At My Coach App (“My Coach”, “we”) we respect your privacy. This policy explains what data we process when you use our mobile app and this website, why we use it, who we share it with and how you can exercise your rights.
By creating an account and using My Coach App you confirm you have read this policy. For health data and photos we also ask for your explicit consent inside the app.
1. Data controller
The controller of your data is My Coach App, operating from Colombia. You can contact us about any privacy matter at soporte@mycoachfit.app.
We apply Colombia’s Law 1581 of 2012 and Decree 1377 of 2013 and, for users in the European Economic Area and the United Kingdom, the General Data Protection Regulation (GDPR).
2. Data we collect
- Account: email address, name and, if you sign in with Google or Apple, the basic profile data you authorize. Passwords are handled by our authentication provider and we never see them in plain text.
- Profile and onboarding questionnaire: date of birth or age, sex, height, weight, goal, level, available days, training location, language, units and preferences.
- Training: routines, programs, sessions, sets, reps, weights and times.
- Nutrition: logged meals, calorie and macro targets, food searches, scanned barcodes and food photos you send to the scanner.
- Progress: weight, body measurements and the progress photos you choose to upload, plus any analyses you request.
- AI coach: the messages you write, the audio and transcript of live voice sessions, and the generated replies and proposals.
- Purchases: plan, subscription status, trial period, transactions and AI credit balance. We never receive or store your card details: payment is processed by Apple or Google.
- Support and reports: the messages and photos you attach when you send us a report or write to us.
- Technical data: app version, operating system, platform, technical identifiers, error and usage logs needed to secure and run the service.
3. Sensitive data (health and photos)
Your weight, measurements, health data, progress photos and food photos may be considered sensitive data. We process them only with your prior, explicit and informed consent, and only to provide the service to you.
Providing them is optional. Without them some features (such as personalized plans or photo analysis) won’t be available. AI analysis of progress photos only happens if you turn it on in the app, and you can turn it off at any time.
We never use your photos for advertising, to profile third parties or to train our own models.
4. How we use your data
- Create and manage your account and authenticate you (performance of contract).
- Generate and adjust your workouts, nutrition targets and progress tracking (performance of contract and your consent for health data).
- Run the AI coach, food scanner and photo analyses you request (performance of contract and consent).
- Manage subscriptions, free trials and AI credits, and prevent fraud (performance of contract and legitimate interest).
- Handle support and reports, and send transactional emails such as account verification or password reset.
- Keep the service secure, measure costs and improve it with technical or aggregated data (legitimate interest).
- Comply with legal, accounting and tax obligations.
We do not sell your personal data or share it with third parties for advertising.
5. Artificial intelligence (OpenAI)
My Coach App’s AI features are powered by OpenAI models. When you use them, we send OpenAI only what’s needed to answer you: your messages and relevant context from your profile, workouts and meals; the audio of live voice sessions; and the food or progress photos you ask us to analyze.
OpenAI acts as our service provider (processor). Under its current API terms, data sent through the API is not used to train its models by default and is retained for a limited time to prevent abuse. Messages may go through an automated moderation filter.
AI replies are generated automatically and may contain mistakes. No coach proposal (routines, goals or meal plans) is applied without your confirmation.
6. Providers that process data for us
We work with providers that process data only to deliver their services to us, under confidentiality and data protection agreements:
- Supabase: user authentication and PostgreSQL database.
- Google Cloud: our API servers (Cloud Run) and scheduled jobs.
- Cloudflare R2: private storage for progress photos, report photos and avatars. Photos are only shown through temporary signed links.
- OpenAI: AI features (chat and voice coach, food scanner and photo analysis).
- RevenueCat: purchase, subscription and free-trial management. It receives a customer identifier and your store transaction data.
- Apple and Google: app distribution, sign-in (if you choose it) and payment processing.
- Open Food Facts and USDA: public food databases. We only send them the search term or barcode, never your personal data.
- Email provider (SMTP): delivery of transactional emails.
- Vercel: hosting of this website.
7. International transfers
Some of our providers have servers outside Colombia, mainly in the United States and the European Union. When we transfer data we require adequate security and confidentiality safeguards under Law 1581 of 2012 and, where applicable, GDPR standard contractual clauses.
8. Retention and security
We keep your data while your account is active. If you delete your account, we delete or anonymize your personal data, photos and conversations from our active systems within a reasonable period; backups are purged in their normal cycle. We may keep transaction records as long as the law requires.
To prevent trial credits from being claimed again, after deletion we keep a one-way hash of your email (not the email itself) and the store’s original transaction ID. We don’t use them to identify or contact you; they only tell us that this person or purchase already received trial credits.
We use encryption in transit (HTTPS), private storage for photos, access controls and verification of every request to our API. No system is 100% foolproof, but we work to protect your information and will notify you of any incident affecting you as required by law.
9. Deleting your account
You can delete your account and data from the app, under Profile › Privacy & security › Delete account, or by writing to soporte@mycoachfit.app.
Deleting your account does not cancel your subscription. Cancel it first in your App Store or Google Play settings to avoid further charges. Deleting your account forfeits any remaining AI credits.
10. Your rights
You can know, access, update, correct and delete your data, withdraw your consent, request proof of it and learn how we use it. If you are in the EEA or the UK, you can also request portability, object to or restrict processing, and lodge a complaint with your data protection authority.
Write to soporte@mycoachfit.app with your request and your account email. We answer inquiries within 10 business days and complaints within 15 business days, extendable as permitted by law. In Colombia, if you are not satisfied, you may contact the Superintendence of Industry and Commerce (SIC).
11. Minors
My Coach App is intended for people 18 years of age or older. We do not knowingly collect data from minors. If we detect an account belonging to a minor, we will delete it.
12. This website and cookies
This site only uses one functional cookie (NEXT_LOCALE) to remember the language you chose. We don’t use advertising or tracking cookies. Our hosting provider may log technical data (such as IP address) for security.
If you join the launch list, we store your email, language and the part of the site you joined from on our servers, only to tell you about the launch. We don’t share it with third parties for advertising, and you can ask us to delete it at any time by writing to soporte@mycoachfit.app.
13. Changes to this policy
We may update this policy. We will publish the current version on this page with its date and, if the change is significant, notify you in the app or by email.
14. Contact
For any privacy question, write to us at soporte@mycoachfit.app.