Privacy Policy
Effective October 6, 2026
Ganba keeps most of what it knows about you on your phone. What reaches our server is what your pod and the people you share with need to see: whether you exercised today, your streak, and a few details about the day.
No ads, no tracking, and no third-party analytics or crash-reporting services. We don't sell or rent your data. Questions: hello@ganba.fit.
Apple Health
Ganba reads workouts, exercise minutes, active energy, steps, heart rate and sleep from Apple Health, and saves the workouts you start or log in Ganba back to it. Your Health data is read and worked out on your phone. Only these results reach our server:
- whether you met today's goal, your streak, and which past days you met or rested
- a short heart-effort summary for the day: peak heart rate while moving, and minutes of elevated and sustained effort
- that you're exercising right now, and since when
- how many workouts you did today and their total minutes
Raw heart-rate samples, sleep, steps and other Health records are not sent to us. Health data is never used for advertising.
What our server keeps
- An anonymous ID for your phone, made up of random characters, with a secret that proves the ID is yours. It is stored in your phone's Keychain, so reinstalling Ganba reconnects you.
- The name you choose to show to others, and your time zone.
- Your day: the results listed under Apple Health above, today's and tomorrow's planned workout, and whether your apps are blocked right now.
- What you choose to share: body parts you're working around after an injury, and that you're resting (sick, injured, travelling, or life got in the way).
- People: your pods (name, members and settings), setups you make for someone or join, supporters you invite, and the waves, nudges, high-fives and get-well messages you send.
- Unblock requests: when you ask a friend to unblock you, the names of the tasks you had left, and who approved it.
- A push notification token, so we can send you notifications, and your notification preferences.
- Feedback you send from the app: your message, app and iOS version, device model, language and time zone. For a deletion request, also your phone's ID.
- How first-time setup went: when each setup screen appeared, what you chose on it (for example, whether you turned on notifications), and how long it took until app blocking was on, with your app build and iOS version. This record has its own random ID and isn't linked to your phone's ID or to anything else we keep.
Ganba doesn't ask for your email address, phone number, date of birth or location.
Who can see what
- Your pod sees your name, time zone, whether you've exercised today, your streak and recent days, your plan, your heart-effort summary, and that you're working around an injury or resting.
- A supporter you invite sees either your name and streak only, or your day as your pod sees it. You choose which when you invite them.
- People in a setup (someone who set Ganba up for you, or whom you set it up for) see that person's day the same way. They may also get a notification when that person starts exercising or rests.
- A friend you ask to unblock you sees your reason and the tasks you had left.
Stays on your phone
These never reach our server:
- the apps you choose to block (Apple's Screen Time keeps that selection on your device)
- phone numbers and voice notes for text nudges, which you send yourself through Messages
- contact photos you pick for people's avatars
- your calendar, location, and step-by-step motion
Other services
- Apple delivers notifications (Apple Push Notification service, which sees the notification text, including names). It syncs your blocking status between your own devices through your private iCloud. It provides weather through WeatherKit, which uses your location.
- YouTube serves the exercise demo thumbnails, so your device requests them from YouTube directly.
- AI providers, only if you add your own key. If you enter your own OpenAI, Anthropic or Google API key in settings, the titles of your tasks are sent to that provider under your account and its terms. Nothing is sent without a key.
- A home router running Ganba's gate, if you set one up, gets your phone's ID and blocking status over your home network.
- Our server is hosted by DreamHost. Traffic may pass through Cloudflare.
Logs
Like any website, our host records each request's IP address and time in server logs. Ganba adds a short coded tag for your phone, never your phone's ID itself. These logs are deleted after about a week. They are used to keep the service running and to fix problems.
How long we keep it
We keep your data while you use Ganba, and delete it when you ask (below). Server backups are deleted after 30 days.
Deleting your data
In Ganba, go to You → Delete my data, or email hello@ganba.fit with your name and a pod or setup you're in. Within 30 days we delete everything our server holds for your phone:
- your status, streak and history, including heart-effort, injury and sick notes
- your pods and the setups you made or joined
- supporter links in both directions
- the waves, high-fives and get-well messages you sent
- feedback you sent from the app
Sharing you set up, or that was set up for you, ends for everyone in it.
Deleting the app alone doesn't delete this data, because the anonymous ID in your Keychain lets a reinstall reconnect. After we delete your data, a reinstall starts fresh.
Some things we can't delete:
- workouts Ganba saved to Apple Health, which you manage in the Health app
- what's already on other people's phones, such as a notification they received
- server logs, which expire within about a week
- backups, which expire within 30 days
- the first-time setup record, which has no link to your phone, so we can't find it
Children
Ganba isn't meant for children under 13, and we don't knowingly collect their data. If you think a child under 13 is using Ganba, email us and we'll delete their data.
Changes
If this policy changes, we'll update it here and change the date at the top. For a change that affects what we share, we'll also tell you in the app.