We collect what is necessary to run the workout tracking and coach-matching features — name, email, workout history, body measurements, and basic usage analytics. We never sell your data. You can download or delete your data at any time in Settings → Data & account, or email [email protected].
Profile (name, email, optional avatar), workout logs you create (exercises, sets, reps, weights, RPE), body measurements you enter, calendar bookings with your coach, payment metadata from Lemon Squeezy or Telegram Stars (we do not store card numbers), and basic usage analytics (page views, button clicks) to improve the product.
To deliver the service (your data, your view), to compute analytics and personal records on your behalf, to send you notifications you opted into (session reminders, low-balance alerts), and to keep the platform safe (abuse detection on the catalog, fraud checks on payments).
You. Your coach sees data you choose to share with them (workout logs you log under their program, session bookings, balance). Public catalog visitors see only what you put on your public trainer profile (if you enabled it). Third parties: Lemon Squeezy for payment processing, Cloudflare for DNS/CDN, Resend for transactional email, Hetzner for server hosting (EU) — strictly to deliver the service. When the app fails, a technical report (page URL, browser, stack trace, your account id) is sent to an error tracker that we host on our own server; it is not shared with any third party.
Access, correction, export and account deletion are available in Settings → Data & account; you can also email [email protected] and we will complete the request within 30 days. Deleting your account permanently erases your data; payment records are kept in anonymized form for the legal retention period. You can revoke a coach connection at any time.
Session and security cookies for authentication, plus your language preference in your browser’s local storage. Sign-up and login forms are protected by Cloudflare Turnstile, which checks your browser for automated traffic and may set its own cookie. No third-party advertising trackers, no cross-site pixels.
Privacy questions: [email protected]. Data Protection Officer: same address.