Privacy Policy

Who we are

ProFlow Physiques (“ProFlow Physiques”, “we”, “us”) is the coaching business behind the app and is responsible for the personal data described here. Coaching is delivered by one coach, so in practice your data is seen by you and by him, and by no one else. You can reach us at joey@proflowphysiques.co.uk.

Health and fitness information

The core of the app is a record of your body and your training. This includes:

• Body measurements: your body weight, your body fat percentage, and your chest, waist, hips, arm and thigh measurements, with the date of each entry and any note you add.
• Nutrition: the calorie and macro (protein, carbs, fat) targets your coach sets for you, any written meal plan or diet PDF he uploads for you, and the food you log yourself: what you ate, its calories and macros, and an optional photo of the meal.
• Supplements: the supplement protocol your coach sets (what to take, the dose, and when) and your daily record of what you actually took.
• Cardio: the cardio your coach prescribes, and what you log doing: type, duration, distance, average heart rate, calories and step count.
• Workouts: the training programme assigned to you, and the sets, reps, weights and effort ratings you log against it.
• Phases and weekly plans: the training block you are in (for example a 12 week cut), its start and target dates, your goal, and the weekly training, cardio, calorie and step targets set for you.
• Progress photos and videos: the photos, videos and captions you upload for your coach to review, and the feedback he leaves on them.
• Check-ins: your answers to the check-in questions your coach sends you.

This is health and fitness data, and under UK data protection law body measurements and similar health information get extra protection. We only collect it because you choose to enter it so that your coach can coach you. You can delete individual entries at any time, and deleting your account removes all of it (see below).

You type this information into the app yourself. The app does not connect to Apple Health, Google Fit, a wearable or any other health app, and does not read anything from your phone’s health data.

Other data we collect

• Account details: your name, your email address and your password. Passwords are handled by our login provider (Supabase) and are stored scrambled, so nobody at ProFlow Physiques can see yours.
• Profile details: your optional profile photo, your preferred app language, and the athlete details you or your coach fill in: date of birth, occupation, Instagram handle, training experience, what phase of the year you are in, your goals and target dates, and any competition dates you add.
• Messages: the private 1:1 messages you send to and receive from your coach, including any photos you attach to them.
• Community content: the posts, comments, reactions and optional photos you choose to share in the community feed. Unlike your coaching data, anything you post here is visible to other members. Reports you make about other members, and members you block, are stored so we can act on them.
• Coach’s notes: private notes your coach keeps about your training. You cannot see these, but they are your personal data and you can ask for a copy.
• Sessions and bookings: any block of prepaid sessions on your account, how many you have used, and the sessions you book with your coach (the time booked and the email address used to book).
• Requests: any request you send to change your coaching plan.
• Video library activity: which coaching and exercise demo videos you have opened or finished, so the app can show your place.
• Device and diagnostic data: if you allow push notifications, an identifier for your device so we can send them. If the app crashes or errors, we receive a technical report of what went wrong (which screen, which device type, the error itself).

We do not collect your location, we do not track you across other apps or websites, and we never see your payment card details (see below).

Why we are allowed to use it (our lawful basis)

• To deliver the coaching you signed up for (a contract with you): your account, your training and nutrition plans, your logs, messaging with your coach, and your bookings.
• Your explicit consent: for the health and fitness information listed above. You give it by choosing to enter that information, and you can withdraw it at any time by deleting the entries or deleting your account. If you withdraw it, your coach can no longer coach you effectively, but nothing else about your account is affected.
• Our legitimate interests: keeping the app secure, preventing abuse, moderating the community feed, and fixing crashes and bugs.
• Your consent: push notifications, which you can turn off at any time in your phone’s settings.

Who can see your data

• You: everything you have entered.
• Your coach: your plans, your logs, your body measurements, your progress photos, your check-ins and your messages. A coach can only ever see the clients assigned to him. That restriction is enforced by the database itself, not just hidden in the app screens, so one client’s data can never be pulled up by another client or by an unassigned coach.
• A ProFlow Physiques administrator: for support, safety and moderation. To keep coaching quality high and to keep members safe, administrators may review messages and content sent in the app.
• Other members: only what you choose to post in the community feed. Nothing else you enter is ever shown to other members. You can delete your own posts and comments at any time, and administrators may remove content that breaks our community guidelines. You can report or block another member from within the app.

We never sell your data. We do not use it for advertising, we do not share it with data brokers, advertisers or social networks, and we do not use it to train anyone’s artificial intelligence models.

Companies that help us run the app

These companies process data on our behalf, under contract, and only to do the job we ask of them:

• Supabase: the database, login and file storage behind the app. Your account, your logs, your photos and your messages are stored there.
• Sentry: crash and error reporting, so we can find and fix breakages.
• Calendly and Stripe: booking and payment for live sessions. Card details are entered inside Stripe and are never seen or stored by the app.
• Apple and Google: distributing the app, and (if you opt in) delivering push notifications through Apple and through Google Firebase Cloud Messaging. The notification itself carries only what you would see on the lock screen.

Some of these providers store or process data outside the UK. Where that happens, the transfer is covered by the standard contractual terms approved for international transfers of personal data.

How long we keep it

We keep your data for as long as your account is active, because your history is the point: your coach needs last month’s weight and last week’s workout to plan the next one. When you delete your account, everything listed in this policy is deleted with it (see below). Encrypted backups taken before you deleted your account are overwritten as they roll over, within a few weeks. Crash reports, which are technical rather than personal, are kept for up to 90 days.

Deleting your account

You can permanently delete your account and all associated data at any time from Profile → Delete account in the app. Deletion is immediate and irreversible: your profile, body measurements, nutrition, supplement, cardio and workout logs, progress photos and videos, check-ins, messages, community posts and comments, bookings and device details are all removed.

If you can no longer sign in, email us from the address on your account and we will delete it for you within 30 days. Full instructions are on our delete your account page.

Getting a copy of your data

You can ask us for a copy of everything we hold about you, in a portable format. Email joey@proflowphysiques.co.uk from the address on your account and we will send it within 30 days, free of charge.

Security

Your data travels encrypted between your phone and our servers, and is stored encrypted. Your photos, videos and diet PDFs sit in private storage that cannot be browsed from the internet: they are only ever opened through short-lived links generated for you or your coach. The database checks who you are on every single read and write, so the rules above (you see your data, your coach sees only his clients) hold even if a screen in the app were to get it wrong.

Age

ProFlow Physiques is for adults aged 18 and over. It is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a minor has an account, contact us and we will remove it.

Your rights

You have the right to see the data we hold about you, to correct it, to get a copy of it, to have it deleted, to object to how we use it, and to withdraw your consent for the health and fitness information at any time. To exercise any of these, email us. You also have the right to complain to the UK’s Information Commissioner’s Office (ico.org.uk) if you think we have handled your data badly, though we would rather you told us first so we can put it right.

Changes to this policy

If we add a feature that collects something new, we will update this policy and change the date at the top before that feature reaches you.

Contact

Questions about this policy or your data? Email joey@proflowphysiques.co.uk. We aim to reply within a few days, and within 30 days at the latest for any formal request about your data.