Privacy Policy

Your Personal Trainer (“the app”, “we”, “us”) is operated by Charles James Blundell, a sole trader based in Tasmania, Australia. Contact: cblundell38@gmail.com.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy explains what we collect, why, who we share it with, and your rights.

Account details. Your email address. If you sign in with Google, Google also gives us your name.

Your training profile. Your goal, training experience, how often and how long you train, where you train and what equipment you have, exercises you like or want to avoid, and the days you train.

Health information. Your bodyweight, height, age and sex if you provide them, and any notes you give us about injuries or physical limitations, and your answers to the optional pre-workout check-in about sleep, soreness and joint pain. This is “sensitive information” under the Privacy Act — see section 3.

Your training records. The plans the app generates for you, the sets, weights, reps and times you log, and your effort ratings.

Coach messages. The questions you ask the AI coach. Your conversation is stored on your own device, and each message is sent to our AI provider to generate a reply. We record the time of each coach request to apply usage limits, but we do not keep a copy of your messages on our servers.

Subscription details. Your trial end date, whether you have a subscription, which plan, and when it renews. Your card details are collected by Stripe directly — we never receive or store your full card number.

Technical information. Our hosting providers keep standard server logs, which can include your IP address, browser type and the time of a request, for security and fixing faults. The app stores data in your browser to keep you signed in and remember where you were. We don't use advertising or tracking cookies. We count visits to each page with Vercel Web Analytics, which doesn't use cookies and doesn't identify you.

We only collect health information with your consent, and only what's reasonably necessary to give you a safe and suitable plan — for example, steering exercise choices away from a sore knee.

Providing it is optional. If you leave it out, the app still works, but your plan won't be able to take those details into account. You can withdraw your consent at any time by asking us to delete the information.

We never use health information for marketing, and we never sell it.

Almost everything comes directly from you, when you answer the setup questions, log workouts or use the coach. We also receive your name and email from Google if you choose to sign in with Google, and payment status from Stripe when you subscribe.

• to create your account and keep you signed in;
• to build your training plan and adjust your targets as you log workouts;
• to let the AI coach give answers that are relevant to your plan, profile and recent training;
• to run your free trial and subscription, and take payments;
• to send you account emails, such as sign-in codes, a reminder before a yearly subscription renews, and notices about payments or changes to our terms;
• to keep the app secure, apply fair-use limits and fix problems; and
• to meet our legal obligations.

We don't sell personal information, we don't show ads, and we won't send you marketing emails unless you've agreed to receive them. Any marketing email would include a way to unsubscribe.

The app uses computer programs to make some decisions without a person reviewing them:

• Your training plan — which exercises, sets, reps and rest you're given — is generated from your goal, experience, schedule, equipment, preferences, age and any injury notes.
• Your targets are adjusted automatically from the weights, reps and effort ratings you log.
• If you use the pre-workout check-in, poor sleep or heavy soreness takes a set off each exercise that day, and stops a tough session lowering your targets.
• The AI coach's replies are generated from your question, your profile, your plan and your recent workouts.
• Whether you can use the app is decided automatically from your trial end date and subscription status.

These are suggestions about your training, and you can always choose not to follow them. If you think a decision about your access or billing is wrong, email us and a person will look at it.

We use trusted service providers to run the app. They only receive the information they need to do their job for us:

• Supabase — stores your account, profile and training data, and sends sign-in emails.
• Vercel — hosts the app, runs its servers and counts page visits.
• Anthropic — generates the AI coach's replies from your message and the training details sent with it.
• Stripe — processes subscriptions and payments, and emails receipts and yearly renewal reminders.
• Google — sends our account emails, such as sign-in codes, through Gmail, and handles sign-in if you choose to sign in with Google.

We may also disclose information if the law requires it, for example in response to a lawful request from a government authority.

Several of these providers are based in, or store data in, other countries. Your information is likely to be disclosed to recipients in the United States, and in Singapore, where our database is hosted.

We choose established providers that are bound by their own privacy and security commitments, and we remain responsible under Australian law for how your information is handled.

• All information is encrypted in transit between your device and our servers.
• Our database is set up so that each account can only read its own information.
• Payment details are handled by Stripe, and never stored by us.
• Access to the keys that run the app is restricted, and requests are rate-limited to prevent abuse.

No system is completely secure. If a data breach is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.

We keep your information for as long as you have an account. When you delete your account in Settings, your personal information is deleted immediately; if you ask us by email instead, we'll do it within 30 days. Either way, we keep only records we are required by law to keep, such as payment records needed for tax purposes, and copies in routine backups are removed as those backups expire.

You can delete your account and all your information yourself at any time, in Settings. You can also ask for a copy of the personal information we hold about you, or ask us to correct or delete it, by emailing cblundell38@gmail.com. We'll need to confirm an email request comes from you.

We'll respond within 30 days and there's no charge. If we ever can't do what you ask, we'll explain why in writing.

The app is for people aged 16 and over. We don't knowingly collect information from anyone under 16, and if we learn we have, we'll delete it. If you are 16 or 17, we recommend involving a parent or guardian, particularly before sharing health information or subscribing.

We will comply with the Children's Online Privacy Code under the Privacy Act once it takes effect, and will update this policy to reflect it.

If you're concerned about how we've handled your personal information, please email us at cblundell38@gmail.com with the details. We'll respond within 30 days.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner.

We'll update this policy when the way we handle personal information changes, and change the date at the top. If a change is significant, we'll email you before it takes effect. Our Terms of Service explain the rest of how the app works.