Privacy Policy

Overview

This Privacy Policy explains how DR Coach processes personal data when you use the DR Coach application and related services (including the admin portal).

Data controller

The data controller is the organisation operating this DR Coach instance. If you need to exercise your rights or have questions, contact your coach/admin or the operator of this service.

What data we process

• Account data: email, name, role (e.g. Admin/Coach), authentication identifiers.
• Athlete data: name, surname, email, phone, date of birth (optional), avatar URL (optional), notes (optional).
• Training data: workouts, blocks, exercises, sets, labels (reps/weight/time/rest), coach notes, and session progress.
• Measurements: body measurements and related notes (if used in your plan).
• Custom fields: custom field definitions and values, if enabled by the coach/admin.
• Device and push tokens: push notification tokens and last-seen timestamps (if notifications are enabled).
• Media: uploaded images/videos and their URLs (if media upload features are enabled).

Why we process data

• To provide training plans and track progress.
• To allow coaches/admins to manage athletes, workouts, and measurements.
• To send operational communications (e.g. password reset emails) and optional notifications.
• To ensure security, prevent abuse, and maintain system integrity.

Legal basis

• Contract / service provision: to deliver the training service.
• Legitimate interests: security, fraud prevention, troubleshooting.
• Consent (where applicable): optional notifications or other optional features.

Authentication and security

DR Coach uses authentication tokens to keep you signed in and protect API access. Passwords are stored using a one-way hash.

Email and password reset

If you request a password reset, an email will be sent to the address associated with your account. The email may include a link back to the service.

Push notifications

If enabled, DR Coach may send push notifications to your device using your device push token. You can disable notifications from your device settings.

Cookies

This website does not use cookies or tracking technologies. If this changes in the future, this policy will be updated.

Sharing and processors

Data may be processed by service providers used to operate DR Coach (e.g. email delivery, push notifications, hosting, and storage). We do not sell personal data.

Retention

We keep data only as long as necessary for the purposes above, or as required by law. Coaches/admins may delete athlete data according to organisational policies.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your data, and to object to certain processing. Contact the service operator to make a request.

Changes

We may update this policy from time to time. The “Last updated” date will reflect the latest version.