Privacy Policy
Last updated 25 July 2026
CoachFlat is an iPhone app for personal trainers and their clients. This policy explains what the app collects, why, who else processes it, and how to get rid of it. It covers the CoachFlat app and coachflat.app.
The short version
- We do not track you across apps or websites, and we run no advertising.
- We do not sell or share your personal data, and never have.
- We do not see your clients' payment details — Stripe handles those, and the money goes to the coach's own Stripe account, not ours.
- You can delete your account and all its data from inside the app, at any time.
What we collect
This table matches the privacy disclosures in the app's App Store listing.
| Data | Why | Linked to you? |
|---|---|---|
| Email address | To create and sign in to your account | Yes |
| Name (the display name you choose) | So your clients see who their coach is, and you see who's on your roster | Yes |
| Fitness data — programs you write, workouts assigned to you, and the sets, reps, weights and RPE you log | It is the product: to show today's workout, track progress, and let a coach see a client's compliance | Yes |
| Crash reports and performance data | To find and fix crashes and slowness | No |
We do not ask for or collect your date of birth, gender, height, weight, body measurements, health records, location, or contacts. CoachFlat does not read from or write to Apple Health.
Who processes it
- Supabase — hosts the database and handles sign-in. Your account and training data are stored on Supabase infrastructure in the United States (us-east-2). Row-level security rules restrict every record so that you can only read your own data, and a coach can only read the data of clients linked to them.
- Sentry — receives crash and performance reports. These are not linked to your identity and are not used for tracking.
- Stripe — processes payments from clients to coaches. Card details are entered on Stripe's own pages and never reach CoachFlat's servers. Payments go directly to the coach's Stripe account; CoachFlat does not hold funds and takes no percentage.
- Apple — processes the coach subscription through in-app purchase. Apple tells us whether a subscription is active; Apple does not give us your payment details.
Each of these is a processor acting on our instructions. We do not sell data to anyone, and we do not share it with advertisers or data brokers.
What your coach can see
If you join a coach using their invite code, that coach can see your display name, the programs they assign you, and the workouts and sets you log against those programs. That is the purpose of the product, but it's worth being explicit about. Your coach cannot see your email password or any payment details.
Coaches can only see clients who have accepted their invite. No coach can see another coach's clients or programs.
Data stored on your device
The app stores some data locally on your iPhone: your sign-in session, your settings (units, haptics, which mode you last used), a queue of logged sets waiting to sync when you're offline, and a small summary of today's workout so the home-screen and lock-screen widgets can display it. The widget summary is removed when you sign out. None of this local data is transmitted anywhere except the syncing of your logged sets to the database described above.
How long we keep it
Your account data is kept for as long as your account exists. When you delete your account, your profile, programs, assignments, logged workouts and sets are deleted from the database. Crash reports, which are not linked to you, are retained by Sentry on their own schedule and cannot be traced back to an individual account.
Records that we are legally required to keep — for example, transaction records held by Stripe or Apple for tax and accounting purposes — are retained by those companies under their own policies.
Deleting your account
Open the app, go to Settings → Delete Account, and confirm. This permanently deletes your account and its data, and cannot be undone. You don't need to email anyone or wait for us to action it.
Children
CoachFlat is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we'll remove it.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Deletion is built into the app as described above. For anything else, contact us at the address below and we'll respond.
Security
Data is encrypted in transit using HTTPS. Access to your records is enforced at the database level by row-level security rules, not merely by the app's UI. No system is perfectly secure, and we can't guarantee absolute security, but we don't store payment card details at all — that risk sits with Stripe, who specialise in it.
Changes to this policy
If we change this policy we'll update the date at the top of this page. If a change materially affects how we handle your data, we'll tell you in the app before it takes effect.
Contact
Questions about this policy or your data: privacy@coachflat.app.