GOFIT Coach — Privacy Policy

GOFIT is a personal fitness coaching service run by Mohammad Asad, Chattogram, Bangladesh. Contact: coach@gofit.coach.

The GOFIT Coach mobile app (iOS and Android), the client web area at coach.gofit.coach, and emails we send about your coaching.

• Account details: your name, email address and password. The password is stored only as a secure hash, never as plain text.
• Profile information you enter: age, height, weight and goals.
• Workout logs and exercise data.
• Body measurements and progress photos, if you upload them.
• Nutrition targets and food logs.
• Messages between you and your coach.
• Device information needed for notifications: push token, platform and app version.
• Basic technical logs (IP address, timestamps) kept by our hosting providers.

To deliver your coaching programme, let your coach see your progress, send push notifications and emails about your programme, keep the service secure, and fix problems.

We do not sell your data and we do not use it for advertising.

Your coach sees your data because that is the service. Beyond that, we share data only with the service providers that run the app:

• Supabase — our database, sign-in service and file storage (including progress photos). Hosted in Singapore.
• Render — hosts the API server that the app and website talk to, and keeps its technical logs.
• Vercel — hosts the website at coach.gofit.coach, and keeps its technical logs.
• Expo (EAS) — delivers push notifications to your phone and app updates to the installed app. Receives your push token, platform and app version.
• Apple — Apple Push Notification service delivers notifications on iPhone; the App Store distributes the iPhone app (and TestFlight, for testers).
• Google — Firebase Cloud Messaging delivers notifications on Android; YouTube plays exercise demonstration videos when you open one.
• Resend — sends our emails — invitations, password resets and messages about your coaching.
• GitHub — hosts the Android app download file.
• Cloudflare (cdnjs) — serves the PDF viewer script the app uses to display meal plans. It receives only the standard web request, not your account details.
• Open Food Facts — the public food database behind food search and barcode lookups. It receives only the search term or barcode, never your account details.
• Anthropic (Claude) — the coach may use an AI assistant to review coaching data (programmes, logged workouts, progress) to help plan your training. It reads data only; it cannot change your account or message you.
• WhatsApp — if your coach invites you over WhatsApp, that conversation is handled by WhatsApp under its own terms.

Nobody else.

Your account, coaching data and photos are stored with Supabase in Singapore. The other providers above may process data in the United States or the European Union while doing their part of the service.

For as long as your account is active. If you ask us to delete your account, we delete your data within 30 days, except anything we are required to keep by law.

You can see, correct, export or delete your data at any time. Email coach@gofit.coach from the email address on your account and we will respond within 14 days.

You can withdraw push-notification permission in your phone’s settings at any time.

The service is for adults aged 18 and over. We do not knowingly collect data from anyone under 18.

Data is encrypted in transit (HTTPS), passwords are hashed, and access is limited to your coach and the providers listed above.

We will post updates to this policy here and email you at your account address about material changes.

This policy is governed by the laws of Bangladesh.