Privacy Policy

Fitness Coach (coach.ndibestudio.co.uk) is operated by Ndibe Studio. This page explains what personal data we collect, why, and what rights you have over it under UK GDPR.

1. Data you give us directly

When you create an account and use the site, we hold:

• Account details — your name, email address and, if you sign in with Google, your Google profile image. If you sign in by email link instead, we only ever see the email address you enter.
• Profile & plan data — your fitness goals, available equipment and experience level, if you fill these in, plus any workout plan you generate or save.
• Injuries or physical limitations — an optional free-text field used by AI Coach to avoid unsuitable exercises. This is health data (a "special category" under UK GDPR), so we only store it if you type something into that field and separately confirm you want it used this way — it's never required to use the site.
• Billing status — if you subscribe to Premium, we store your Stripe customer/subscription IDs and whether your subscription is active, plus the date you accepted the immediate-access waiver described in our Refund & Cancellation Policy. We never see or store your card or bank details — Stripe handles those directly.
• Contact form messages — the name, email and message you submit via /contact.

2. Data we don't collect

We don't run analytics, advertising or tracking scripts, and we don't use third-party cookies. The only cookie the site sets is the one that keeps you signed in.

3. Why we process it, and the legal basis

Account, profile and plan data: to provide the service you've asked for (contract). Billing data: to run your subscription and meet our accounting obligations (contract and legal obligation). Injuries/limitations: only with your explicit, separate consent (Article 9 consent) — you can decline this and still use the free parts of the site. Contact messages: our legitimate interest in responding to you.

4. Who we share it with

We use a small number of processors to run the service:

• Google — if you choose Google sign-in.
• Resend — to send magic-link sign-in emails.
• Stripe — to process Premium subscription payments and hold your payment details.
• Anthropic — AI Coach sends your goals, equipment, experience level and (if provided) injuries/limitations to Anthropic's API to generate your personalised plan.

Some of these providers process data outside the UK/EEA (for example, in the US). Where that happens, they do so under standard contractual clauses or an equivalent safeguard required by UK GDPR. We don't sell your data or share it for advertising.

5. How long we keep it

We keep your account and plan data for as long as your account is open. Contact form messages are kept only as long as needed to resolve your query. If you close your account, we delete your personal data except where we're required to keep billing records for tax/accounting purposes.

6. Your rights

Under UK GDPR you can ask us to access, correct, export or delete your personal data, or to stop using your injuries/limitations data at any time. You can export your data or delete your account yourself from your account page at any time. Deleting your account cancels any active subscription immediately and removes your profile and saved plans; it can't be undone. For anything else -- a correction, or if you'd rather we action a request manually -- get in touch via /contact. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data.

7. Children

Fitness Coach isn't directed at children and we don't knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we'll remove it.

8. Changes

We may update this policy as the product changes. If we make a material change, we'll update the date at the top of this page.

Contact

Questions about this policy or your data: get in touch. See also our Terms of Service and Refund & Cancellation Policy.