Privacy Policy

CoachFlow is a service for personal trainers to manage clients, sessions, programmes, payments status and related notes. For support or privacy requests, contact: brainrotcollector.sandbox@gmail.com.

This policy is intended to describe the current product and codebase. It should be reviewed professionally before App Store submission.

CoachFlow stores information entered by trainers, including:

• trainer account email address and authentication information;
• client names, and optional client email addresses and phone numbers;
• appointment and session information, including dates, times and notes;
• session amounts and paid or unpaid status;
• training programmes, exercises and programme assignments;
• trainer notes about clients;
• client measurements such as weight, body-fat percentage, waist, chest, hips, arms and thighs.

CoachFlow Premium purchases are processed through Apple's App Store. RevenueCat processes subscription entitlement and status information so CoachFlow can apply Premium client limits. CoachFlow does not receive full payment-card details.

CoachFlow uses information to:

• provide authentication and the CoachFlow service;
• save, display and update trainer-entered records;
• manage free and Premium client limits and subscription entitlement;
• send service emails where email functionality is configured;
• secure, troubleshoot, maintain and improve the service;
• respond to support and privacy requests.

CoachFlow acts as controller for trainer account, subscription and service administration information. Trainers are responsible for ensuring they have an appropriate basis to enter and manage their clients' personal data in CoachFlow.

CoachFlow processes trainer-entered client data to provide the service. Trainers should only enter client data they are entitled to hold and manage.

Trainers may enter measurements or health-related information about clients. Trainers should avoid entering unnecessary sensitive information and should only enter information they are entitled to hold.

CoachFlow currently uses providers evidenced in the codebase:

• Supabase for authentication and database services;
• Vercel for web hosting and scheduled backend jobs;
• RevenueCat for subscription entitlement processing;
• Apple for App Store payments and subscription management;
• Resend where service email functionality is enabled;
• Expo/EAS where relevant to app delivery and diagnostics.

CoachFlow retains account and trainer-entered data while the account is active and as reasonably necessary to provide the service. In-app account deletion permanently removes the account and associated CoachFlow records, subject to legal or operational retention obligations.

Deleting a CoachFlow account does not cancel an Apple subscription. Apple subscription records may continue to be retained by Apple. Subscriptions are managed through Apple account settings.

CoachFlow uses reasonable technical and organisational safeguards such as authenticated access, row-level database controls and server-side handling for privileged operations. No online service can be guaranteed perfectly secure.

CoachFlow's providers may process information outside the United Kingdom. Where required, appropriate safeguards should be used for international processing. Specific transfer arrangements should be confirmed as part of legal review.

Depending on the circumstances, UK users may have rights to access, correct, delete, restrict or object to processing of their personal data, and to portability where applicable. Users may also complain to the UK Information Commissioner's Office.

To make a request, email brainrotcollector.sandbox@gmail.com or use the support page.

CoachFlow is intended for professional trainers, not for children creating trainer accounts. Trainers are responsible for lawful handling of information relating to clients under 18.

CoachFlow may update this policy as the service changes. Material updates should be reflected by changing the Last updated date on this page.