Privacy Notice

Data we collect and why

• Account data (email address, password hash, sign-in provider ID) — to create and secure your account and let you sign in. Legal basis: performance of our contract with you.
• Workout data (rep counts, sets, rest times, confidence scores, form warnings, streaks, goals) — to provide tracking, history, trends and reports. Legal basis: contract.
• Food scan data (photos you submit, barcodes, parsed calories, sugar, sodium and other nutrition values, your edits and notes) — to identify products and log your intake. Legal basis: contract.
• Support messages — to answer your questions. Legal basis: contract and our legitimate interest in supporting users.
• Technical data (IP address, device and browser identifiers, error reports, basic usage telemetry) — for security, fraud prevention, debugging and improving the product. Legal basis: legitimate interests.
• Marketing communications — only where you have opted in. Legal basis: consent, which you can withdraw at any time.

Camera video used for rep detection is processed on your device in your browser and is not uploaded to us. Food photos you choose to scan are uploaded so they can be analysed and stored in your log.

Who we share data with

• Service providers and subprocessors — hosting, database, authentication, storage, AI model providers used for food analysis, error monitoring and support tooling. They process data only on our instructions.
• Paddle.com — our Merchant of Record for the sale of RepCoach Pro, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to protect legal rights.

We do not sell your personal data.

International transfers

Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.

Retention

We keep account, workout and food log data while your account is active. If you delete an entry it is removed from your log; if you close your account we delete or anonymise your data within 90 days, except where we must keep records longer for legal, tax or fraud-prevention purposes. Technical logs are kept for a short period, typically up to 12 months.

Your rights

Subject to applicable law, you have the right to access your data, correct it, request erasure, restrict or object to processing, receive a portable copy, and withdraw consent where processing is based on consent. If you are in the UK or EEA you may also complain to your supervisory authority. We respond to requests within one month.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, row-level database authorisation so you can only read your own records, and breached-password screening at sign-up.

Cookies and local storage

We use essential cookies and browser storage to keep you signed in, hold your session, and remember in-app preferences such as calibration settings. We do not use advertising cookies. Any analytics we use is limited to aggregate product usage. You can clear cookies and local storage in your browser settings, though the app may not function correctly without the essential ones.

Contact

For privacy questions or to exercise your rights, contact PushUp Coach AI through the support link in your account settings. Billing-related requests can also be raised with Paddle at paddle.net.