Fit For Coach← Back to site

Data Processing (GDPR)

Last updated: 9 November 2026

This notice describes how Fit For Coach processes personal data in line with the EU General Data Protection Regulation (GDPR). It complements the Privacy Policy.

1. Roles

For account and app data, the app operator acts as data controller. Where a coach uploads or manages data about their own clients for their coaching business, the coach may be an independent controller for that use; Fit For Coach acts as a processor on the coach's behalf for those operations.

2. Lawful bases

We rely on: performance of a contract (to provide the service you sign up for); your consent (for optional features and for processing health-related special category data — Article 9 explicit consent); our legitimate interests (to secure and improve the app); and legal obligation (e.g. keeping payment records).

3. Special category (health) data

Allergies, injuries, body weight and health goals are processed only to deliver coaching features, on the basis of your explicit consent. This consent — which also covers processing by our AI service provider for the app's features — is given by ticking the acceptance box when you create your account, and its date and version are recorded. You can withdraw consent at any time by contacting us or deleting the relevant data or your account.

4. Sub-processors

We use vetted sub-processors under data-processing agreements: Supabase (hosting/database/auth, EU), an AI service provider (AI plan generation and adjustment — also from weight and height, including values imported from Apple Health or Health Connect — progress summaries and food-photo analysis), Google Play and the Apple App Store & RevenueCat (subscription billing), and Google (optional sign-in). International transfers rely on Standard Contractual Clauses where applicable.

5. Your GDPR rights

You have the right to: access; rectification; erasure ("right to be forgotten"); restriction of processing; data portability; objection; and to withdraw consent. You also have the right to lodge a complaint with a supervisory authority (in your country of residence).

6. Exercising your rights

Send requests to info@fitforcoach.app. We will respond within the statutory timeframe (normally one month). We may need to verify your identity first.

7. Retention & deletion

Data is retained while your account is active and deleted or anonymised after account deletion, except records we must legally keep. Deleting your account cascades to the plans, weigh-ins and questionnaire linked to it.

8. Security

Technical and organisational measures include row-level security, encryption in transit, server-side key handling, and optional two-factor authentication for coaches.

9. Contact

Data protection contact: info@fitforcoach.app.