1. Who we are
Gym Journey Coach (the "App") is an app for personal trainers and coaches to manage trainees, workouts, scheduled sessions and progress. It is operated by Paul Charnoz ("we", "us"), who is the data controller for the personal data described below. Contact: gymjourney.contact@gmail.com.
This policy covers the coach App only. Trainees use the separate Gym Journey athlete app, which has its own privacy policy.
2. Data we collect
Account data
- Email address, username and, for email sign-up, a hashed password.
- If you sign in with Google or Apple: the account identifier and email that provider shares with us. With Sign in with Apple you may choose to share a private relay email.
- Profile picture (if you add one), unit preferences, account role and sign-up date.
Coaching data you enter
- Trainee profiles you create: the trainee's name, email address and your private notes.
- Workouts and exercises you create, workouts you assign, scheduled sessions (date, time zone, notes, status) and written feedback you send to trainees.
Data from linked trainees
When a trainee accepts your invitation in the Gym Journey athlete app, you can see the workouts, results and progression they log. That data belongs to the trainee and is shared with you only while the coaching link is active. Either side can end the link at any time.
Push notification data
If you allow notifications, we store a device push token (Firebase Cloud Messaging) so we can notify you about trainee activity, invitation responses and session reminders.
Subscription data
Paid plans are purchased through the Apple App Store or Google Play. We do not receive your payment card details. We receive information from Apple or Google about your subscription (product, status, renewal and expiry dates, and a transaction identifier) so we can unlock paid features.
Technical data
Our hosting provider records standard server logs (IP address, request time, endpoint, error details) for security and troubleshooting. Your sign-in token is stored in your device's secure keychain, and your notification history is stored locally on your device.
We do not use advertising, ad identifiers or third-party analytics, and we do not sell your data.
3. How we use your data and why
- To provide the App (performance of our contract with you): creating your account, storing your coaching data, sharing assignments and feedback with your trainees, sending invitation emails on your behalf.
- To send push notifications (your consent, given through your device's permission prompt). You can withdraw it at any time in your device settings.
- To manage subscriptions (performance of our contract).
- To keep the service secure and working (our legitimate interest): preventing abuse, rate limiting, debugging errors.
- To meet legal obligations, such as tax and accounting rules for paid plans.
4. Data about your trainees
When you add a trainee's name, email or notes, you decide what to enter and why; we process it on your behalf to run the App. You are responsible for having a valid reason to store that information and for informing your trainees. When you invite a trainee, we send them an email containing your name and an invitation link. Please don't enter sensitive health information about trainees in notes unless you have their explicit consent.
5. Who we share data with
We share data only with service providers that help us run the App, under contracts that require them to protect it:
- Vercel (API and website hosting) and our managed database host.
- Google Firebase Cloud Messaging and Apple Push Notification service (delivering notifications).
- Google Sign-In and Sign in with Apple (authentication, only if you use them).
- Mailgun (sending invitation and password emails).
- Apple and Google (processing subscription purchases under their own privacy policies).
We also share data with your linked trainees (assignments, sessions and feedback you send them) and may disclose data if required by law.
Some providers are located outside the European Economic Area. Where that is the case, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.
6. How long we keep data
We keep your data while your account exists. Push tokens are replaced when your device issues a new one and are deleted with your account. Server logs are kept for a short period by our hosting provider. Records required for tax or accounting purposes are kept for the period required by law.
7. Deleting your account
You can delete your account at any time in the App under Account › Delete account, or by emailing us. Deletion is immediate and permanent. It removes your account and sign-in credentials, your push token, your trainee profiles and notes, workouts you created, scheduled sessions, assignments and feedback, and it invalidates your existing sign-in tokens.
Your trainees keep their own Gym Journey accounts, their logged results and the copies of workouts you assigned to them, which no longer reference you. Deleting your account does not cancel an App Store or Google Play subscription; cancel it in your store account settings.
8. Your rights
Depending on where you live (including under the EU/UK GDPR), you have the right to access, correct, delete or export your data, to object to or restrict certain processing, and to withdraw consent. Contact us at gymjourney.contact@gmail.com and we will reply within one month. You can also lodge a complaint with your data protection authority; in France this is the CNIL (cnil.fr).
9. Security
Data is transmitted over HTTPS, passwords are stored hashed, and sign-in tokens are kept in your device's secure keychain. No system is perfectly secure, but we take reasonable measures to protect your data.
10. Children
The coach App is intended for adults. We do not knowingly create coach accounts for anyone under 18.
11. Changes
We may update this policy. We will post the new version on this page with a new effective date and, for significant changes, let you know in the App.
12. Contact
Paul Charnoz — gymjourney.contact@gmail.com