Effective date: 1 August 2026 · Last updated: 13 October 2026
Who we are. GymFocus is made and published by Sksecurity Sebastian Kubas (NIP 9512522226), registered in Poland and trading as Ankervik, an independent digital product studio. "Ankervik" and "Sksecurity Sebastian Kubas" are the same business - you will see the brand name in the app and the registered name on legal documents.
Data controller: Sksecurity Sebastian Kubas, ul. Kłobucka 23D lok. 68, 02-699 Warszawa, Poland
Contact: privacy@ankervik.com · +48 515 359 610
GymFocus is a rest timer for strength training. It times the rest between your sets and alerts you when the rest runs long.
The short version: your workouts stay on your phone. The app has no user accounts, no cloud sync and no analytics. We cannot see your training data, because it never reaches us. Our website, gymfocus.ankervik.com, uses Google Analytics only with your consent (in the United States, until you opt out) - see section 7.
All of the following is stored only in the app's private storage on your phone, and is never transmitted to us or anyone else:
Deleting the app deletes all of it. There is no copy anywhere else, and no way for us to restore it. You can also delete individual workouts from the History screen.
| Permission | Why | Optional? |
|---|---|---|
| Notifications | Showing the rest timer and the alert when rest runs long. This is the product. | Yes, but the app cannot alert you without it |
| Foreground service (special use) | Keeping the timer accurate while your screen is off during a set. Android requires this to run a timer reliably in the background. | No - core function |
| Vibration | Haptic alerts. | Yes (choose a quieter alert mode) |
| Motion sensors (high sampling rate) | Detecting whether the phone is being held and moved, to tell "doing a set" from "scrolling". Processed on your device, in memory. | Yes - only used by Smart mode |
| Display over other apps | The floating capsule with the timer, if you keep your screen on. | Yes - only for Overlay mode |
| Ignore battery optimisation | Asking Android not to kill the timer mid-workout. We only ask; you decide. | Yes |
| Usage access | See section 3. | Yes - only used by Smart mode |
| Network state | Letting crash reports (section 5) upload once you are back online. It tells us whether you have a connection, never what you do with it. | No, but it carries no data of yours |
You can revoke any of these in Android settings at any time. The app keeps working; the features that depend on them stop.
If you turn on Smart mode, GymFocus asks for usage access. This lets it see which app is currently in the foreground on your phone.
We use it for exactly one thing: telling whether you are distracted. The app looks up the package name of the foreground app, sorts it into a category (your own app, a fitness app, a system screen, or something else), and feeds that into a score that decides whether your rest has effectively turned into scrolling.
What we do not do with it:
Smart mode is optional. The other two detection modes (screen detection and overlay) do not use usage access at all. Revoking usage access disables Smart mode and nothing else.
Settings contains an opt-in diagnostics switch, off unless you turn it on. It exists so you can help us debug a detection problem.
When enabled, the app writes CSV files into its own private storage containing:
com.instagram.android).That last item is the sensitive one, so read this carefully: if you choose to share a diagnostics file with us, you are sharing a record of which apps you opened during that workout. Only share it if you are comfortable with that.
To find and fix crashes, the app uses Sentry (Functional Software, Inc.) as a data processor, on Sentry's EU infrastructure.
When the app crashes, Sentry receives: the technical stack trace, your device model, Android version, app version, and a short trail of preceding in-app events. It does not receive your workouts, your rest times, your app usage, or any identifier we could tie back to you as a person; personally identifying data collection is switched off in our configuration.
Payments are handled entirely by Google Play. We never see your card, address or billing details. The app only receives from Google whether an active subscription exists, and stores that answer on your device so the paid features keep working offline.
We do not know which plan you bought - the Play client does not tell us, and we deliberately do not guess.
The free plan shows ads supplied by Google AdMob. What that means:
How Google processes ad data: https://policies.google.com/technologies/partner-sites
If - and only if - you type a promo code and tap Redeem, the app contacts our own service at gymfocus.ankervik.com. Nothing is sent before that, and nothing is sent again afterwards except an occasional check of whether the code is still valid.
What is sent: the code itself, a random installation identifier generated on your device, a timestamp, the app version, and a Google Play Integrity token. That token is issued by Google and tells us whether the app is a genuine, unmodified copy installed from Google Play. We store only its pass/fail result, never its contents.
What is not sent: anything about your training. No rest times, no sets, no streaks, no app usage, no diagnostics.
The installation identifier is a random value created on your device. It is not your advertising ID, not a device serial, and not derived from any hardware identifier. It exists so a code can only be redeemed once, and so we can stop someone farming a leaked batch. It cannot be linked to you by us or by anyone else.
Where and for how long: the service runs on Cloudflare (Workers and D1) under a data processing agreement; data may be processed outside the EEA under Standard Contractual Clauses. Redemption records are kept while the code is active and for 24 months afterwards, then the installation identifier is removed and only an anonymous counter remains. Your IP address is never written to our database - it is used in memory for rate limiting and then discarded.
Legal basis: performance of a contract (Art. 6(1)(b)) for the redemption record itself, and legitimate interest (Art. 6(1)(f)) for the abuse counters and the integrity result.
Deleting it: open Settings -> About -> Installation ID, tap to copy it, and send it to privacy@ankervik.com. We cannot find your record without it - a random identifier tells us nothing about who you are, which is exactly the point.
The website and the app are separate. Nothing you do on the website is linked to the app or to your training data, and the app itself does not use Google Analytics.
We use Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to see how visitors use this website: which pages and sections they view, which language they read it in, and which "Google Play" button they tap. It tells us which parts of the page actually help people decide.
_ga and _ga_GJSMLW7E4P, your IP address (which Google uses to estimate your approximate location and does not store), your browser and device type, the pages you view, the address of the page you came from, and the button taps described above. Google signals and advertising features are switched off, and this data is not used for advertising._ga and _ga_GJSMLW7E4P expire after 2 years. They are set only for gymfocus.ankervik.com, not for other ankervik.com sites.How Google uses data from sites that use its services: https://policies.google.com/technologies/partner-sites
Changing your mind: use Cookie settings at the bottom of any page. If you withdraw consent, we delete the Google Analytics cookies from this site and stop loading it. You can also block Google Analytics on every website with Google's browser add-on: https://tools.google.com/dlpage/gaoptout
Two small settings are kept in your browser's local storage. They are not cookies and are never sent to us: your cookie choice (gymfocus-consent) and, if you switch it, the website language (gymfocus-language). Clearing your browser data removes them.
The website is hosted on Cloudflare (Cloudflare, Inc.), acting as our processor. Like any web server, Cloudflare handles technical data such as your IP address, browser type and the address you request, to deliver the pages and protect them from abuse. This is our legitimate interest (Art. 6(1)(f) GDPR). Data may be processed outside the EEA under Standard Contractual Clauses. We do not use it to identify or profile visitors.
Under the GDPR you have the right to access, rectify, erase, restrict and object to processing of your personal data, and to data portability.
In practice, for GymFocus:
_ga cookie, we will delete the data linked to it in Google Analytics.If you believe we handle your data unlawfully, you may lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa.
GymFocus is not directed at children. It is intended for people who train in a gym, and we do not knowingly process data of children under 16.
If we add anything that changes how data is handled - crash reporting, ads, purchases, sync - we will update this policy and its effective date before shipping that change. The current version always lives at https://gymfocus.ankervik.com/privacy/.
Questions about this policy: privacy@ankervik.com