Privacy Policy

Last updated: 28 September 2026 · Draft — under legal review

Who we are

BELL PT ("we", "us") provides coaching software that connects personal trainers with their clients via our website and mobile app. The data controller is [YOUR LEGAL ENTITY / NAME], contactable at hello@bellpt.co.uk.

What we collect

  • Account data — name, email, password (stored as a hash by our authentication provider, Supabase).
  • Training data — programmes, workout logs, habits, check-in answers, and messages between you and your trainer.
  • Health-related data — body metrics (weight, measurements) and progress photos that you or your trainer choose to record. This is sensitive data: we store it only to provide the service to you and your trainer, and never use it for anything else.
  • Invite requests — if you ask for an invite, the name, email and details you give us, used only to reply to you.
  • Technical data — error reports (Sentry) and anonymous page-view statistics (Vercel Web Analytics, which uses no cookies and doesn't identify you).
  • Billing data (trainers only) — handled by Stripe; we never see or store card numbers.

How we use it

To run the service: showing your programme, tracking progress, messaging, and generating coaching summaries. AI-assisted features (such as progress review drafts) send relevant training statistics to Anthropic's Claude API to generate text; Anthropic does not train models on this data.

Who can see your data

Your trainer sees the training and health data recorded in your coaching relationship. We do not sell data or share it with advertisers. Our subprocessors: Supabase (database & authentication), Vercel (hosting), Stripe (payments), Anthropic (AI text generation), Resend (email delivery), Sentry (error monitoring, EU region).

Your rights

You can export everything we hold about you (Settings → Export my data) and permanently delete your account and all associated data (Settings → Delete account) at any time. Under UK GDPR you also have rights of access, rectification, and complaint to the ICO. Contact hello@bellpt.co.uk for anything not covered in-app.

Retention & security

Data is kept while your account exists and deleted when you delete your account. Data is stored in the EU/UK region (AWS eu-west-2 via Supabase) and encrypted in transit.

Cookies

We only use cookies that are strictly necessary to keep you signed in. Your browser may also remember small preferences (such as a hidden checklist) on your device. We use no advertising or tracking cookies, and our analytics are cookie-free — so there's nothing to opt in to.