Who we are
Ace Trainer ("we", "us") is the data controller for the account and booking information described below. If you're a client, your gym or trainer is also a controller of your data within their own account — see "Who we share your data with".
What we collect
- Account details — name, email address, phone number, and password (stored as a salted hash, never in plain text). For gyms and trainers, also your business name and type.
- Health and fitness data — anything you choose to log: weight, body fat %, lean body mass, blood pressure, sleep, steps, nutrition, progress photos, workout history, and goals. This is "special category" data under UK/EU GDPR, and we only collect it because you've actively entered it into your own account.
- Booking data — sessions you book, cancel, or complete, and the session types, membership plans, and pricing your gym or trainer has set up.
- Payment data — handled entirely by Stripe, our payment processor. We never see or store your full card number; we only receive confirmation that a payment succeeded and a reference to your Stripe customer record.
- Notifications — booking confirmations and reminders sent by SMS.
We don't run any analytics or advertising trackers on the app or website. The only cookies in use are the essential ones needed to keep you signed in.
Why we collect it
- To provide the service — running your account, bookings, and the trainer/client relationship (performance of a contract).
- Health and fitness data specifically — only ever processed with your explicit consent, given when you choose to log it. You can delete any entry at any time.
- Payment records — kept as required by UK tax and accounting law.
- Security — detecting misuse of the platform (legitimate interest).
Who we share your data with
- Your gym or trainer — if you're a client, the business you've joined can see your bookings, tracker entries, and contact details. They can never see another business's clients.
- Supabase — our database and authentication provider, hosting data in the EU (Ireland).
- Stripe — our payment processor, for businesses subscribing to a paid plan.
We don't sell your data, and we don't share it with anyone for marketing purposes.
How long we keep it
We keep your account data for as long as your account is active. If you delete your account, we delete your profile and tracker data, except where we're required to keep payment records for legal or tax purposes.
Your rights
Under UK/EU data protection law, you can ask to access, correct, or delete your data, object to or restrict how we use it, and withdraw consent at any time. To exercise any of these, contact us using the details below. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've mishandled your data.
Children
Ace Trainer is intended for users aged 16 and over. If you're a gym or trainer working with younger clients, you're responsible for getting appropriate parental or guardian consent before creating an account for them.
Changes to this policy
If we make material changes to how we handle your data, we'll update the date at the top of this page.
Contact us
Questions about this policy, or want to exercise your data rights? Email info@acetrainer.co.