Privacy Policy

We collect information to build and manage your plan, maintain your account, respond to messages, and protect the service. We do not sell personal information. See the sections below for visit counting, advertising and service providers.

• Account: your first name, email address, and a securely hashed version of your password. If you log in with Google, we receive your name, email address and whether Google has verified it — never your Google password.
• About your body: age, sex, height, weight, and optionally waist, neck and hip measurements, plus the BMI and body-fat estimates calculated from them.
• Your goals and training: goals, activity level, where you train, equipment, session length and the types of exercise you choose.
• Health information you choose to share: health conditions and allergies. This information is sensitive. The sections below explain how it is handled.
• Food preferences: diet, meals per day, cuisines, foods you usually eat, foods to avoid, and any foods you add yourself.
• Your plans and progress: the meal and workout plans we build, edits you make, weight entries, steps, workouts completed, food logged, weekly check-ins and any progress photos you upload.
• Before-and-after photos: if your coach asks to show your progress on their page, we keep the two photos and the words they suggest so you can see them. They become public on that coach's page only if you approve, under the name you choose (your first name or “A client”). Saying no, taking them down, or deleting your account deletes the photos; we keep the record of what you were asked and your answer.
• Your coach's videos: when you press play on a video your coach shared, we note that you watched it, so your coach can see who has. The video plays from where your coach keeps it (YouTube in its privacy mode, Vimeo or Google Drive) and only once you press play; at that moment that company learns that your device watched that video, under its own privacy policy. Nothing loads from them before you press play, and the video's picture comes through our server. Instagram, TikTok and Dropbox videos open in their own app or site. Deleting your account deletes the record of what you watched.
• Coaches' certificates: if you coach on the site, we keep a photo or PDF of each certificate you list, so we can check it before we approve you. Only you and our team can open them, and they are deleted when you delete your account.
• Consent records: which terms you accepted and when.
• Sessions: a login token stored in a cookie so you stay logged in.
• Phone notifications: if you turn them on, we keep the address your phone or browser was given by its maker's notification service (Apple, Google, Mozilla or Microsoft) and its keys, so we can tell you when a coaching message is waiting. The notification passes through that service, encrypted so only your device can read it, and says who wrote, never what they wrote. Turning them off, logging out or deleting your account removes it.
• Messages you send us: if you write to us through the Contact page, we keep the name, email address, subject and message you wrote, so we can read it and reply. If you were logged in, we note which account it came from so the reply has context.

So we can see how the site is used and fix what doesn't work, we record each page view on our own servers: the page address, the site that linked you here (its name only, never the full address), any campaign tags on the link you followed (such as which ad it was), whether you were on a phone, tablet or computer, the browser and system family (for example “Safari on iOS”), your screen size group, your browser's language, your country, and whether you were logged in. We also record where on a page people click, how far they scroll, errors in the page and how fast it loaded — never anything you type.

We never store your IP address, and nothing is sent to any other company. To count a person once a day rather than once a click, we turn your IP address and browser into a scrambled code using a secret that is replaced every day and never kept afterwards.

Analytics cookies are your choice. The first time you visit, we ask. If you choose Allow, we set a cookie with a random code so we can tell when the same browser comes back, connect a visit to the account it led to, and note your city. We may also record your visit so we can watch where people get stuck: every field you type into is hidden in the recording, and we never record the health questions, check-ins, progress and weight pages, messages or coaching pages. If you choose No thanks, none of that happens and you are counted only with the daily code above. Either way we keep a small cookie with your choice. You can change it any time: Cookie settings.

When you are logged in, we also keep a record of what you do in the app — that you opened your plan, edited a meal and the reason you chose, ticked an exercise, logged sets, sent a check-in, and roughly how long each page was in front of you. These records are linked to your account so we can see whether the plan we built is one you actually use, and fix it when it is not. They hold only the type of action and a short code, never what you typed, never your weight or measurements, never a health answer, and never your IP address. If you answer one of our short in-app questions, we keep your answer.

Only we can see any of this, with one exception: a coach sees totals for visits to their own coaching page — how many people came, which site or app sent them, their countries and whether on a phone or computer — never anything that says who you are. Visits we make ourselves while testing are marked as ours and left out. Records linked to your account, including any recording of you while logged in, are deleted with your account.

To stop people guessing passwords or copying the site in bulk, we limit how often the same network address can log in, sign up, reset a password, send a message or read food data, and how many wrong passwords can be tried for one email.

We also keep a short security log of wrong passwords, requests that hit a limit, and attempts to open admin pages.

Neither the limits nor the log store your IP address or email in readable form. Both are turned into the same kind of scrambled code used for counting visits, with a secret replaced every day.

Limit counters are deleted after a day, and the security log after 30 days.

We use your information to build and adjust your plan and show your progress. Reported allergies and health conditions guide the planner’s screening rules and limits.

Your data is held in a managed PostgreSQL database (Supabase) hosted in Canada, and the site itself runs on Vercel. Both are processors acting on our instructions.

Payments are handled by Stripe. When you pay, you enter your card details on Stripe's page, not ours; we receive your email, what you bought and whether the payment went through, never your full card number. A coach who is paid through us gives their bank and identity details to Stripe directly; Stripe checks their identity and tells us only whether it has verified them.

Emails are sent through Resend, which receives the address, your first name and the email itself in order to deliver it.

Connections use encryption in transit, and passwords are stored only as bcrypt hashes, never in readable form.

Besides the emails your account needs (confirming your address, resetting your password), we send members who joined from 12 October 2026 a welcome when they sign up. If you tick “Email me tips and reminders” at sign-up, we also send a reminder if your plan is not set up, a check-in after your first days, a note if you have not been back for a while, a request for feedback, and a reminder if you started choosing a coach and stopped. Each of these has an Unsubscribe link, and one press stops them all. If you work with a coach, we also email you when they send you a message, without the message itself; that comes with your coaching.

We share information with the service providers listed above to operate the site. If you choose coaching, the coach you select receives the answers you agree to share for that package. We do not sell personal information or share health, food, or training information with Google. See below for your privacy choices.

We advertise on Google. Our public pages, and the page you see right after paying, load Google's advertising tag. It sets Google cookies so we can tell whether a visit came from one of our ads and whether it led to a subscription. Google receives the address of that page, your browser details and your IP address, and after a payment the plan's price and a scrambled order number, so a sale is counted once. The tag never runs on the signed-in pages of the app, so Google never receives your health, food, or training information. You can limit ads personalisation in Google's My Ad Center, or block cookies in your browser. We do not run other analytics or tracking scripts.

• See and change it: everything you entered can be viewed and edited in the app.
• Delete it: deleting your account removes your personal data from our database. Ask us any time using the address below.
• Emails: unsubscribe from our emails with the Unsubscribe link in any of them; reminders on your phone are in Settings.
• Access or a copy: write to us and we will help.

We keep your information while your account exists. When an account is deleted, its personal data is removed.

Messages sent through the Contact page are kept while we are dealing with them, and deleted once the conversation is finished. Deleting your account does not delete a message you sent us, because it may be a conversation still in progress — ask us and we will remove it.

The service is for adults aged 18 and over. We do not knowingly collect information from anyone under 18.

If this policy changes, we will update this page and the date above. Questions, corrections or a deletion request: use the Contact page.