CoachM8
Legal

Privacy policy

CoachM8 ("we", "us") provides a coaching website, a coach dashboard and a member app. This policy explains what personal data we collect, why, and the choices you have. For data our business customers (gyms, studios and coaches) hold about their own members, the coach is the controller and we act as their processor under a Data Processing Agreement.

Last updated 28 October 2026
Never soldWe don’t sell your data or use it for advertising.
You’re in controlOptional health data is only shared if you opt in.
Delete any timeRemove your account and data in the app.
UK GDPR rightsAccess, correct, export or delete on request.

01What we collect

  • Account details: name, email address and password (stored hashed by our authentication provider).
  • Coaching data you choose to enter: height, weight and measurements, food and drink logs, workouts, check-in answers, progress photos, form-check videos, voice notes and messages.
  • Optional health-related data such as menstrual cycle information, collected only if you switch that feature on, and shared with your coach only if you opt in.
  • Bookings: classes and sessions you book, and for guest bookings your name, email and the time you accepted the waiver.
  • Payments: handled by Stripe. We receive your subscription status and plan, never your full card number.
  • Technical data: push-notification tokens and basic logs needed to keep the service secure.

02How we use it

To deliver coaching and show your progress, let your coach review your check-ins and reply, take payment, handle bookings, send the notifications you enable, keep the service secure and meet legal obligations. We do not sell your data and do not use it for advertising.

03Who can see it

You can see your own data. Your coach and the staff they authorise can see the data of the members they coach. Our service providers process data on our behalf: hosting and database (Supabase), payments (Stripe), email delivery, push notifications and, if you use the optional meal-photo estimate, an AI provider that receives the photo only to return a calorie estimate.

05Retention

We keep your data while your account is active. If you leave, your coach's account administrator can delete your records, and you can delete your own account in the app, which removes your profile, logs, photos and messages. Form-check videos are deleted when a member leaves. Backups are overwritten within 35 days.

06Your rights

Under UK GDPR you can ask to access, correct, export or delete your data, object to or restrict certain processing, and withdraw consent. Email hello@coachm8.co.uk and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).

07Security and transfers

Data is encrypted in transit and at rest, access is restricted by role, and photos and videos are stored privately and served through short-lived links. Where data is processed outside the UK we rely on approved safeguards such as the UK International Data Transfer Addendum.

08Children

The service is intended for people aged 16 and over.

09Changes

If we change this policy in a meaningful way we will tell you in the app or by email.

Still have a question?

A real person replies, usually within a working day.

Email usBack to CoachM8