Privacy Policy

Last updated 1 September 2026

This policy explains how OneCoach Technologies Limited (“OneCoach”, “we”, “us”) handles personal data when you use getonecoach.app, the OneCoach iOS app, and any related support channels. It is written for the product we actually ship: an AI gym coach that writes training plans, logs sessions, estimates nutrition, reads optional health metrics, transcribes in-session voice, and runs a community. It is not a medical record system and it is not an advertising network.

Related pages: Terms of Service, How we use AI, Security, and Do not sell my info.

1. Who we are

The data controller is OneCoach Technologies Limited, a company registered in England and Wales under company number 16872050. Registered office: Apartment 3909, 7 Bankside Boulevard, Salford, England, M3 7HN.

Privacy requests: hello@getonecoach.app. We aim to reply within 24 hours, Monday to Friday. Statutory deadlines under UK GDPR still apply.

2. What this policy covers

The marketing website at getonecoach.app, including contact forms, cookies, and analytics.
The OneCoach iOS application, including Free and Pro features.
Accounts, onboarding, plan generation, session logging, nutrition logging, barcode scan, shopping lists, recovery scores, coaching chat, voice input, imported plans, offline copies of your plan, community, challenges, leaderboards, and groups.
Optional connections to Apple Health, HealthKit, or other health and wearable sources you choose to connect.
App Store billing records we receive from Apple, not your full card number.
Support emails and in-app or website messages you send us.

It does not cover third-party sites, gyms, wearable makers, supermarket price sources, or other apps you open from OneCoach. Those parties have their own policies.

3. What we collect

We collect what you give us, what the app needs to run, and what devices or connected services send when you switch those features on. We do not need every category below for every user.

Account and identity

Name, display name, email address, and sign-in identifiers, including Sign in with Apple or other login methods if you use them.
Password hashes or tokenised credentials. We do not store your Apple password.
Age or date of birth if collected to enforce age limits.
Country, language, and unit preferences (for example kilograms or pounds).
Subscription status, Free or Pro, trial dates, and App Store transaction identifiers.

Onboarding and coaching profile

Goals, experience level, training history, priority lifts, session length, training days, and available equipment, including home gym, full gym, dumbbells only, or bodyweight.
Injury history, pain reports, movement limitations, surgeries, and any other physical constraints you type or speak.
Sex, height, body weight, and other body metrics you choose to enter.
Programmes you import by paste or file upload, and any text or documents you ask the coach to structure.

Training and progress

Generated and edited 12-week programmes, exercise selections, sets, reps, loads, RPE, rest, notes, skipped or swapped sessions, and plan rewrites.
Session logs, live track entries, personal bests, volume, streaks, and graphs derived from those logs.
Offline copies of your plan stored on device until they sync.

Nutrition

Meals and foods you describe in text or voice, and the macronutrient estimates the model produces.
Barcode scans, camera frames processed to read a barcode, and product matches from food databases.
Targets, weekly shopping lists, and supermarket price estimates used to build those lists.
Allergen, preference, or dietary notes you enter. Treat those as your responsibility. Our estimates are not an allergen-safe or medical diet service.

Recovery and health connections

Sleep, heart rate, heart-rate variability, steps, active energy, readiness or similar scores if you grant access through Apple Health, HealthKit, or another connected source.
Any recovery answers you type into the coach, including soreness, illness, or how a session felt.

Voice, chat, and coach context

Microphone audio streamed for in-session or meal logging transcription. We do not store the raw audio after transcription completes.
Transcripts, cleaned text, and the chat thread, including your messages and the model’s replies.
The coaching context assembled for a request: relevant slices of your plan, logs, nutrition, health metrics, and profile. That context is sent to contracted AI providers so the coach can answer.

Community

Posts, comments, reactions, challenge entries, group membership, leaderboard names, and content you publish.
Reports you file about other users, and records we keep when we moderate.

Device, app, and website technical data

Device type, OS version, app version, language, time zone, crash logs, and diagnostics needed to keep the app working.
IP address, browser type, pages viewed, and referral URL on the website.
Cookie choice and, only if you accept analytics cookies, Google Analytics measurement data.
Push notification tokens if you enable notifications.
Approximate network location derived from IP. We do not need precise GPS to coach you and we do not sell location.

Support and legal

Name, email, and message if you write us or use the contact form.
Records needed for security, abuse, chargebacks, disputes, and to meet the law.

We do not collect your full payment card number. Apple processes App Store payments.

4. Health and injury data

Injury history, pain, surgeries, heart rate, sleep, readiness, body metrics, and some nutrition information can be special category data under UK GDPR (data concerning health). We only process that data if you choose to provide it and we have a lawful basis, usually your explicit consent given when you complete onboarding, connect Apple Health, or type or speak that information to the coach.

You can refuse to provide health details. The coach will then work with a thinner profile and may be less useful. That is your choice.
You can withdraw consent by deleting the relevant data, disconnecting HealthKit, or asking us to delete your account. Withdrawal does not undo processing already completed.
HealthKit and Apple Health data, if connected, is used only to personalise coaching and recovery features inside OneCoach. It is not used for advertising, not sold, and not used to market third-party products.
OneCoach is not a medical device, not a clinical record, and not a substitute for a doctor, physiotherapist, dietitian, or emergency service. See the Terms of Service.

5. How we use it

Create and secure your account, and remember your preferences.
Generate, validate, display, edit, and rewrite training programmes.
Log sessions, nutrition, and recovery, including offline use and later sync.
Power coaching chat and voice: transcribe, interpret, and reply, including mid-session exercise swaps and meal estimates.
Build shopping lists and barcode matches.
Run community, challenges, leaderboards, and groups you join.
Show Free and Pro features that match your entitlement.
Send service messages and, if you enable them, push notifications about sessions, plans, or community.
Reply to support, fix bugs, and keep the service secure.
Detect fraud, abuse, scraped accounts, and violations of the Terms.
Meet accounting, tax, and legal duties, including Apple’s billing records.
Measure website visits if you accept analytics cookies.

We do not use your training, nutrition, health, voice, or community data to train foundation AI models. We do not run ads in the app. We do not sell personal information. We do not use HealthKit data for advertising. Quality review of the product may use aggregated or de-identified metrics, or a tightly limited human review of a flagged conversation when needed for safety, abuse, or a support ticket you opened. That is not model training.

6. How AI processes your data

Plan generation, coaching replies, meal estimates, plan imports, and voice-to-text are performed by software that includes large language models and transcription models run by contracted providers. To answer you, we send those providers the minimum context required for that request. They process it as our processors, under contract, to return a result. They are not given your data to buy, sell, or advertise against.

We instruct providers not to use OneCoach customer content to train their models. Residual technical logs on a provider’s systems are governed by that contract and by our How we use AI page. Audio is transcribed in stream and is not stored by us as an audio file.

AI output can be wrong. A plan, a calorie number, a form cue, or a readiness score is not a professional opinion and is not guaranteed. You decide what to do with it.

7. Lawful bases

Contract: to provide the app you asked for, including account, plan, logging, chat, and paid features.
Explicit consent: health and injury data, optional HealthKit connections, voice input, and non-essential cookies.
Legitimate interests: securing the service, preventing abuse, basic product diagnostics, and answering support. We do not use legitimate interests to override your rights or to sell data.
Legal obligation: tax, accounting, consumer, and law-enforcement requests we are required to meet.

We share personal data only when needed to run OneCoach, when you publish it, or when the law requires it. We do not sell it and we do not share it for cross-context behavioural advertising.

Apple Inc. and its affiliates: App Store distribution, in-app purchases, Sign in with Apple if you use it, push delivery, and HealthKit if you connect Apple Health. Apple’s terms and privacy policy apply to those layers.
Contracted AI model and transcription providers: inference and speech-to-text, as processors.
Cloud hosting, database, storage, error-monitoring, and email or support tools we use to operate the product.
Google Analytics, only if you accept analytics cookies on the website. The iOS app is not an ads product.
Food and product databases or supermarket price sources used to resolve a barcode or build a shopping list. Those queries contain the product or list data needed for the lookup, not your full coaching file.
Other users, when you post to community, join a group, enter a challenge, or appear on a leaderboard. Do not publish health or injury detail you want to keep private.
Professional advisers and authorities if required to investigate abuse, establish or defend legal claims, or comply with a binding request.
A buyer or successor if we reorganise or sell the business, under this policy or a successor policy that is at least as protective.

Everyone who processes personal data for us does so under a contract that limits use to our instructions, except where Apple or another platform is an independent controller for its own checkout or operating system services.

9. International transfers

OneCoach is a UK company. Some processors are in the United States or other countries. When personal data leaves the UK or EEA we use a lawful transfer mechanism, typically the UK Extension to the EU-US Data Privacy Framework where a processor is certified, or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, plus the security measures in this policy.

10. Cookies and the website

Essential cookies remember your cookie choice and keep the site usable. These do not require consent.
Analytics cookies load Google Analytics only after you tap Accept. Choose Essential only and we do not measure visits.
We do not use advertising cookies.

You can change your mind by clearing site data for getonecoach.app and answering the banner again. Browser controls can also block cookies. Blocking essential cookies may break parts of the site.

11. How long we keep it

Account, plan, logs, chat transcripts, posts and photos: for as long as the account exists. Deleting your account permanently deletes them, including photos, except where we must keep a narrower record such as a tax invoice.
Voice audio: not retained as audio after transcription.
Support emails: long enough to resolve the request and for a limited archive in case the same issue returns.
Billing identifiers and invoices: for the period UK tax and accounting law requires, often six years.
Security, abuse, and legal hold records: for as long as needed for that purpose.
Website analytics: according to our Google Analytics settings, and only if you consented.
Backups: may persist for a short rotation period after deletion, then expire.

12. Your rights

If UK GDPR or EU GDPR applies to you, you can ask us to:

Access the personal data we hold about you. In the app, go to You → Settings → Privacy → Download my data.
Correct inaccurate data.
Delete data, including photos, by going to You → Settings → Delete account. Steps are on delete your account.
Restrict or object to certain processing.
Receive a portable copy of data you provided, where the right applies.
Withdraw consent where processing is based on consent.
Complain to the Information Commissioner’s Office (ico.org.uk) or your local supervisory authority. We would rather fix the issue first.

Write hello@getonecoach.app. We may need to verify it is you. We will not charge a fee unless a request is manifestly unfounded or excessive.

13. California and other US rights

We do not sell personal information and we do not share it for cross-context behavioural advertising as those words are used in the California Consumer Privacy Act (as amended by the CPRA) and similar US state laws. Apple’s App Store checkout is Apple’s, not a sale by us.

If those laws apply to you, you may request access, correction, deletion, or information about our practices by emailing hello@getonecoach.app. We will not discriminate against you for exercising a privacy right. Authorised agents may write on your behalf with proof of authority. See also Do not sell my info.

14. Security

We encrypt personal data in transit and at rest, limit staff access, and keep production credentials off the public app. No method of transmission or storage is perfectly secure. You must keep your device and login under your control. Jailbroken or modified devices increase your risk and are unsupported. More product-facing detail is on Security.

15. Children

OneCoach is not directed at children. You must be at least 16 to create an account. If you are under 18 you may use OneCoach only with a parent or guardian’s agreement, and they are responsible for the account. We do not knowingly collect personal data from anyone under 16. If we learn that we have, we will delete it. Parents: write hello@getonecoach.app.

16. Automated decisions

Generating a programme, rewriting a week, estimating a meal, and producing a readiness score are automated. They can affect how you train and eat if you follow them. They do not decide your legal rights or eligibility for credit, housing, or employment. You can edit or reject any output, ask the coach to change it, follow a different plan, or stop using the feature. If you want a human to look at a specific decision we made about your account (for example a ban), write us.

17. Changes

We will update this page when the product or the law changes. The date at the top is the latest version. Material changes may also be flagged in the app or by email. Continued use after the new date means you accept the updated policy, except where the law requires a fresh consent.

18. How to contact us

OneCoach Technologies Limited
Apartment 3909, 7 Bankside Boulevard, Salford, England, M3 7HN
Company number 16872050
hello@getonecoach.app