Privacy Policy

• Account data: name, email, password (stored only as a bcrypt hash — never in plain text), and role (coach or client).
• Coaching content: workout and diet plans, exercises, goals, body measurements, session schedules.
• Check-ins & progress: your answers to check-in forms and progress photos you upload.
• Messages: the in-app chat between a coach and their client, including any attachments.
• Payment records: the plan you chose and the receipt screenshot you upload. We never see or store card numbers — payments are made directly through Fawry or InstaPay.
• Technical data: basic logs (IP, timestamps) needed for security and to keep the service running.

• To provide the core service: let coaches build programs and clients follow them.
• To generate optional AI weekly summaries of a client's progress for their own coach.
• To process subscription requests and confirm payments.
• To secure the platform — detecting abuse, brute-force attempts, and fraud.

Your coaching data is visible only to you and the coach (or coaching team) you are connected to. A coach can only see their own clients. Clients can only see their own data. We enforce this on the server for every request, so one account can never reach another's data.

• Railway — application hosting.
• Neon — managed PostgreSQL database.
• Anthropic (Claude) — generates the optional AI progress summaries. Data sent for a summary is not used to train models.
• Expo — delivers mobile app updates and push notifications.
• Fawry / InstaPay — process your subscription payments directly.
• Google Fonts — serves the website's typefaces.

You can delete your account at any time from Settings → Delete account. This permanently removes your profile and associated data. You can also request a copy of your data, or correction of anything inaccurate, by contacting us below.

CoachFlow is not directed at children under 13. If a coach trains a minor, they are responsible for obtaining the necessary parental consent.