complete the deletion.
Data on your device: until you erase it, uninstall the app, or sign out.
Sign-in and security logs kept by Firebase: for the period Google specifies in its documentation.
Support emails: up to two years, so we can follow up.

10. Security

Data travels between the app and Google's servers over encrypted connections. Cloud records are protected by per-user access rules. Data on the device sits in the app's private storage, which other apps cannot read. Because the app contains intimate information, we recommend a screen lock on your phone and a strong, unique password if you create an account.

11. Changes to this policy

If we change what we collect or how we use it, we will update this page, change the date at the top, and tell you in the app before the change applies. Older versions are available on request.

12. Contact

Questions or requests about your data: [CONTACT EMAIL].