Coachline

Privacy Policy

Last updated 17 September 2026

The short version

Who we are

Coachline is an iOS app for personal trainers and the people they coach. It's operated by Aius Group LLC, at 3845 Michigan Avenue, 2F, St. Louis, MO 63118. In this policy, "we" and "us" mean that operator, and "you" means anyone with a Coachline account, whether you use it as a trainer or as a client.

If you have a question about anything here, email hello@coachline.info.

What we collect

This list is meant to be complete. If we start collecting something that isn't on it, we'll update this page and say so.

Your account

Your profile

Health and fitness data

This is the core of what the app does, and it's the most sensitive category we hold.

Badges and personal records aren't collected separately. The app works them out from the workouts you've logged. The one exception is three badges that depend on what happened during a workout rather than what was saved from it — completing your trainer's plan, hitting a progressive-overload target, and finishing every set you planned — which are noted on that workout when you finish it.

Your settings

Images you share

When you share a workout card or a before-and-after comparison, the image is made on your phone and handed to the iOS share sheet. It isn't uploaded to us and we don't keep a copy. Where it goes after that — Messages, Instagram, your camera roll — is your choice, and those services' own policies apply. A photo you take for a workout card also stays on your phone.

Messages and things you send us

Technical data

The alert that tells you a rest has ended is scheduled on your phone by the app itself. It doesn't go through a server, and nothing about it is sent to us or to Expo.

Purchases

Files and spreadsheets you email us

If you email us — to bring training history over from another app, to send a spreadsheet, or to ask for help — we receive whatever you send. Depending on what you attach, that can include workout history, food and macro logs, body metrics, and, if you're a trainer moving your roster across, the same kinds of information about your clients.

We also receive the email itself: your address, the subject line, the message, and any attachments.

Where this data actually sits. Email you send us arrives in an ordinary email inbox, not in the app. That means the access rules described in this policy don't apply to it: it isn't scoped to a trainer, it isn't covered by the app's deletion flow, and it stays in that inbox until it's deleted by hand. If you'd rather your data stayed inside the app, use the app instead of email, and ask us before sending files.

You'll see this when you tap Import in the app: it asks you to send your file to hello@coachline.info. There's no automatic import yet — a person on our end reads your file and puts the data into your account by hand.

How we use it

We use your data to run the app you signed up for, and for the specific purposes below.

We do not use your data to build advertising profiles, and we do not run ads in Coachline.

Helping train automated coaching — optional, off unless you turn it on

We want to build a feature that can suggest training automatically — the kind of programming decisions a good trainer makes, available inside the app. To do that well, it needs to learn from real programming.

If you turn this setting on, we'll include your workout data in the set we use to build it. That means:

What we don't include

The training set is de-identified. It isn't joined to your identity, and it isn't joined to your health metrics. Your body metrics, food and macro logs, progress photos, messages, and check-in responses are not part of it.

What it's for, and what it isn't

The purpose is to make training recommendations better for the people using Coachline. We will not use this data for advertising, we will not sell it, and we will not use it to profile you.

Turning it on and off

The setting is off by default. Nothing is used for this unless you go into the app's settings and switch it on. You can switch it back off at any time, in the same place, and you don't have to give a reason. Turning it off stops us using your data for this going forward. To be straight with you about the limit of that: once a training set has been used to build a model, we can't pull your data back out of the model that resulted. What we can do, and will do, is leave you out of every training set from that point on.

Your choice here doesn't affect anything else. The app works exactly the same either way, and your subscription is unaffected.

Who can see your data

Your trainer

If you're a client, the trainer you joined can see the data you generate in the app: your logged workouts and how closely you followed the plan, your food and macro logs, your body metrics, including your weight, your progress photos, your check-in and onboarding responses, your answers to their onboarding questions, your profile, and the messages between the two of you. That's what makes coaching work, and it's the point of joining a trainer with an invite code.

If you'd rather a trainer didn't see this, you can leave their roster — there's a Leave roster button in your profile — or delete your account entirely. Leaving takes effect straight away: from that moment the trainer can no longer see your logged workouts and sessions, your body metrics, your progress photos, your food logs, your macro targets, your onboarding and check-in responses, your profile, or your chat thread with them.

To be precise about what leaving does: it takes their access away, it doesn't erase anything. Your data stays in your account and you can still see all of it. Your trainer keeps the workout templates they wrote, because those are theirs rather than yours. And it's reversible — there's an undo option immediately after you leave, and using it restores their access in full.

If you're a trainer: your own training

Trainers can log their own workouts, food, weight and progress photos. That data is yours alone. Your clients can't see it, other trainers can't see it, and it doesn't appear anywhere in your coaching tools. The only way anyone else sees it is if you share an image of it yourself.

Your trainer's other clients — only if you opt in

Coachline has a leaderboard shared among the clients of a single trainer. It is off unless you turn it on. If you opt in, the other clients on that trainer's roster can see your display name and your position on the leaderboard. They cannot see your logs, your body metrics, your photos, or your messages.

You can turn it off again at any time on the Leaderboard screen, and you'll stop appearing for other clients. The same applies to any challenge you choose to enter.

Everyone else

Nobody else. Other trainers can't see your data, and clients of a different trainer can't see it. There's no public profile and no public feed.

How photos are protected. Progress and daily photos are held in private storage. They aren't served from a public address: each time you or your trainer opens one, the app requests a temporary link that expires after an hour, and that request is checked against the same rules as everything else — only you, and a trainer whose roster you're currently on. If you leave that trainer's roster, their links stop working too.

Profile pictures and banners are the exception. Those are served from a public web address, because they're shown across your trainer's roster by design. Don't use one as a place to put anything private.

We can access data ourselves when we need to operate and support the service — for example, when you send us a problem report and we have to look at what happened.

Anything you email us is readable by whoever operates our inbox, and it isn't limited to your trainer. In practice that's one person: the operator of Coachline. Nobody else has access to that mailbox.

Your dataYouYour trainerOther clientsAdvertisers
Workouts and complianceYesYesNoNo
Food and macro logsYesYesNoNo
Body metrics, including weightYesYesNoNo
Progress photosYesYesNoNo
Messages and check-insYesYesNoNo
Answers to your trainer's onboarding questionsYesYesNoNo
Display name and leaderboard positionYesYesOnly if you opt inNo

Companies that run parts of the service

We use other companies to run pieces of Coachline. They handle data on our instructions and for these purposes only.

CompanyWhat it doesWhat it handles
Supabase Database, sign-in, and file storage, hosted in the United States Effectively everything in the app: your account, profile, health and fitness data, photos, and messages
Expo Delivering push notifications to your device Your device push token and the content of the notification itself. That is not just "you have a new message": it can include an excerpt of the message someone sent you, your daily macro targets as actual numbers, the name of a workout added to your plan, and — if you are a trainer — a client's name alongside the workout they just finished
RevenueCat Manages subscriptions Your subscription status and a purchase identifier
Apple Processes payment through the App Store Your payment details, under Apple's own privacy policy. We never see them.
Sentry Crash and error reporting Diagnostic information about failures in the app
Resend Sends transactional email Your email address and the contents of those emails
Cloudflare DNS, static hosting including this page, and email routing — mail sent to our address passes through Cloudflare on its way to our inbox Standard web request information when you load a Coachline web page, and any email you send us, including attachments, while it's in transit
Google Hosts the mailbox that receives email sent to hello@coachline.info. This is a Google Workspace account on our own domain, covered by Google's data processing terms for Workspace customers. Everything you email us, including attachments, stored under Google's terms for that account type
Open Food Facts Nutrition database, queried when you scan a barcode or search for a packaged food The barcode number or search term. Nothing that identifies you.
USDA FoodData Central US government food and nutrition database, queried when you search for a generic whole food The search term only. Nothing that identifies you.

Legal requests and business changes

We may disclose data if the law requires it, or to protect the safety and rights of our users. If Coachline is ever sold or transferred to another operator, your data would move with it, and we'd tell you before that happened so you could delete your account first if you preferred.

What we never do

We do not sell your personal information, and we don't share it with advertisers, ad networks, or data brokers.

How long we keep it

While your account is open, we keep your data so the app can show it to you and to your trainer. That's what makes progress over time useful.

Deleting your account and getting your data

Deleting your account

Open your profile and scroll to the bottom. There's a Delete account option there. To go through with it you have to type the word DELETE to confirm — deliberately, because it can't be undone.

Deleting removes your profile, your logs, your body metrics, your progress photos, your questionnaire answers, and your account itself. Messages go too, on both sides: when you delete your account, the messages you sent disappear from your trainer's copy of the conversation as well as your own.

If you're a trainer with clients, deleting your account doesn't delete your clients. They keep their accounts and everything they logged, and simply become unassigned — free to join another trainer. The workout templates and plans you wrote are yours, and they go with you.

Deleting your account doesn't delete email you've sent us, or the files attached to it — those sit in an inbox, outside the app. If you want those removed too, say so in your deletion request and we'll delete them by hand.

Deleting your account doesn't cancel your subscription. Subscriptions are managed by Apple, so you cancel through your Apple ID settings.

Getting a copy of your data

If you use Coachline as a client, you can export your workout history yourself. There's an export option in your profile that produces a spreadsheet with two sheets:

That covers workout history and nothing else. It doesn't include your profile or photos, body metrics, food logs, macro targets, chat messages, check-in and onboarding responses, or certification documents — and there's no self-serve export for trainers yet.

For any of those, for a period longer than 12 months, or for all of it together, email hello@coachline.info and we'll assemble it by hand and send it to you as a spreadsheet within 30 days. We may need to confirm you are who you say you are before we send it.

These rights are open to everyone using Coachline, not only people in California, the EU, or the UK.

Children

Coachline is for people aged 13 and over. It isn't directed at children under 13, and we don't knowingly collect data from them.

If we learn that an account belongs to someone under 13, we delete it and the data attached to it. If you're a parent or guardian and you think your child has an account, email hello@coachline.info and we'll take care of it.

Security

Some specifics about how Coachline is built:

Beyond that, the security of your data rests on what Supabase provides as our hosting and database platform. Supabase encrypts data in transit using TLS and at rest using AES-256, and is SOC 2 Type 2 compliant and ISO 27001 certified. Those are Supabase's certifications covering Supabase's platform — Coachline itself isn't SOC 2 certified or ISO 27001 certified, and we're not claiming otherwise.

We don't run security monitoring or access logging of our own on top of that. If there's ever a breach affecting your data, we'll tell you and the relevant authority within the timeframes the law requires.

No app or service is perfectly secure, and we're not going to claim otherwise. If you find a security problem in Coachline, tell us at hello@coachline.info.

Where your data is stored

Supabase, which holds the database, sign-in, and files, is hosted in the United States. Our other providers may also process data in the United States.

If you use Coachline from the European Economic Area, the United Kingdom, or Switzerland, that means your personal data is transferred to and stored in a country whose privacy laws are different from your own.

For data held by Supabase, that transfer is covered by the data processing agreement we've entered into with them, which incorporates the European Commission's Standard Contractual Clauses and, for transfers out of the UK, the ICO's International Data Transfer Addendum. RevenueCat, Resend and Cloudflare incorporate the same clauses.

We have a signed data processing agreement with Sentry covering crash diagnostics, on the same Standard Contractual Clauses.

Expo, which delivers push notifications, is the one provider we don't hold a separately signed agreement with. Expo has no standalone agreement to execute; instead its terms of service incorporate the Standard Contractual Clauses by reference, and we rely on those. We're naming it rather than leaving it implied, because notification content — which can include an excerpt of a message and your nutrition targets — passes through Expo on its way to your device.

California privacy rights

If you live in California, the CCPA as amended by the CPRA gives you specific rights over your personal information.

What we collect about you, in the law's categories

The sources are you, your trainer or client, and our service providers. The purposes are set out in How we use it.

Your rights

To exercise any of them, email hello@coachline.info. We'll respond within 45 days, and we'll tell you if we need longer. An authorized agent can make a request for you, with proof they're acting on your behalf.

EU and UK privacy rights

If you're in the European Economic Area or the United Kingdom, the GDPR and UK GDPR apply. The data controller is Aius Group LLC, at 3845 Michigan Avenue, 2F, St. Louis, MO 63118. We have not appointed a representative in the EU or UK under Article 27.

Why we're allowed to process your data

DataLegal basis
Account, profile, messages, notifications, subscription statusPerformance of a contract — we need this to give you the app you signed up for
Health and fitness data — workouts, food and macro logs, body metrics, progress photosYour explicit consent, under Article 9(2)(a). This is health data, and it needs a separate, higher standard of consent than everything else. You can withdraw it at any time.
Answers to your trainer's onboarding questions, where they include health informationYour explicit consent, under Article 9(2)(a), given by answering. You can ask us to delete your answers at any time.
Appearing on your trainer's leaderboardYour explicit consent, given by turning the setting on, and withdrawn by turning it off
Using workout data to train automated coachingYour explicit consent, given separately by turning on the setting described above, and withdrawn by turning it off
Files and health data you email usYour explicit consent, under Article 9(2)(a) — you give it by choosing to send the file. Because you can't withdraw an email once it's sent, the practical remedy is to ask us to delete it, which we'll do.
Crash diagnostics, security, and abuse investigationOur legitimate interests in keeping the app working and safe
Billing and tax recordsLegal obligation

If you're a trainer sending us data about your clients

When you email us a file containing your clients' information, you're passing us health data about people who haven't dealt with us directly and can't consent through this policy. You're responsible for having a lawful basis to share it and for telling those clients that you did. If you aren't sure you have that, don't send the file — ask us and we'll find another way.

Withdrawing consent doesn't undo processing we did while the consent was in place. Withdrawing consent for health data means we can no longer run the core of the app for you, so in practice that goes hand in hand with deleting your account.

Your rights

Email hello@coachline.info to exercise any of these. We'll respond within one month, and we'll tell you if a complex request needs longer.

Changes to this policy

When we change this policy, we'll update the date at the top of the page.

If a change matters — new data collected, a new company handling it, a new purpose — we'll tell you in the app or by email rather than quietly editing the page. If a change affects your health data or the automated coaching setting, we'll ask you again instead of assuming your earlier answer still applies.

Contact us

Questions, requests, complaints, or anything about this policy: hello@coachline.info.

Post: Aius Group LLC, 3845 Michigan Avenue, 2F, St. Louis, MO 63118

This policy is governed by the laws of the State of Missouri.