Privacy Policy

Last updated: 24 August 2026

GymCoach ("GymCoach", "we", "us") provides a training platform that connects coaches and athletes, available on web, iOS and Android. This policy explains what personal data we collect, why, and what rights you have over it. It applies to gymcoachapp.com and the GymCoach app.

Where the General Data Protection Regulation (GDPR) applies, GymCoach acts as the data controller for the personal data described below. If you have questions about this policy or want to exercise your rights, contact us at support@gymcoachapp.com.

1. Data we collect

We collect data you provide directly, and data generated by using the app:

Account data: name, email address, password (stored hashed), role (coach or athlete), and profile details you add.
Training data: programs, workouts, exercises, sets, reps, weight, RPE, and workout notes you or your coach log.
Coach–athlete data: invite codes, coach–athlete links, check-ins, coach notes, and messages exchanged in-app.
Health-adjacent data: if you choose to connect Apple Health or Health Connect, we receive the specific metrics you authorize (e.g. body weight, activity). You control this connection from your device's OS settings at any time.
Subscription data: plan, billing period, and status, processed on our behalf by RevenueCat and the relevant app store or payment provider. We do not receive or store your card number.
Technical data: device type, app version, and basic diagnostic/log data needed to keep the service running securely.

2. How we use it

To provide the core service: programs, logging, messaging, and progress tracking between coaches and their athletes.
To process and manage subscriptions and billing.
To secure accounts, prevent abuse, and debug issues.
To send service-related emails (e.g. password resets, billing notices). We do not send marketing email without your consent.

3. Legal basis (GDPR)

We process account, training, and subscription data to perform our contract with you (providing the app you signed up for). Optional integrations, such as Apple Health/Health Connect, rely on your consent, which you can withdraw at any time. Limited technical/diagnostic data is processed under our legitimate interest in keeping the service secure and reliable.

4. Who we share it with

We do not sell personal data. We share data only with service providers who process it on our behalf, under contract:

Supabase — database, authentication, and backend hosting for all account and training data.

RevenueCat — subscription and payment processing (works alongside the Apple App Store, Google Play Billing, and/or Stripe depending on how you subscribe).

Vercel — hosting for this website, and privacy-friendly visitor analytics on the marketing pages. These analytics are cookieless, count page views rather than people, and do not build a profile of you or follow you to other websites.

A coach and their linked athletes can see each other's relevant training data (programs, workouts, check-ins, messages) as a core function of the app — this is between you and your coach/athlete, not a third-party disclosure.

5. International transfers

Our service providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses, as required by GDPR.

6. Data retention

We keep your account and training data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we're required to retain it (e.g. billing records for tax purposes).

7. Your rights

Under GDPR, you have the right to access, correct, delete, or export your data, to restrict or object to certain processing, and to withdraw consent at any time. To exercise any of these, email support@gymcoachapp.com. You also have the right to lodge a complaint with your local data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.

8. Security

We use industry-standard measures — encryption in transit, access controls, and row-level security on our database — to protect your data. No system is completely secure, but we work to keep your data safe and will notify affected users if a breach materially affects them, as required by law.

9. Children

GymCoach is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, contact us and we will remove it.

10. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above, and for material changes we'll make reasonable efforts to notify you (e.g. by email or an in-app notice).

11. Contact

Questions about this policy or your data: support@gymcoachapp.com.