Privacy policy

Who we are

PocketAthlete ("we") provides a training and recovery app at pocketathlete.com. We are the data controller for the information described here. You can reach us at info@pocketathlete.com.

What we collect

Only what the app needs to function. In practice that is:

• Account details — your email address, and a name if you give one.
• Health and training data — daily check-ins covering sleep, fatigue, soreness and a body pain map; body weight and body-fat entries; training sessions, benchmark tests and nutrition logs.
• Video and photos — training clips and progress photos you choose to upload.
• Payment records — your subscription tier and status. Card details are handled by Stripe and never reach our servers.
• Referral source — if you arrived through an affiliate link, the code that brought you.

Health data, specifically

Pain, injury and body-composition entries are health data, which the law treats more strictly than ordinary personal data. We process it solely to give you the training and recovery guidance you asked for, on the basis of your explicit consent — given by entering it. You can withdraw that consent at any time by deleting the entries or your account.

We do not sell it, share it with advertisers, or use it to make automated decisions with legal or similarly significant effects. Your readiness score is guidance, not a decision about you.

Where your data goes

We keep the number of third parties deliberately small. As of the date above:

• Supabase — hosts the database, authentication and file storage. Data is held in the EU (eu-west-3).
• Cloudflare — runs the API that talks to the services below.
• OpenRouter — receives the text of AI coach requests so a model can answer them. This includes what you type into the coach and the goals, soreness areas and notes attached to a program request. It does not receive your email, name, videos or photos.
• Stripe — processes payments. They receive your email and payment details directly.
• GitHub Pages — serves the website itself.
• An email provider — sends reminders and account emails.

What happens to your videos

Video analysis runs entirely in your browser. Clips are never sent to an AI service or analysed on our servers — the pose model downloads to your device and the measurements are computed there. The file itself is stored privately so you can watch it back, readable only by your account.

Clips are deleted automatically after 14 days on the free plan, 60 days on Silver and 180 days on Gold. You can delete any clip yourself at any time, and doing so removes the file as well as the record.

How long we keep things

Training and health entries are kept while your account is open, because their value is the history. Delete your account and we delete them.

Videos and photos follow the retention periods above. Waitlist emails are kept until we launch or you ask us to remove you.

Your rights

Under UK and EU data protection law you can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, or ask for it in a portable format. Most of this you can do in the app directly. For anything else, email us and we will respond within one month.

You can also complain to the Information Commissioner's Office (ico.org.uk) if you think we have got something wrong. We would rather you told us first.

Security

Data is protected by row-level security in the database, meaning access is checked per row on every request rather than trusted from the app. Videos and photos sit in private buckets readable only by their owner. Payment card details never touch our systems.

No system is perfect. If you find a security problem, email us and we will take it seriously.

Cookies

We do not use advertising or analytics cookies, and there is no third-party tracker anywhere in the app — no Google Analytics, no advertising pixel, nothing that reports you to another company. The app stores your login session in your browser so you stay signed in, plus a referral code if you arrived through one. That is all.

How we measure the product

When you are signed in we record a small number of product milestones — that an account was created, that onboarding finished, that a check-in happened, that a paid feature was viewed, that checkout was opened or completed. We use them to find where the app confuses people, and nothing else.

These records hold the fact an event happened and its shape, such as which plan a button belonged to. They never contain your training data, your injuries, what you ate, or anything you typed. Signed-out visitors are not recorded at all, and we do not store any identifier on your device to follow you between visits.

Nothing is shared with anyone. Delete your account and these records go with it.

Children

The app is not intended for under-16s. If you are under 16, please do not sign up without a parent or guardian, and speak to a qualified coach before following any training plan.

Changes

If we change this policy materially we will tell you in the app before it takes effect.