Privacy Policy

Last updated: 2 August 2026

This policy explains what personal data FitCoach AI collects, why, who it is shared with, and the rights you have over it. It applies to the FitCoach AI website and web app.

1. Who we are

FitCoach AI operates FitCoach AI and is the data controller for the personal data described here. For any privacy question or request, contact support@fitcoach-ai.app.

2. Data we collect

Account data

  • Email address and an encrypted password (or your chosen sign-in method)
  • The name you give us

Fitness profile

  • Age, body weight and height
  • Self-reported fitness level and training objectives
  • Equipment available to you, your training location and any notes you add

Body metrics are used to calibrate training loads. Depending on where you live, this may be treated as health-related data and given additional legal protection. We collect only what the programming actually requires.

Training content

  • Plans generated for you, and the exercises within them
  • Any workout progress you record

Gym photos

If you use equipment photo scanning, your images are transmitted for analysis and are not stored by us. They exist only for the duration of the request and are discarded once equipment has been identified. We keep the resulting equipment list, never the photograph.

Please avoid photographing other people. If someone is incidentally in frame, their image is discarded on the same basis.

Payment data

Subscriptions are handled by Stripe. We never see or store your card details. We retain only a Stripe customer reference, your subscription tier, its status and renewal date.

Technical data

  • Session cookies needed to keep you signed in
  • Aggregate page-view analytics
  • Server logs, which may include IP address, for security and debugging

3. How we use your data

  • To generate and store training plans matched to you
  • To identify equipment from photos you submit
  • To operate accounts, subscriptions and billing
  • To provide support
  • To keep the service secure and diagnose faults
  • To understand aggregate usage and improve the product

We do not sell your personal data, and we do not use your fitness profile for advertising.

4. AI processing

Training plans and equipment recognition are produced using Anthropic's Claude models. To generate a plan we send your fitness profile and equipment list; to scan equipment we send the photograph. Data is sent for the purpose of returning your result.

AI output can be wrong. Plans are suggestions and are not medical advice — see our health disclaimer.

5. Who we share data with

We use the following processors, each only for the purpose stated:

  • Supabase — database and authentication
  • Anthropic — AI plan generation and photo analysis
  • Stripe — payment and subscription processing
  • Vercel — application hosting and aggregate analytics

We may also disclose data where legally required, or to protect the rights and safety of our users.

6. Legal bases

  • Contract — to provide the service you signed up for
  • Consent — for health-related data used to calibrate your training. You may withdraw it at any time by deleting your profile data.
  • Legitimate interests — security, fault diagnosis and product improvement
  • Legal obligation — tax and accounting records

7. International transfers

Our processors may handle data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

8. Retention

  • Account and fitness data — kept while your account is open
  • Gym photos — not retained
  • Billing records — kept as long as tax law requires
  • After deletion, data is removed from live systems promptly and from backups as they age out

9. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct anything inaccurate
  • Delete your account and associated data
  • Receive your data in a portable format
  • Object to or restrict certain processing
  • Withdraw consent at any time
  • Complain to your local data protection authority

Profile and equipment data can be edited or cleared from within the app. For account deletion or any other request, email support@fitcoach-ai.app.

10. Security

Data is transmitted over encrypted connections and stored with row-level access controls, so your records are only reachable by your own authenticated account. No system is perfectly secure, and we cannot guarantee absolute security.

11. Children

FitCoach AI is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes

We may update this policy. Material changes will be signalled by updating the date at the top of this page, and where appropriate we will notify you directly.

13. Contact

Questions or requests: support@fitcoach-ai.app.