Privacy Policy

BodyFit Coaching LLC is a Colorado limited liability company. We provide online fitness and nutrition coaching, in-person personal training and small-group classes through the BodyFit Coaching app and trainwithbodyfit.com (together, the “Service”).

This policy explains what we collect, why we collect it, who we share it with, where it is stored and the choices you have.

Our core promises: we never sell your personal data, we never use your health data for advertising, and we never show your progress photos to other members.

1. Information we collect

We don’t collect your precise location, your contacts or your activity in other apps.

When you give us an emergency contact, please make sure they’re comfortable with us holding their details. We use them only to reach that person if you’re hurt or unwell during a session or class.

2. How we use your information

• Provide your online program, in-person sessions and classes, including booking and reminders, meal plans, logging, progress tracking, check-ins and community features.
• Let your coach review your data, adjust your plan and train you safely in person, including contacting your emergency contact if you’re hurt or unwell.
• Estimate nutrition from meal photos and barcodes and show how food fits your targets.
• Power e-Manny, our AI assistant (section 5).
• Process subscriptions, free trials, session packages and class credits.
• Respond to consultation requests and send the free guides or event details you ask for.
• Keep the Service secure, prevent fraud and fix bugs.
• Send service messages and, if you opt in, reminders, tips and updates by email, push notification or text message (section 8).

3. Who can see your information

• Your coach and authorized BodyFit staff see your profile, health, nutrition, session and check-in data and progress photos so they can coach you.
• Other members see only what you post in Community, your display name, and your leaderboard position if you turn that on. Progress photos are never shown to other members.
• Service providers that work for us under written contracts and may use your data only to provide services to us:
  
  • Supabase, which hosts our database, user sign-in and file storage (section 4)
  • Analytics and crash-reporting providers
  • Email, text-message and push-notification providers
  • Stripe, for website, session and class payments
  • Apple and Google, for in-app purchases
  • A third-party AI provider (section 5)
  • A nutrition database provider
• Partner gyms: if you train at a partner gym, we share only your name and booking time with that gym so you can get in.
• Legal reasons: we may disclose information if the law requires it, or to protect someone’s health or safety.
• Business transfers: if BodyFit is merged or sold, your information stays protected by this policy, and we’ll tell you before it becomes subject to a different policy.

Stripe handles your card details directly under its own privacy policy at stripe.com/privacy. We receive only limited details, such as card type, the last four digits and billing ZIP code.

You can ask us for a list of the specific companies we share your information with by emailing bodyfit360coaching@gmail.com.

4. Where your data is stored and how we protect it

Your account, health, nutrition, session and message data, and your photos, are stored with Supabase, Inc., our cloud database and storage provider. Our Supabase project is hosted in the United States. Supabase processes your data only on our instructions under a data processing agreement.

We protect your information by:

• Encrypting it in transit and at rest.
• Keeping progress photos and other personal files in private storage that only you and your coach can open.
• Using access rules so each member can reach only their own data, and limiting staff access to what’s needed to coach you.
• Reviewing the security practices of our providers.

No system is perfectly secure. If a security breach affects your personal information, we’ll notify you and the relevant authorities as the law requires. If you find a security problem, please tell us at bodyfit360coaching@gmail.com.

5. e-Manny and AI features

e-Manny and meal-photo scanning use AI from a third-party AI provider. When you use them, we send only what’s needed, such as your question or meal photo, your goals and targets, and recent logs.

We ask for your permission before you first use these features, and you can withdraw it anytime in Settings. The provider processes this data only on our behalf and does not use it to train its models.

AI answers and nutrition estimates can be wrong. Your coach has the final say on your plan.

6. Apple Health and Health Connect

If you connect Apple Health (iOS) or Health Connect (Android), we read only the data types you approve, such as steps, sleep duration and workouts, and we may save workouts you complete in BodyFit. We use this data only to provide your coaching and fitness features.

We never use it for advertising or marketing, never sell it and never share it with data brokers. You can turn off access anytime in your phone’s settings.

7. Cookies and our website

trainwithbodyfit.com uses essential cookies to keep you signed in and make the site work, and analytics to understand how the site is used. We don’t use advertising cookies or tracking pixels, and we don’t let third parties track you across other sites for advertising. If that ever changes, we’ll update this policy first.

Where the law requires, we ask for your consent before setting non-essential cookies. You can change your choice anytime in your browser settings.

8. Emails and text messages

If you request a free guide, register for an event or opt in during sign-up, we may send you tips, offers and updates by email. Every marketing email has an unsubscribe link.

If you give us your mobile number and agree to receive texts, we may text you about bookings, reminders and updates. Message frequency varies, and message and data rates may apply. Reply STOP to opt out or HELP for help. Consent to texts is never a condition of buying anything. We don’t share your mobile number with third parties for their own marketing.

You’ll still receive essential service messages, such as receipts, booking confirmations and account notices, while you have an account.

9. Consumer health data

Some US state laws, including Washington’s My Health My Data Act and Nevada’s consumer health data law, give extra protection to health data. We collect it only to provide the Service and only with your consent. We share it only with the people and providers in section 3 who need it to coach you or run the Service, and we ask for your separate consent before sharing it for any other purpose. You can withdraw consent or ask us to delete your health data at any time. For full details, see our Consumer Health Data Privacy Policy.

10. How long we keep your information

We keep your information while your account is active. After you delete your account, we delete or anonymize your personal information within 30 days, except:

• Purchase and tax records, which we keep for up to 7 years where the law requires.
• Records of an injury or incident during a session or class, which we keep for as long as the law requires.

If you only submitted a website form, we keep your contact details until you unsubscribe or ask us to delete them. Copies in Supabase backups are overwritten within 90 days. Community posts you delete are removed from the Service, but others may already have seen them.

11. Your choices and rights

• Delete your account: in the app under Settings › Account › Delete account, or at trainwithbodyfit.com/delete-account. This deletes your profile, logs, photos, messages and posts.
• Delete specific data: in the app under Settings › Account › Delete data, you can remove logs, photos or messages without closing your account.
• Download your data: in the app under Settings › Account › Download my data, or by emailing bodyfit360coaching@gmail.com.
• Access, correct, object or ask a question: email bodyfit360coaching@gmail.com.
• Marketing: unsubscribe from emails using the link in any email, and reply STOP to any text.
• Permissions: turn camera, photos, notifications and health access on or off in your phone’s settings.

US residents, including in Colorado, California and Washington, may have the right to access, correct, delete and port their information; to opt out of targeted advertising and sale (we do neither); and to withdraw consent for sensitive information such as health data.

We respond within 30 days, or 45 days where state law allows, and we won’t treat you differently for using your rights. We may need to confirm your identity before acting on a request. If we deny your request, you can appeal by replying to our decision email with “Appeal” in the subject. If we deny your appeal, you can contact your state attorney general.

Canceling a subscription and deleting your account are separate. Subscriptions bought through Apple or Google must be canceled in your App Store or Google Play account. Memberships and programs bought on our website can be canceled in your account at trainwithbodyfit.com or by email, subject to the notice periods in our Terms of Use and Cancellation Policy.

12. Users in the European Union, United Kingdom and EEA

BodyFit Coaching LLC is the data controller. We rely on these legal bases:

• Contract: to provide your account, program, coaching, sessions and classes.
• Explicit consent: for health and fitness data, progress photos, health screening answers, Apple Health or Health Connect, AI features and marketing messages. You can withdraw consent anytime in Settings or by emailing us.
• Legitimate interests: to keep the Service secure, prevent fraud and improve the app.
• Legal obligation: to keep tax and purchase records.
• Vital interests: to contact your emergency contact or emergency services if you’re hurt during a session or class.

You can access, correct, delete, restrict or port your information, object to processing, and complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

Your information is stored and processed in the United States, including by Supabase and our other providers. To protect it, we rely on the European Commission’s Standard Contractual Clauses and the UK addendum, included in our providers’ data processing agreements. EU and UK residents can contact us about data protection at bodyfit360coaching@gmail.com.

13. Children

The Service is for people 18 and older. We don’t knowingly collect information from anyone under 18. If you believe someone under 18 has an account, contact us and we’ll delete it.

14. Links to other services

The Service may link to Apple, Google, Stripe, Instagram or partner gyms. Their own privacy policies apply when you use them.

15. Changes to this policy

We’ll post updates on this page with a new “Last updated” date. Before material changes take effect, we’ll tell you in the app or by email.

16. Contact us

BodyFit Coaching LLC, Email: bodyfit360coaching@gmail.com Phone or text: 719-551-2175 – Website: trainwithbodyfit.com

Related policies: Terms of Use · Consumer Health Data Privacy Policy