Privacy Policy

Last updated: 11 July 2026

What we collect

• Account data - name, email, password (stored as a bcrypt hash, never in plain text).
• Training data - programs, logged workouts, check-ins, body measurements, progress photos and metrics you or your coach record.
• Messages - conversations between you and your coach or groups.
• Payment metadata - amounts, status and gateway references. Card numbers never touch our servers; they go directly to Stripe, Razorpay or PayPal.

How it's protected

• Every database query is scoped to your coach relationship by row-level security, enforced by the database itself.
• Photos, videos and connected-gateway credentials are envelope-encrypted with AES-256-GCM before they reach storage.
• Traffic is encrypted in transit; backups are encrypted and restore-tested monthly.

Who sees your data

Your coach sees the training data of their clients. Group members see what's shared in the group. Nobody else - we do not sell data, run ads, or share data with third parties beyond the subprocessors needed to run the service (hosting, object storage, email delivery and the payment gateways you or your coach connect).

Your rights

• Export - download everything we hold about you in one click from your profile.
• Deletion - delete your account yourself from your profile; sign-in is disabled immediately.
• Correction - edit your details in the app, or ask us for help.

Retention

We keep your data while your account is active. After deletion, residual copies leave rotating backups within 35 days.

Contact

Data questions or requests: privacy@rambo.app