Privacy Policy

Physiqly ("Physiqly", "we", "us", or "our") provides a training and nutrition coaching platform, available on the web and as mobile apps for iOS and Android, that connects fitness trainers with their clients and supports independent ("solo") self-tracking. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

We collect the following categories of information when you create an account and use the app:

• Account information: name, email address, password (stored as a salted hash, never in plain text), and your role (trainer or client).
• Health and fitness data:height, age, body-weight logs, step counts (entered manually or synced from Apple Health / Health Connect — see "Health data (HealthKit and Health Connect)" below), water intake, workout completions, exercise sets/reps/weights, personal records, and activity streaks. Coaching check-ins (for example energy, sleep, hunger, stress and digestion ratings and any notes you add), and information you or your trainer choose to record, such as injuries or dietary restrictions, may also be stored.
• Nutrition data: logged meals, macro and calorie targets, food entries, barcode-scanned food products (looked up via the Open Food Facts database) and food searches (looked up via the FatSecret database).
• Voice descriptions of meals: if you use the microphone to describe what you ate, the recording is sent to our speech-to-text provider, converted to text, and then discarded. Audio is never saved to your account or stored on our servers. Only the resulting text, and the meal you confirm from it, are kept. You can always type the description instead, and the microphone is only used while you are actively recording.
• Photos you ask the app to analyse: if you photograph a meal or a restaurant menu to get a nutrition estimate, the photo is sent to our AI provider for that estimate and is not stored by Physiqly.
• Photos and videos: progress photos and exercise form-check videos you or your trainer upload are stored privately and are not publicly accessible. Form-check videos are deleted automatically after 2 days. Profile pictures, and images you add to recipes or posts you publish, are stored so that they can be shown to others and are accessible to anyone with the link. If you are a trainer, transformation photos you choose to publish to your public marketplace listing are, by design, publicly visible.
• Messages and community content: chat messages between trainers and their clients (including structured requests like reporting pain or a missed workout), posts, comments, and reactions you share in trainer-run community groups, and recipes, workouts, days of eating and posts you choose to publish in Discover.
• Billing information: if you are a trainer with a paid subscription, we store your subscription details and invoices and, if you save a card for automatic payment, a token and the last digits of the card provided by our payment provider, Grow. Trainer-entered billing amounts for their own clients may also be stored. We never receive or store your full card number— card details are entered on Grow's payment page.
• Device and technical information:your device's time zone, and one-way hashed versions of your IP address, used only to prevent abuse of sign-in and public forms.
• Product usage events: records that a feature was used (for example, that a meal was logged or a check-in completed), without the content, to understand and improve the product.
• Push notification data: if you enable notifications, we store a push subscription endpoint and encryption keys (in a browser) or a device token (in the mobile app) so we can deliver notifications to your device.

If you use the Physiqly mobile app, you may choose to allow it to read your health data via Apple HealthKit (iOS) or Health Connect (Android). We request read access to four things only — steps, sleep, active energy burned, and workouts — and only for the purpose of showing your activity within the app and (if applicable) sharing it with your trainer. Of these, only your daily step count is sent to Physiqly's servers, and only when your trainer has set a daily steps goal for you; sleep, active energy and workouts are shown on your device and are not stored by Physiqly. The app does not write anything back to HealthKit or Health Connect.

• Health data is never used for advertising or marketing purposes, by us or anyone else.
• Health data is not sold, and is not shared with third parties except as described in "How we share information" below.
• You can revoke HealthKit/Health Connect access at any time from your device's system settings.
• Health data tied to your account is deleted when you delete your account, as described below.

• To provide the core service: tracking your training, nutrition, and progress, and connecting clients with their trainer.
• To provide the app's AI features: AI-written replies to clients' messages when their trainer has turned this on (labelled as AI in the chat), weekly progress reports, nutrition estimates from photos, menus and voice descriptions, suggestions about the rest of a client's day, message drafts and summaries for trainers, and spoken replies in the app's assistant.
• To process subscription billing for trainer accounts.
• To send transactional emails (e.g. invitations, password reset and billing messages) and, if enabled, push notifications.
• To protect the platform from spam and abuse (e.g. bot-detection on public forms).
• To respond to support requests.

We do not use any third-party analytics or advertising-tracking SDKs (such as Google Analytics, Meta/Facebook, or similar). We do not sell your personal information.

We share information only with the service providers needed to operate the app, and only for the purposes described here:

• Grow (Meshulam)— payment processing. Trainers' Physiqly subscriptions are charged through Grow. If you are a client paying your trainer through Physiqly, your card details go directly to Grow and are processed against your trainer's own merchant account; we never see or store your card number. Physiqly takes no commission on that payment.
• Resend — delivery of transactional emails.
• OpenAI — providing the AI features described above. Depending on the feature, this may include messages, check-ins, training, nutrition, progress and other coaching information, and photos or audio you choose to submit.
• Vercel — hosting of the app and its servers.
• Neon — our database hosting provider.
• Cloudflare R2 (object storage) — storage of photos, videos and other uploaded files.
• Cloudflare Turnstile — bot protection on our public forms.
• Google Firebase Cloud Messaging, Apple Push Notification service and your browser's push service — delivery of push notifications.
• Open Food Facts and FatSecret — food databases used to look up scanned products and food searches (food-search requests to FatSecret pass through a network relay we host with DigitalOcean).
• YouTube and Vimeo — exercise videos are played from these services.
• Your own trainer (if you're a client with one); within a shared community group, other members of that group; and, for content you choose to publish in Discover, other Physiqly users or the public, depending on where you publish it.

We do not share your information with advertisers or data brokers.

We retain your information for as long as your account is active. You can permanently delete your own account and associated data at any time from your account settings, without needing to contact support. Deletion is immediate and permanent — there is no grace period or recovery window. If you'd rather we delete your account for you, contact us at info@physiqly.fit.

Note: if you are a trainer, deleting your account unlinks your clients (they keep their own accounts and personal data as independent, solo users) but permanently deletes your community groups and your chat history with each client, since that content doesn't have an owner independent of you. You'll see this explained again before you confirm deletion.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can delete your account directly from the app. For any other request, contact us at info@physiqly.fit.

Physiqly is not directed to, and is not intended for use by, anyone under 16 years of age. We do not knowingly collect personal information from children under 16.

We use industry-standard measures to protect your information, including encrypted password storage, encrypted data in transit, and private (non-public) cloud storage for progress photos and form-check videos. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you through the app or by email. The "Last updated" date above reflects the most recent revision.

Questions about this policy or your data? Email us at info@physiqly.fit or visit our Support page.