DRAFT — replace this with copy reviewed by a professional before launch.

Your data, kept close.

LAST UPDATED · June 27, 2026

OYS is a one-to-one online fitness-coaching app. To coach you well, your coach needs an honest picture of your training, nutrition, and body over time — so this app collects health and fitness information that is personal and, in places, sensitive. This policy explains exactly what we collect, why, where it lives, who can see it, and the control you have over it. We do not sell your data, and we never will.

1 · What we collect

The information you give us, and a little the app generates as you use it:

Account details — your name, email address, and the password you set (stored only as a salted hash; we never see it).
Health & fitness metrics — body weight, body measurements, sleep, daily steps and activity, training logs (sessions, sets, reps, loads), and the food / nutrition you log.
Check-in information — your weekly ratings (energy, hunger, sleep quality), free-text notes to your coach, and your progress photos(see “Progress photos” below).
Onboarding answers — goals, training history, injuries, and lifestyle details you share so your coach can build your plan.
Basic technical data — the minimum needed to keep you signed in securely and to keep the service running.

2 · How we use it

We use your information only to deliver and improve your coaching:

To let your coach review your progress and build and adjust your plan.
To show you your own dashboard, trends, streaks, and check-in history.
To send you essential service messages (for example, when your plan is ready).
To keep your account secure and operate the app reliably.

We do not use your data for advertising, we do not sell or rent it, and we do not share it with third parties to market to you.

3 · Storage & security

Your data is stored in Supabase (a managed Postgres database with file storage), encrypted at rest and encrypted in transit over HTTPS. Access is governed by row-level security (RLS): database rules that isolate each client’s rows so that, at the data layer itself, you can read only your own information. No security is perfect, but we design so that a client account cannot reach another client’s data.

4 · Progress photos

Progress photos are optional, and they are some of the most personal data in the app — we treat them that way. They are stored in a private, access- controlled storage bucket, are never public, and are served only through short-lived signed links to you and your coach. They are visible to you and your coach only. We never use your photos for marketing, testimonials, or anything else without your separate, explicit consent. You can delete a progress photo at any time, and deleting your account removes them.

5 · Who can see your data

You — your full record, in the app.
Your coach — the person coaching you, so they can do their job.
Our infrastructure provider — Supabase stores the data on our behalf under its own security and privacy commitments. It does not use your data for its own purposes.

That is the whole list. We disclose data outside it only if the law requires it (for example, a valid legal request).

6 · Data retention

We keep your information for as long as your account is active so your history and trends stay intact. When you delete your account, we remove your personal data — including progress photos — from the live system. Limited records may persist briefly in encrypted backups before they age out, and we may retain the minimum required to meet a legal obligation.

7 · Your rights

You are in control of your data. You can:

Access and review everything in your account at any time.
Correct or update your information directly in the app.
Delete your account in-app — use the Delete Account control in your account settings. It requires you to type-to-confirm, then permanently removes your account and personal data, including progress photos.
Contact us with any privacy request you can’t complete yourself.

Depending on where you live, you may have additional rights (such as data portability or the right to object). Reach out and we’ll help.

8 · Payments happen off-app

Payment for coaching is handled outside this app, directly between you and your coach. We do not collect or store your card numbers or bank details in OYS.

9 · Age requirement

OYS is for adults. You must be 18 or older to create an account and use the service. We do not knowingly collect information from anyone under 18.

10 · Changes to this policy

We may update this policy as the app evolves. If we make a material change, we’ll update the date above and, where appropriate, let you know in the app. Continuing to use OYS after an update means you accept the revised policy.

11 · Contact

Questions about your privacy or this policy? Email coachlohutson@gmail.comand we’ll get back to you.