Legal
Privacy policy
Last updated
Draft. This policy is pending review and may change before PT Wizard opens to everyone.
1Who we are
PT Wizard is a coaching app for personal trainers and their clients. It is operated by Kamil Dabek.
Privacy questions and requests: Contact details are being added.
2Who is responsible for your data
PT Wizard is the controller for coach accounts, and for what you send through the forms on PT Wizard's public pages, such as booking a free intro or asking for a coach's free guide on their profile page. We pass what you send to the coach you sent it to, so they can reply.
Your coach is the controller for the data they collect about you as their client: bookings, workouts, measurements, progress photos and your answers to their questions. PT Wizard stores and processes that data on your coach's behalf and only to run the app for them. For those questions, your coach is your first contact; we help them answer.
3What we collect
- Account details: name, username or email, a password (stored only as a salted hash), and whether you are a coach or a client. If you log in with Google, we also store your Google account id and the email Google gives us.
- Bookings and credits: the sessions you book, move or cancel, your session balance, and the payments your coach records (amount and method, not card details).
- Training: your programs and the workouts you log (exercises, sets, reps, weights, notes).
- Body measurements: weight and waist, if you add them.
- Progress photos: front, side and back photos you take in the app. These count as health-related data. We only store them after you give explicit consent when you first log in, and only you and your coach can see them.
- Your answers to your coach: the questions you answer when you start, including your goal, experience, and any injuries or health notes you choose to share.
- Free intro and guide forms: name, email, your goal and any note you add, and the time you picked.
- Technical data: server logs (such as IP address, time and the page requested) to keep the service running and secure.
Cookies and storage on your device. We use only what the app needs to work: a session cookie that keeps you logged in, a cookie that remembers if you hide progress photos on screen, and storage in your browser that keeps a workout safe while you are offline. There are no analytics or advertising cookies, and no tracking by third parties.
4Why we use it, and on what legal basis
Running your account and the app (bookings, programs, workouts, profile pages)
- Legal basis
- Contract: we need it to provide the service you signed up for
Progress photos, injuries and other health notes
- Legal basis
- Your explicit consent, given in the app. You can withdraw it at any time
Replying to a free intro booking or sending a coach's guide you asked for
- Legal basis
- Your request, and steps before a possible contract with that coach
Keeping the service secure, preventing abuse, fixing errors
- Legal basis
- Legitimate interest in a safe, working service
Keeping records the law requires (for example billing, once paid plans start)
- Legal basis
- Legal obligation
5Who processes it for us
We do not sell your data or share it for advertising. These providers help us run PT Wizard:
Hostinger
- What for
- Hosting the app and storing progress photos
- Where
- Data centre region to be confirmed
Neon
- What for
- The database
- Where
- AWS Europe (Frankfurt), EU
An email provider
- What for
- Booking confirmations and other emails, once email sending is switched on
- Where
- To be confirmed when enabled
Stripe
- What for
- Payments, once payments are switched on
- Where
- To be confirmed when enabled
Google (Sign in with Google)
- What for
- Confirms your Google login when you choose it; we get your name and email
- Where
- Set by Google, to be confirmed
Google Calendar (only when your coach connects it)
- What for
- Your coach's busy times, and your sessions as events with your first name and initial
- Where
- Set by Google, to be confirmed
Your browser's push service (Apple, Google or Mozilla)
- What for
- Delivers session reminders you turn on; no names or health details
- Where
- Set by your browser's maker, to be confirmed
Where a provider handles data outside the European Economic Area, we rely on safeguards the GDPR allows, such as the European Commission's standard contractual clauses. This list will be updated when a provider is added.
6How long we keep it
These periods are proposed, to be confirmed:
Account data
- Kept for
- While the account is active, and 30 days after it is deleted
Progress photos
- Kept for
- Until you delete them. A deleted photo day can be restored for 7 days, then it is removed for good
Free intro and guide requests (leads)
- Kept for
- 12 months
Server logs
- Kept for
- 30 days
7Your rights
- Access and copy: clients can download their data at any time from Account, Download my data.
- Correction: change your details in the app, or ask your coach or us.
- Deletion: delete progress photos yourself in the app; for anything else, ask your coach or us and we will delete it.
- Withdraw consent: for progress photos and health notes, at any time. This does not affect what was done before.
- Object or restrict: to processing based on legitimate interest.
- Complain: to a data protection supervisory authority, such as the AEPD in Spain (aepd.es), or the one where you live.
To use any of these rights, contact us: Contact details are being added.
8Children
PT Wizard is not for anyone under 16. We do not knowingly collect data from children.
9Changes to this policy
When this policy changes, we update the date at the top of this page. If a change matters for how your data is used, we will also tell you in the app or by email.