Coachiny is operated by Yahya Bahloul, Tunisia, who is responsible for the processing of your personal data on the platform (the "controller"). Contact: bahloulyahya7@gmail.com.
Coachiny holds health information — training, nutrition, body measurements and, if you choose, progress photos. We collect only what coaching needs, show it only to the people involved, and never sell it or use it for advertising.
1. What we collect
- Account: your Google account’s email address and identifier; your name and photo, taken from Google once and editable in the app.
- Coaches: your profile, plan and limits, your library (templates, exercises, foods, demo videos), your athletes’ membership terms and the payments you record, your private notes, and a phone number if you gave one to the platform.
- Athletes: your height, the sessions and sets you log, the meals you tick and the foods you add, your check-ins (weight, measurements, notes), progress photos if you consent to them, personal records, and the targets your coach sets.
- Messages and photos exchanged in the in-app chat.
- Devices and preferences: the push-notification token of each device where you enable notifications, its language, and your notification and language settings.
- Technical data: when one of the apps hits an error it sends us the page path, the error message and its technical trace, the browser type and your account identifier — never what you typed. Our hosting providers keep standard security logs (such as IP addresses) for a limited time.
On your own device the apps store your theme, language, palette and shopping-list ticks. We use no advertising or analytics trackers and no third-party cookies.
2. Why, and on what basis
- To provide the service you signed up for: planning, logging, follow-up, messaging and notifications between a coach and their athletes (performance of the contract — these terms).
- To process health information (training, nutrition, measurements, photos): on the basis of your explicit consent, given when you accept these documents, and separately for progress photos.
- To keep the service secure and working: preventing abuse, fixing errors, answering support requests (our legitimate interest).
- To meet legal obligations, where they apply.
We do not use your data for advertising, we do not sell it, and we do not use it to profile you for anyone else.
3. Who sees your data
- Your coach — only while you train with them. When the membership ends, their access ends automatically; if you move to another coach, the new coach sees your history from then on.
- You — always, including after a membership ends.
- The platform administrator — only to provide support, keep the data consistent and investigate abuse.
- Service providers who host and run Coachiny for us, bound by contract: Google Cloud / Firebase (database, sign-in, hosting, functions, push notifications, abuse protection with reCAPTCHA), Cloudflare (storage of photos and videos), and Google’s email service (invitation emails).
We disclose data to authorities only when the law requires it.
4. Where it is stored
Your data is stored in the European Union: the database and services in Belgium (Google Cloud, europe-west1), photos and videos in Western Europe (Cloudflare R2). It is encrypted in transit. Body photos and chat photos are kept in private storage and shown only through links that expire after 15 minutes, to the people allowed to see them.
Because Coachiny is operated from Tunisia and hosted in the EU, your data is transferred abroad; this is done with providers that offer an adequate level of protection.
5. How long we keep it
- While your account exists, we keep your data so you can use the service.
- When a membership ends, the athlete keeps their history (read-only) and the former coach loses access.
- Withdrawing photo consent deletes all your progress photos immediately.
- Deleting your account: after a 14-day grace period during which you can cancel, we erase your profile, logs, check-ins, photos, the messages you sent, your devices and your acceptance records. Messages the other person wrote stay with them.
- A coach who deletes their account can choose to keep their library for 12 months; it is then erased unless they come back.
- Technical error reports and security logs are kept for a short period (typically 30 days) by our hosting provider.
6. Your rights
You can access your data, correct it, delete it, and withdraw your consent at any time. Most of this is in the app: edit your profile, withdraw photo consent, delete your account. For anything else — including a copy of your data — write to us and we will answer within 30 days.
Contact: bahloulyahya7@gmail.com. You can also lodge a complaint with the Tunisian data protection authority, the Instance Nationale de Protection des Données Personnelles (INPDP).
7. Minors
Coachiny is for people aged 18 or older. Younger athletes may use it only with the agreement of a parent or legal guardian, which they confirm when accepting these documents. A parent or guardian can ask us to delete a minor’s account at any time.
8. Security
Access to every piece of data is checked on the server for every request; a coach can only reach their own athletes. Requests must come from our apps (App Check), sign-in is through Google, and photos are private. No system is perfectly secure: if a breach affecting you happens, we will tell you and the authority as the law requires.
9. Changes
We will update this policy when what we do changes. The date at the top shows the version. When a change is material, the apps will ask you to accept the new version before you continue.
See also: Terms of service