Privacy Policy

01

Who We Are

Coachri ("we", "us", "our") is an AI-powered fitness coaching application operated by an independent developer based in the EU.

For privacy matters, you can contact us at: support@coachri.com

As we are based in the EU, this Privacy Policy is designed to comply with the General Data Protection Regulation (GDPR) and applicable EU data protection law.

02

What Data We Collect

Data You Provide Directly

• Fitness profile: age, weight, height, fitness goal, fitness level
• Workout preferences: training days, gym or home preference
• Nutrition data: calorie targets, meal logs, food entries
• Body weight logs and personal bests
• AI coach conversation history
• Language preference

Data Collected Automatically

• App usage patterns (anonymous, aggregated)
• Crash reports and error logs (no personal data included)
• Subscription status via RevenueCat (see Section 5)

Data We Do NOT Collect

• Location data
• Contact lists or address books
• Camera or microphone access (beyond optional profile photo)
• Any data from other apps on your device
• Payment card details (handled entirely by Apple or Google)

03

How We Use Your Data

We use your data exclusively to provide and improve Coachri:

• To generate personalised workout and meal plans using AI
• To power the AI coach with context about your fitness profile
• To track your progress (workouts, meals, weight, personal bests)
• To enforce subscription tiers (free vs. Pro)
• To sync your data across devices (when Supabase cloud sync is enabled)
• To respond to support requests

We do not use your data for advertising, profiling for third parties, or any purpose unrelated to providing the Coachri service.

04

Legal Basis for Processing (GDPR)

Under GDPR, we process your data on the following legal bases:

• Contract performance — to deliver the service you signed up for
• Legitimate interests — to improve the app and fix bugs
• Consent — for any optional features (e.g. profile photo)

Health-related data (weight, fitness goals) is processed under your explicit consent, given during onboarding.

05

Third-Party Services

Anthropic (AI Coach)

Your AI coaching conversations are processed by Anthropic's Claude API. Messages are sent through a secure server-side proxy — your Anthropic API interactions are never made directly from your device. Anthropic's privacy policy applies to message content. We do not share your personal profile data with Anthropic beyond what is necessary to answer your coaching question.

RevenueCat (Subscriptions)

Subscription management is handled by RevenueCat. RevenueCat receives an anonymous user ID and your subscription status. No health or fitness data is shared with RevenueCat. See RevenueCat's Privacy Policy.

Apple App Store / Google Play Store

All payments are processed entirely by Apple or Google. We never receive or store your payment card details. Apple and Google's respective privacy policies govern payment processing.

Supabase (Backend Infrastructure)

If you create an account, your profile and fitness data is stored on Supabase's infrastructure (hosted in the EU). Supabase is GDPR-compliant. See Supabase's Privacy Policy.

06

Data Storage & Security

Your data is stored in two ways:

• Locally on your device — fitness data is stored on-device by default using encrypted local storage
• Cloud (Supabase) — if you create an account, data is synced to our EU-hosted Supabase database with Row Level Security, ensuring only you can access your data

We implement appropriate technical and organisational security measures including encrypted connections (TLS), server-side API key management, and access controls.

No system is 100% secure. If you become aware of any security issue, please contact us immediately at support@coachri.com.

07

Data Retention

We retain your data for as long as your account is active. If you delete your account:

• All personal data is deleted within 30 days
• Anonymised, aggregated usage statistics may be retained
• Subscription records may be retained as required by applicable tax law (typically 7 years)

08

Your Rights (GDPR)

If you are located in the EU or UK, you have the following rights:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Restriction — request we limit how we process your data
• Objection — object to processing based on legitimate interests
• Withdraw consent — at any time, for consent-based processing

To exercise any of these rights, email support@coachri.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority in the EU.

09

Children's Privacy

Coachri is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@coachri.com and we will delete it promptly.

Users must be at least 13 years old to use Coachri.

10

International Transfers

Your data may be processed outside the European Economic Area (EEA) in the course of AI processing (Anthropic, US-based). Where this occurs, we ensure appropriate safeguards are in place in accordance with GDPR requirements, including Standard Contractual Clauses where applicable.

11

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the app or by email. The "Last updated" date at the top of this page reflects the most recent revision.

Continued use of Coachri after changes are posted constitutes your acceptance of the updated policy.

12

Contact Us

For any privacy-related questions, requests, or concerns: