1. WHO WE ARE
BioMech Coaching ("we", "us", "our") operates the BioMech Coaching platform at biomechcoaching.com. We provide personalised fitness and nutrition planning services. You can contact us at coach@biomechcoaching.com.
2. WHAT DATA WE COLLECT
We collect the following information when you use BioMech Coaching:
- Account information — email address and password (or OAuth provider details if you sign in with Google or X/Twitter).
- Body metrics — age, sex, height, weight, body fat percentage, and circumference measurements you provide.
- Training data — your goals, training days, available equipment, injuries, workout logs, and exercise history.
- Nutrition data — diet type, food preferences, meals per day, and check-in logs.
- Progress photographs — if you choose to upload them. Photo uploads are entirely optional. See Section 5 for full details on how we handle uploaded images.
- Usage data — standard web logs including IP address, browser type, and pages visited.
3. HOW WE USE YOUR DATA
Your data is used exclusively to:
- Generate your personalised workout and nutrition plans.
- Track your progress over time and improve plan accuracy.
- Display your progress photos to you within the platform.
- Operate, maintain, and improve the platform.
- Send you account-related emails (e.g. email confirmation, password reset).
We do not sell your data to third parties. We do not use your data for advertising.
4. THIRD-PARTY SERVICES
We use the following third-party services to operate the platform:
- Supabase — database, authentication, and file storage. Your data and uploaded images are stored on Supabase infrastructure.
- OpenAI — your profile data (not your photos) is sent to OpenAI's API to generate your personalised plan. OpenAI does not use API data to train its models.
- Google / X (Twitter) — if you sign in with these providers, they share your name and email address with us under their respective privacy policies.
- Stripe — payment processing. We do not store your payment card details; these are handled entirely by Stripe.
5. USER-UPLOADED PHOTOGRAPHS
The Service includes an optional progress photo feature. The following applies to all images you upload:
- Voluntary. Uploading photos is entirely optional and is not required to use any core features of the Service.
- Purpose. Photos are stored solely to display your visual progress over time within your own account. They are not analysed, processed by AI, or used for any other purpose.
- Not sold or shared. Your photographs are not sold, licensed to third parties, used in advertising, used to train machine learning models, or shared with anyone outside BioMech Coaching and its infrastructure providers.
- Security measures. We apply reasonable technical security measures to protect stored data. However, no system is completely secure. You upload photographs at your own risk.
- Disclaimer of liability. BioMech Coaching expressly disclaims all liability for any unauthorised access to, disclosure of, loss of, or exposure of uploaded photographs resulting from a data breach, security incident, or any other cause outside our direct control. By uploading images, you accept this risk.
- Deletion. Your photographs are deleted when you delete your account. You may also delete individual photos at any time from within the platform.
If you are concerned about the sensitivity of your images, we recommend you do not upload them.
6. DATA SECURITY
We implement reasonable technical and organisational measures to protect your personal data, including encrypted data transmission (HTTPS), access controls, and secure cloud infrastructure.
Despite these measures, no internet transmission or electronic storage system is 100% secure. We cannot guarantee the absolute security of your data. In the event of a data breach that is likely to affect your rights or freedoms, we will notify you as required by applicable law.
7. DATA RETENTION
We retain your data for as long as your account is active. You may request deletion of your account and all associated data — including uploaded photographs — at any time by contacting us at coach@biomechcoaching.com. We will action deletion requests within 30 days.
8. YOUR RIGHTS
Depending on your location, you may have rights including:
- The right to access the personal data we hold about you.
- The right to correct inaccurate data.
- The right to request deletion of your data.
- The right to data portability.
- The right to object to or restrict certain processing of your data.
To exercise any of these rights, contact us at coach@biomechcoaching.com.
9. COOKIES
We use essential cookies only — specifically, authentication session cookies required to keep you logged in. We do not use tracking or advertising cookies.
10. CHANGES TO THIS POLICY
We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on the platform. Continued use of BioMech Coaching after changes constitutes acceptance of the updated policy.