Privacy Policy

This Privacy Policy explains how Workout Zone ("we", "us", "our") collects, uses, and shares information about you when you use our website and training app at workoutzone.eu.

1. Information we collect

• Account information: name, email address, profile photo, and sign-in details.
• Training data: workouts, sets, reps, weights, notes, personal records, and body measurements.
• Progress photos: body photos you choose to upload. They are stored privately, reduced to a smaller JPEG before upload, and shown only through short-lived links to you, your trainer(s), and platform administrators.
• Credit and payment records: session packages, payments, confirmations, voids, and expiry dates.
• Communication data: messages, comments, cheers, and shared notes.
• Booking data: availability, booking requests, and confirmed sessions.
• Usage data: device type, browser, and error reports.

2. How we use it, and on what legal basis

• To provide the service you signed up for — training log, credits, bookings, coaching (performance of a contract).
• Progress photos and body measurements are processed only because you choose to upload them (your explicit consent). You can delete them at any time.
• Security, fraud prevention, and error monitoring (legitimate interest).
• Keeping payment records where the law requires it (legal obligation).

3. Emails we send

• Account emails: sign-up confirmation, password reset, email change.
• Session reminders the day before a confirmed booking.
• Credit-expiry nudges when prepaid sessions are about to expire.
• Payment approval requests to your trainer.
• A weekly digest to trainers listing their clients' names, who trained, who has been quiet, and money collected that week.

4. Google Calendar

When a trainer connects Google Calendar, confirmed sessions are added to the trainer's calendar and the client's email address is included as an event attendee, so Google sends the client an invitation. Busy times are read to avoid double bookings.

5. Who can see your information

• Your trainer(s): your training history, measurements, progress photos, balance, bookings, and anything you share with them.
• Gym managers and administrators: roster and account information needed to run the gym. Administrators can access all data for support and safety.
• Other members: the People search shows trainers, people you are already connected with, and members who turn on "Discoverable" in their profile (name and photo only). Gym-feed posts, cheers, leaderboards, and challenges show your name to other members.

6. Service providers (processors)

• Lovable Cloud / Supabase — hosting, database, file storage, sign-in.
• Google — sign-in with Google and Google Calendar (only if connected).
• Our email delivery provider — sending the emails listed above.

7. Data retention

We keep your account and training data for as long as your account is active. If your gym manager deactivates your account, your data may be retained for operational and audit purposes unless you request deletion. Some records, such as payment/credit history, may be retained longer where required for billing or legal reasons.

8. Your rights

You can update your profile information and manage your account through the app. If you would like to request deletion of your data or have questions about what we hold, contact us using the email below. Under the GDPR you can ask to access, correct, export, or delete your data, withdraw consent, and complain to your data protection authority.

9. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date.

10. Contact us

If you have any questions about this Privacy Policy or our data practices, please email us at support@workoutzone.eu.