Privacy Policy

Physiqly ("Physiqly", "we", "us", or "our") provides a training and nutrition coaching platform, available on the web and as a mobile app ("TrainMe") for iOS and Android, that connects fitness trainers with their clients and supports independent ("solo") self-tracking. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

We collect the following categories of information when you create an account and use the app:

• Account information: name, email address, password (stored as a salted hash, never in plain text), and your role (trainer or client).
• Health and fitness data: height, age, body-weight logs, step counts, sleep duration and sleep stages, active energy burned, and recorded workouts (entered manually or synced from Apple Health / Health Connect — see "Health data (HealthKit and Health Connect)" below), water intake, workout completions, exercise sets/reps/weights, personal records, and activity streaks.
• Nutrition data: logged meals, macro and calorie targets, food entries, and barcode-scanned food products (looked up via the Open Food Facts database).
• Photos and videos: progress photos and exercise form-check videos you or your trainer upload. These are stored in a private cloud storage bucket and are not publicly accessible. If you are a trainer, transformation photos you choose to publish to your public marketplace listing are, by design, publicly visible.
• Messages and community content: chat messages between trainers and their clients (including structured requests like reporting pain or a missed workout), and posts, comments, and reactions you share in trainer-run community groups.
• Billing information: if you are a trainer with a paid subscription, we store an identifier for that subscription and which app store or payment provider it came from. Trainer-entered billing amounts for their own clients may also be stored. We never receive or store your card number — payment details are handled entirely by Apple, Google, or Paddle, depending on where you subscribed.
• Device and technical information: your device's time zone, and — for a public trainer-matching form — a one-way hashed version of your IP address, used only to prevent abuse of that form.
• Push notification data: if you enable notifications, we store a push subscription endpoint and encryption keys so we can deliver notifications to your device.

If you use the Physiqly mobile app, you may choose to allow it to read your health data via Apple HealthKit (iOS) or Health Connect (Android). We request read access to four things only — steps, sleep, active energy burned, and workouts — and only for the purpose of showing your activity within the app and (if applicable) sharing it with your trainer. The app does not write anything back to HealthKit or Health Connect.

• Health data is never used for advertising or marketing purposes, by us or anyone else.
• Health data is not sold, and is not shared with third parties except as described in "How we share information" below (for example, to generate an AI weekly report if your trainer has that feature enabled).
• You can revoke HealthKit/Health Connect access at any time from your device's system settings.
• Health data tied to your account is deleted when you delete your account, as described below.

• To provide the core service: tracking your training, nutrition, and progress, and connecting clients with their trainer.
• To generate AI-assisted weekly progress reports and narratives for clients whose trainer has enabled that feature.
• To process subscription billing for trainer accounts.
• To send transactional emails (e.g. email verification, password reset) and, if enabled, push notifications.
• To protect the platform from spam and abuse (e.g. bot-detection on public forms).
• To respond to support requests.

We do not use any third-party analytics or advertising-tracking SDKs (such as Google Analytics, Meta/Facebook, or similar). We do not sell your personal information.

We share information only with the service providers needed to operate the app, and only for the purposes described here:

• Grow (Meshulam)— payment processing. If you are a client paying your trainer through Physiqly, your card details go directly to Grow and are processed against your trainer's own merchant account; we never see or store your card number. Physiqly takes no commission on that payment.
• Resend — delivery of transactional emails.
• OpenAI — generating AI-written weekly progress reports for clients; this may include relevant health, fitness, and nutrition data for the report period.
• Cloudflare R2 (object storage) — private storage of progress photos and form-check videos.
• Cloudflare Turnstile — bot protection on our public trainer-matching form.
• Neon — our database hosting provider.
• Open Food Facts — an open nutrition database used to look up scanned food products.
• Your own trainer (if you're a client with one) and, within a shared community group, other members of that group, to the extent you choose to post or share information there.

We do not share your information with advertisers or data brokers.

We retain your information for as long as your account is active. You can permanently delete your own account and associated data at any time from your account settings, without needing to contact support. Deletion is immediate and permanent — there is no grace period or recovery window. If you'd rather we delete your account for you, contact us at info@physiqly.fit.

Note: if you are a trainer, deleting your account unlinks your clients (they keep their own accounts and personal data as independent, solo users) but permanently deletes your community groups and your chat history with each client, since that content doesn't have an owner independent of you. You'll see this explained again before you confirm deletion.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these rights directly from the app, or by contacting us at info@physiqly.fit.

Physiqly is not directed to, and is not intended for use by, anyone under 16 years of age. We do not knowingly collect personal information from children under 16.

We use industry-standard measures to protect your information, including encrypted password storage, encrypted data in transit, and private (non-public) cloud storage for photos and videos. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you through the app or by email. The "Last updated" date above reflects the most recent revision.

Questions about this policy or your data? Email us at info@physiqly.fit or visit our Support page.