Your data, kept close.

LAST UPDATED · July 17, 2026

OYS is a one-to-one online fitness-coaching app. To coach you well, your coach needs an honest picture of your training, nutrition, and body over time — so this app collects health and fitness information that is personal and, in places, sensitive. This policy explains exactly what we collect, why, where it lives, who can see it, and the control you have over it. We do not sell your data, and we never will.

1 · What we collect

The information you give us, and a little the app generates as you use it:

Account details — your name, email address, and the password you set (stored only as a salted hash; we never see it).
Health & fitness metrics — body weight, body measurements, sleep, daily steps and activity, training logs (sessions, sets, reps, loads), and the food / nutrition you log.
Check-in information — your weekly ratings (energy, hunger, sleep quality), free-text notes to your coach, and your progress photos(see “Progress photos” below).
Messages— the messages you and your coach exchange in the app’s chat, so you have a shared coaching conversation over time.
Onboarding answers — goals, training history, injuries, and lifestyle details you share so your coach can build your plan.
Basic technical data — the minimum needed to keep you signed in securely and to keep the service running.

2 · How we use it

We use your information only to deliver and improve your coaching:

To let your coach review your progress and build and adjust your plan.
To show you your own dashboard, trends, streaks, and check-in history.
To carry your messages between you and your coach.
To send you essential service messages (for example, when your plan is ready).
To keep your account secure and operate the app reliably.

We use it for nothing else. No advertising, no selling or renting your data, no sharing it with third parties to market to you.

3 · Storage & security

Your data is stored in Supabase (a managed Postgres database with file storage), encrypted at rest and encrypted in transit over HTTPS. Access is governed by row-level security (RLS): database rules that isolate each client’s rows so that, at the data layer itself, you can read only your own information. No security is perfect, but we design so that a client account cannot reach another client’s data.

4 · Progress photos

Progress photos are optional, and they are some of the most personal data in the app — we treat them that way. They are stored in a private, access- controlled storage bucket, are never public, and are served only through short-lived signed links to you and your coach. They are visible to you and your coach only. We never use your photos for marketing, testimonials, or anything else without your separate, explicit consent. You can delete a progress photo at any time, and deleting your account removes them.

5 · Who can see your data

You — your full record, in the app.
Your coach — the person coaching you, so they can do their job.
The services that run the app — a small set of providers process data on our behalf, only to operate OYS and under their own security and privacy commitments: Supabase(database & file storage), Vercel (app hosting), and Resend, which delivers your account and coaching emails. When you search foods, only the food name is sent to Open Food Facts (a public nutrition database) — never your personal data. None of these providers use your data for their own purposes.

That is the whole list. We disclose data outside it only if the law requires it (for example, a valid legal request).

6 · Data retention

We keep your information for as long as your account is active so your history and trends stay intact. When you delete your account, we remove your personal data — including progress photos — from the live system. Limited records may persist briefly in encrypted backups before they age out, and we may retain the minimum required to meet a legal obligation.

7 · Your rights

You are in control of your data. You can:

Access and review everything in your account at any time.
Correct or update your information directly in the app.
Export your data — download a machine-readable copy of your account data at any time from your account settings.
Delete your account in-app — use the Delete Account control in your account settings. It requires you to type-to-confirm, then permanently removes your account and personal data, including progress photos.
Contact us with any privacy request you can’t complete yourself.

Depending on where you live, you may have additional rights (such as data portability or the right to object). Reach out and we’ll help.

8 · Payments happen off-app

Payment for coaching is handled outside this app, directly between you and your coach. We do not collect or store your card numbers or bank details in OYS.

9 · Age requirement

You must be 17 or older to create an account and use the service. We do not knowingly collect information from anyone under 17.

10 · Changes to this policy

We may update this policy as the app evolves. If we make a material change, we’ll update the date above and, where appropriate, let you know in the app. Continuing to use OYS after an update means you accept the revised policy.

11 · Contact

Questions about your privacy or this policy? Email coachlohutson@gmail.comand we’ll get back to you.