This Privacy Policy describes how CoachCamp (“CoachCamp,” “we,” “us,” or “our”) collects, uses, and shares information when you use our mobile app, our website at coachcamp.app, and any related services (collectively, the “Service”).
We wrote this in plain English wherever possible. If anything is unclear, email us at support@coachcamp.app.
1. Who we are
CoachCamp is a fitness coaching app operated by Coach Camp LLC (the “Operator”). The Service connects fitness coaches with their clients (athletes) and provides tools for programming workouts, logging training, tracking nutrition, and reviewing progress.
For users in the European Economic Area, United Kingdom, or Switzerland, the Operator is the data controller for personal data processed through the Service. You can contact us about privacy requests at support@coachcamp.app.
2. Information we collect
2.1 Account information
When you create an account, we collect your email address, display name, and the role you choose (coach or athlete). Authentication is handled by our identity provider, Privy, which supports email and SMS one-time codes as well as Google, X (Twitter), and Apple sign-in. If you sign in with a third-party provider, that provider may share your name and email with us so we can create your account.
You may also choose to add a public bio and personal website to your profile. These optional fields are visible to other people who view your public CoachCamp profile.
2.2 Workout and training data
When you use the Service to log training, we collect the data you enter, including programs and templates, exercises, sets, reps, weights, rate of perceived exertion (RPE), body weight, and per-body-part training volume. This data is stored on our hosted database (Supabase, located in the United States).
2.3 Nutrition data
If you use the nutrition features, we collect the meals, calories, and macronutrients you log, as well as any nutrition targets your coach assigns to you.
2.4 Apple Health data
With your explicit permission on iOS, the Service can read selected data from Apple HealthKit, including steps, active energy, heart rate, resting heart rate, heart-rate variability, sleep duration, VO₂ max, body mass, and body-fat percentage. When you use connected Health and progress features, CoachCamp securely syncs recent samples you authorized to our Supabase database in the United States. This lets you see trends across CoachCamp surfaces and devices. If you have an active coaching relationship, your assigned coach can view those synced metrics in your coaching dashboard and reports. We do not use Health data for advertising, sell it, or use it to train machine-learning models.
You can stop future imports by revoking CoachCamp’s Health permission at any time in iOS Settings › Privacy & Security › Health. Revoking permission does not automatically delete samples already synced to your CoachCamp account; you can request deletion as described in Section 9 or delete your account.
2.5 Uploaded media and documents
If you upload media or documents, we collect and store those files in our hosted file storage (Supabase Storage, located in the United States). This can include profile, check-in, meal, client, and workout images; workout videos; PDFs and other documents; and lab images. Files are available through the feature where you upload them and to people with access to that feature, such as your coach or client when applicable. We do not use uploaded media or documents for advertising or model training.
2.6 Payment information
Subscriptions on iOS are processed by Apple via In-App Purchase. Subscriptions on the web are processed by Stripe. We never receive or store your full payment card details. We receive only the information needed to manage your subscription, such as a customer identifier, the product you purchased, and your subscription status.
2.7 Coach–client relationship data
When an athlete accepts a coaching invitation, the coach is granted access to the athlete’s workout logs, nutrition logs, progress information, check-ins, uploaded coaching media and documents, and any notes the athlete shares through the Service. We record the existence of the relationship, when it was created, and when it ends.
2.8 Device and log data
Our backend and service providers may process standard technical data, including IP address; approximate country or region derived from IP; request path, timestamp, error codes, and other technical request metadata; and device and operating-system information. We use this information for authentication, security, fraud prevention, diagnostics, and service reliability.
We do not use advertising SDKs or track you across apps or websites for behavioral advertising. Privy, our authentication provider, may process limited authentication and service-usage telemetry needed to operate, secure, monitor, and diagnose its services.
3. How we use your information
We use the information we collect to:
- Provide and operate the Service, including authentication, syncing your data across devices, and showing your training and progress;
- Enable the coach–client relationship you opted into, so your coach can review your data and prescribe programs;
- Process subscription payments through Apple or Stripe and manage your subscription status;
- Communicate with you about your account, security alerts, and important changes to the Service;
- Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service;
- Comply with legal obligations.
We do not sell your personal information. We do not use your training, nutrition, uploaded media or documents, or health data to serve you advertising.
4. Who we share information with
We share information only with the service providers we need to run the Service, and only to the extent necessary:
- Privy— identity and authentication, account and session security, and limited operational and service-usage telemetry needed to provide and diagnose sign-in. This may include email or phone number, OAuth account information, IP-derived approximate location, device and operating-system information, and technical request metadata. See privy.io/privacy-policy.
- Supabase— database and file storage in the United States (account profile, training, nutrition, check-ins, uploaded media and documents, and Apple Health metrics you authorize for CoachCamp sync). See supabase.com/privacy.
- Apple— In-App Purchase processing and receipt validation for iOS subscriptions.
- Stripe— payment processing for web subscriptions. See stripe.com/privacy.
- Your coach (if applicable)— if you accept a coach invite, that coach can view the workout, nutrition, check-in, uploaded coaching media and documents, and synced Apple Health data available within the Service.
- Other people who view your public profile— your optional public bio and personal website, if you choose to provide them.
We may also disclose information when we are required to by law, subpoena, or other legal process, or to protect the rights, safety, or property of CoachCamp, our users, or others.
If we are involved in a merger, acquisition, or sale of all or part of our assets, your information may be transferred as part of that transaction. We will give you notice before your information becomes subject to a different privacy policy.
5. Coach and client data sharing
CoachCamp is built around the coach–client relationship. When you, as an athlete, accept a coaching invitation:
- Your coach can view your assigned programs, completed workouts, set logs, body weight entries, nutrition logs, check-ins, uploaded coaching media and documents, and Apple Health metrics you authorize CoachCamp to sync.
- Your coach can prescribe new programs, edit your assigned program, and message you within the Service.
- Only the coach in your active coaching relationship can view your synced coaching data; other athletes and coaches cannot.
- You can end the relationship at any time from your profile, after which the coach will lose access to data created after the end date. The coach may retain copies of historical data they have already viewed.
Coaches are independent third parties who use CoachCamp to deliver their services. They are responsible for their own use of your data and should provide you with their own privacy disclosures where required by law.
6. Data retention
We retain your account and training data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain certain records (for example, transactional and tax records) for longer periods under applicable law. Backups are rotated and purged on a rolling 90-day cycle.
7. Your rights
You have the right to access, correct, export, or delete the personal data we hold about you. You can:
- View and edit most of your data directly in the app;
- Request a copy of your data (data export) by emailing support@coachcamp.app;
- Delete your account from the Profile screen in the app, or by emailing us;
- Withdraw consent for Apple Health access at any time in iOS Settings.
If you are in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under the GDPR / UK GDPR, including the right to object to processing, the right to restriction, and the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA / CPRA), including the right to know what we collect, the right to delete, the right to correct, and the right to opt out of the “sale” or “sharing” of your personal information. We do not sell or share personal information as those terms are defined under the CCPA.
8. Children
CoachCamp is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us personal information, please contact us at support@coachcamp.app and we will delete it. Users between 13 and 18 should use the Service only with the involvement of a parent or legal guardian.
9. Security
We use industry-standard safeguards including TLS in transit, encryption at rest on our database and storage providers, scoped row-level access controls, and short-lived authentication tokens. No system is perfectly secure, but we work to keep your data protected and to notify you promptly if a breach affects your information.
10. International transfers
CoachCamp is operated from the United States and our database and storage providers are based in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have data protection rules different from your home country.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If we make material changes, we will notify you in the app or by email before they take effect.
12. Contact us
Questions, requests, or complaints about this policy can be sent to support@coachcamp.app.