CoachFit Privacy Policy

1. Who we are

CoachFit is a platform used by personal trainers to manage their clients: training plans, progress tracking, nutrition and communication. This policy applies to both the mobile app and the web dashboard, and describes what data we process, why, and how we protect it.

2. What data we collect

Depending on how you use CoachFit, we process:

• Trainer account: name, email address and password (stored as a hash, never in plain text).
• Client profile (created by your trainer): name, email, phone, height, profile photo and an access code to log into the app.
• Physical progress data: weight, body fat percentage, body measurements (waist, chest, hips, arm), notes and progress photos.
• Messages: the content of chats between trainer and client, including any images sent.
• Community: posts, comments and reactions within your trainer's feed.
• Push notifications: your device token, so we can deliver alerts via Firebase Cloud Messaging.
• Activity: the date you were last active in the app.

We do not ask for financial data, card details or real-time location. Training plans and the nutrition/exercise library do not contain personal data on their own.

3. What we use your data for

• Operating the app's core features: plans, progress tracking, chat and community.
• Letting your trainer see your progress and communicate with you.
• Sending push notifications related to your training (new messages, updates from your trainer).
• Keeping the account secure (for example, detecting unauthorized access).

We do not use your data for advertising or sell it to third parties. We have no third-party analytics or advertising SDKs integrated in the backend.

4. Where data is stored

Text data (profiles, messages, measurements, posts) is stored in CoachFit's server database. Photos and images (profile, progress, chat and community) are stored on Cloudflare R2, a cloud storage provider, and served through a content delivery network (CDN).

5. Who we share data with

• Your trainer sees the data of their own clients (never the clients of other trainers).
• Google Firebase receives your device token solely to deliver push notifications.
• Cloudflare hosts the images you upload to the app.

We do not share your data with anyone else, unless required to do so by law.

6. Security

All communication between the app and our servers travels encrypted (HTTPS). Passwords are always stored as a hash, never in plain text.

7. Your rights: access and deletion of your data

You can request to view, correct or delete your data at any time. The steps to request deletion of your account and all your data are detailed on our account deletion page.

8. Minors

CoachFit is not directed at children under 13. Client profiles are created and managed by their trainer, who is responsible for obtaining appropriate consent when the client is a minor.