openGym is an open-source, self-hosted fitness and body-weight tracker designed for people who want complete control over their workout data. Instead of storing training history on a third-party service, it runs on your own server and keeps your data in files you control.
The application combines workout planning, guided training, body-weight tracking, statistics, muscle analysis, and cross-device synchronization in a web application that can also be installed as a Progressive Web App.
Features
openGym provides a weekly workout planner with routines organized by day. Users can create and modify training sessions, move workouts between days, and choose from predefined workout plans such as Push/Pull/Legs, Upper/Lower, Full Body, and 5×5.
The exercise library contains more than 1,300 exercises with animated demonstrations. Exercises can be searched, browsed by muscle group, and filtered according to available equipment.
During workouts, the application supports regular sets, supersets, warm-ups, cardio, rest timers, and exercise tracking. It records training history and provides statistics including personal records and progress charts.
Muscle analysis is another notable feature. openGym can show which muscles are being trained, fatigued, or detrained, helping users understand how their training volume is distributed over time.
The application can import workout history from services and applications including FitNotes, Strong, and Hevy. This makes switching to a self-hosted system considerably easier for existing users.
Authentication uses passkeys, while the application can operate offline and synchronize data when connectivity returns. The synchronization system uses revisions to prevent one device from silently overwriting changes made by another device.
Download openGym APK v1.4.2 - Software Mirrors |
|---|
openGym APK v1.4.2 for AndroidopenGym-Plus-1.4.2.apk | 404.4 MB openGym-HD-1.4.2.apk | 724.19 MB openGym-1.4.2.apk | 300.16 MB |
openGym APK v1.4.2 Source Code
openGym APK v1.4.2 Source code (zip)
openGym APK v1.4.2 Source code (tar.gz)
|
openGym APK v1.4.2 Release Notes:
openGym comes to the App Store, with an Apple Watch app in tow. Plus everything you asked for
since v1.4.1, five reported security holes closed and a fresh look at the animations.
openGym on the iPhone. The App Store app is the same openGym: use it on the phone alone, or
connect it to your own server. Your data stays where it is (no account with us, nothing collected).
Get it on the App Store: https://apps.apple.com/app/id6822275400
- Apple Watch. Start a workout on the wrist, or on the phone and the watch app opens with it,
then tick off sets with a big Done button and the Digital Crown for reps and weight. Rest is a
full-screen countdown with +15 s and Skip, holds count down, sides say Left or Right, supersets
go in turns. Heart rate per set, a summary at the end, a Smart Stack widget and complications
for your watch face. It speaks the app's language, asks for a weigh-in at the start if you like,
makes weights quick to change, and you pick what the set screen shows. No phone in reach? Your
ticks wait on the watch and catch up later.
- Widgets and a Live Activity. Today's workout on the Home Screen and the Lock Screen, your
streak too. A running workout sits on the Lock Screen and in the Dynamic Island, with a Done
button that logs the set and starts the rest without opening the app.
- Apple Health. Finished workouts and weigh-ins go to Apple Health, the same switch Android
has for Health Connect, offered once at the start. Delete a workout in openGym (on any of your
devices) and it leaves Apple Health too.
- Sharper animations, your choice. Settings → Workout → Animation quality: Still only, built in
(180 px), or 240, 360, 480, 720 and 1080 px, downloaded from the App Store when you pick them.
Auto takes 360 on a phone and 720 on an iPad, over Wi-Fi. Female and male figures download
separately, so you only get the one you use.
- No more boxes. The animations in the app showed faint rectangles around the moving parts.
They are re-made from the original files, frame by frame, and look like the originals now. The
APKs get the same fix (180, 240 or 360 px built in, see Android below).
- Swipe from the left edge to go back, with the page you came from sliding in underneath.
- Notifications are asked for at the start, not in the middle of your first rest.
- The Vibrate switch works on the iPhone, and a server or Coach on your home network works over
plain http, like on Android (#428).
- A logo instead of a black screen while the app starts, loading its plates.
Android. The app now targets Android 16 and needs Android 7.0 or newer (6.0 is out). The APK
you know stays and updates itself, now in three sizes: Standard (openGym-1.4.2.apk,
animations built in at 180 px, the small one), Plus (openGym-Plus-1.4.2.apk, 240 px) and
HD (openGym-HD-1.4.2.apk, 360 px, sharp and hungry). Each one updates to its own kind, so
nobody gets a surprise download twice the size. Phones on v1.4.1 update to Standard; want Plus or
HD? Install it on top, your data stays (same goes for going back). A Google Play version is ready for the store too: it updates through Play and gets
the sharper animations as Play downloads, like the iPhone, and an APK phone can move to it later
without losing anything.
Your account, your call.
- Delete your account from Settings → Account. It offers your backup first, asks you to type
your name, and then a passkey or password (on the phone: Face ID, Touch ID or the passcode).
The server's last admin hears straight away why they can't, instead of after all that.
- The Coach asks before anything leaves. The first time the Coach would send your training to
an AI service, it says which one and what goes there. You can take it back in the Coach menu.
A model on your home network doesn't ask; it's yours.
- Sign in on a computer from the phone app (#551): Settings → Account → Add another device
makes the same one-time code a browser does.
Reminders that know you trained. Logged a workout on another device? Before the missed-day
nudge goes out, the phone checks with your server and keeps quiet. (On the iPhone, iOS decides
when the app may check in the background; opening the app always catches up.)
Your data, safer
- A running workout is saved the moment it changes and again when the app goes to the background,
so a crash or a dead battery costs you nothing.
- Taps from the watch or the Lock Screen wait until your saved data is loaded, and offline changes
count as sent only once they're safely on disk. Saving swaps the file in one go, never half.
- Importing a backup without an account now offers "Merge them in" instead of wiping what's there.
In the workout
- Backups for an exercise (Discord): in the routine editor, up to five exercises to do instead
when the machine is taken. A swap lists them first.
- Rest between warm-ups (Discord): Settings → Workout sets it for every exercise (no timer,
or a time of its own). One exercise can still do its own thing, and get a rest between sides.
- Your bars (Discord): Settings → Equipment sets your bar weight once per bar type, say the
15 kg women's Olympic bar, and every exercise on it loads plates from that. The plate editor
gets quick picks (20/15/10/7.5 kg, 45/35/25/15 lb).
- Skip finished exercises in Cards and Focus, a new switch next to Collapse completed (#523).
- Timed exercises move on by themselves: when the last rest after a plank runs out, the next
exercise comes up (#532).
- Per-side sets can be warm-ups and back again (#575).
- Bodyweight exercises stop asking for a weight step (#583).
- Change plates of 2, 1.5 and 1 kg, and 1 and 0.5 lb, for gyms that stock them (#510).
Small things
- Progress photos for any day, several at once, each on the day it was taken (#557), and a
photo can be removed from the gallery, with Undo (#558).
- Muscle balance: tap an untrained muscle to see its exercises (#553), and the Week view lines
up. The status bar no longer covers the page on more Android phones (#573).
- The Coach's questionnaire has a clearer days screen and the same time wheels for session length.
- The Coach's message box grows with your text and opens into a tall editor for long ones. A
reload on the intake no longer sends you home, and dates follow your day, not UTC's.
- The Undo after a delete has an × to send it away, on the far side from Undo.
- Day notes (sick, travelling...) show icon and word on one line.
- The swipe hint no longer swallows a quick tap on the first set (found by the new iPhone tests).
- The pairing code field no longer hides behind the keyboard on iPhone.
From the community (thanks!)
- Body weight for an earlier day, like measurements (#570, @smist37).
- Warm-ups on assisted machines ramp down from more help (#581, @lntvan166).
- Effort stats average the whole training, and your logged RIR tunes the anchor (#539, @sg41).
- 15 rowing exercises stop counting as chest and triceps (#503, @sg41).
- German exercise texts (#578, @ThatsMeGIT).
- A shared plan keeps a superset's name and rest (#564, @pawell67).
- Push reminders show the routine's emoji (#548, @mzspicoli).
- The swap icon shows on picker rows (#579, @Totopo27).
.env.example: CF_CONNECTING_IP quoted so Compose keeps it (#565, @APN-Carmine).
- Skip finished exercises, the change plates and the untrained-muscle shortcut were first sent as
pull requests by @anshuman83-40 (#526, #530) and @tfdmendes (#543). The CLA wasn't signed yet,
so we built our own take for this release, but the ideas are theirs. Thank you!
Security. Five private reports, all fixed, plus our own audit. Thanks to Boris Kurktchiev
for the reports, each with a patch and a test. Self-hosters: please update.
- A crafted link could send your sign-in to another server (GHSA-375x-wfvj-jf7q). A link to
your own instance with an odd path made the app talk to a host named in that path. It can't
leave your instance any more.
- Another site could sign you into its account (GHSA-48ff-v63h-99xr). The passkey sign-in
routes now check where a request comes from like every other route, and the API only takes JSON.
- Push notifications could be taken over by someone who knew your device's push address
(GHSA-568g-hg5j-h53q). The address now only moves to another account with its own keys.
- The Coach's sandbox check was skipped on the admin's test button, the status card and jobs
queued before a provider switch (GHSA-w724-p4hx-jfv9).
- One profile could slow the server down for everyone with a huge queue (GHSA-69j8-85pp-mf8j),
or with many accounts and large saved states. The reminder check now reads a state only when a
reminder could actually go out.
- Rest timers and test pushes are limited per account, disabled accounts get no reminders and no
Coach reviews, and signing up with someone's e-mail as the name counts against your address
like the e-mail field does.
- A browser's sign-in cookie can no longer be turned into a phone token that renews forever.
- Deleting your account from a paired phone only skips the passkey for a real phone sign-in, not
for a browser session sent along as one.
- Push addresses that hide a private IPv4 address inside an IPv6 one are refused like the plain
ones.
- The Coach forgets a stored API key when its server address moves to another host. Enter it again.
- Request paths the server would have to tidy up (
.., backslashes) are refused, nginx stops
naming its version, and Android backups no longer include the paired server's sign-in.
- One owner, many admins. Any admin could delete every other admin and then clear the activity
log. Now one admin is the owner: only they make or remove admins, delete an admin, clear the log
or hand the role on (Admin, tap a user). Existing instances: the oldest admin is the owner.
- The web container sends a real Content-Security-Policy. Scripts only run from your own
instance, so an injected one does nothing. If your proxy adds analytics, see
CONTENT_SECURITY_POLICY in docs/SELF_HOSTING.md.
|
Performance and Compatibility
openGym is designed primarily as a self-hosted web application, but it also provides an Android application and can be installed as a PWA. The Docker deployment supports both AMD64 and ARM64, making it suitable for conventional servers as well as ARM-based systems.
The deployment architecture is relatively lightweight. The API uses Node.js, while the frontend is served through nginx. User data is stored under the application's data directory, including profiles, workout state, settings, and the session signing key. This makes backups straightforward because backing up the data directory effectively backs up the application data.
Offline functionality is particularly useful for a fitness tracker because workouts can continue even when the phone temporarily loses connectivity. Changes that have not reached the server are retained, and the application indicates when it is operating offline.
There are some important self-hosting considerations. Passkey authentication requires a properly configured HTTPS origin when accessing the application from a phone. The project provides guides for Cloudflare Tunnel, Caddy, Traefik, nginx, LAN HTTPS, and Kubernetes deployments.
The exercise media also deserves attention. The application downloads the exercise images and animations from an upstream dataset rather than redistributing them directly. The repository explicitly notes that the media has separate third-party licensing considerations and should not automatically be treated as covered by openGym's AGPL license.
System Requirements
Docker with Docker Compose for the recommended self-hosted deployment
AMD64 or ARM64 system for the provided container images
Persistent storage for application data and exercise media
HTTPS and a suitable domain when using passkeys from external devices
Android device for the native Android application
Modern web browser for the web/PWA interface
Pros and Cons
Pros
Open-source and self-hosted
Your workout data stays under your control
No subscription
No advertising
No required third-party account
Passkey authentication
Offline workout support
Cross-device synchronization
Progressive Web App support
Android application
Extensive exercise library
Animated exercise demonstrations
Workout planning and guided sessions
Supersets, warm-ups, and cardio tracking
Body-weight tracking
Muscle fatigue and detraining analysis
Personal records and statistics
Imports from FitNotes, Strong, and Hevy
Docker deployment
AMD64 and ARM64 container images
Kubernetes deployment support
Cons
Self-hosting requires some technical knowledge
HTTPS configuration is necessary for convenient passkey access from phones
Users are responsible for server backups and maintenance
Exercise media has separate third-party licensing considerations
The project is relatively young compared with established commercial fitness platforms
Some advanced functionality is still actively evolving
How to Install
The simplest deployment method is Docker Compose.
Clone the repository, create the environment file, pull the prebuilt images, and start the services:
git clone https://github.com/DuarteSantos8/openGym
cd openGym
cp .env.example .env
docker compose pull
docker compose up -d
The application can then be accessed through the configured web port. The first startup downloads the exercise media required by the application.
For access from a phone, configure HTTPS and a domain before relying on passkey authentication. The project documentation provides deployment examples for common reverse proxies and tunnel solutions.
Once installed, create a profile and configure your weekly routine. Existing workout history can also be imported from supported fitness applications.
Final Verdict
openGym is an impressive self-hosted alternative to conventional workout tracking services. Its strongest feature is not simply workout logging, but the combination of data ownership, offline support, passkey authentication, cross-device synchronization, exercise analytics, and a surprisingly complete training workflow.
The Docker-based deployment is particularly attractive for technically inclined users. The application can run on relatively inexpensive hardware, while its data directory makes backup and migration straightforward.
The main drawback is that self-hosting transfers responsibility for availability, HTTPS, backups, and updates to the user. The separate licensing situation surrounding exercise media is another consideration for anyone redistributing an installation.
For users who want a modern fitness tracker without handing their workout history to a third-party service, openGym is an excellent project and one of the more compelling self-hosted fitness applications available.
