Privacy policy

Effective date: 6 November 2026 Version: 1

Coachcard is a gym workout planner and tracker. This policy explains what Coachcard collects, why, where it’s kept, and how you can see, export, or delete it. We’ve written it to be read, not skimmed past.

Who we are

Coachcard is run by Kyi Moe Min (“we”, “us”). For privacy questions or requests, email [email protected].

Under Thailand’s Personal Data Protection Act (PDPA), we are the data controller for the personal data described here.

The short version

What we collect

Account

We collect these only after you give explicit consent during setup:

We use these to estimate your calorie and protein targets and to show your progress.

Training

Subscription

When you start a trial or subscribe, the purchase is handled by the App Store or Google Play. We receive the subscription status (for example: on a trial, active, or lapsed) and an anonymous purchaser identifier. We never receive your card or payment details.

Feedback you send us

If you choose to send us a suggestion, bug report, or complaint through the feedback form in Settings, we keep what you write, the type you picked, the date, and which account sent it. We use it only to read your message, reply if needed, and improve Coachcard. We collect this only when you write a message and tap Submit yourself; the app never sends anything through the form on its own. Please leave out health details you’d rather not share.

App usage and crashes

Settings on your phone

Theme, units (kg or lb, cm or ft), rest-timer preferences, and notification choices.

What we don’t collect

Why we use it, and on what basis

Purpose Data Legal basis under the PDPA
Run your account and sync your data across devices Account, training, profile Contract: needed to provide the app you signed up for
Estimate targets and show body progress Profile and health-related data Your explicit consent
Make coach suggestions Training history Contract
Manage your trial and subscription Subscription Contract
Understand which features help, and fix crashes Usage events, crash reports Our legitimate interest in keeping the app working and useful
Answer your questions and requests What you send us Contract, or a legal obligation for rights requests

The coach’s suggestions are worked out on your phone from your own history using fixed rules. No artificial intelligence is involved, and your data isn’t used to train any model.

Where your data is kept

If you live outside Singapore, including in Thailand, this means your data is transferred abroad. We only use providers that protect personal data to a standard that meets the PDPA’s requirements for transfers, and, for people in the European Union or the United Kingdom, that commit to the standard contractual clauses approved for transfers out of those regions. Some of the providers below process data in other countries, such as the United States.

Who we share it with

We share data only with the service providers that run parts of Coachcard for us. They may use it only to provide their service to us.

Provider What they do Data they handle
Our database provider Database, sign-in, and storage Account, profile, training, body, and intake data
Apple and Google Sign-in, and subscription billing through their stores Sign-in identifier and email; purchase records
A subscription management provider Keeps track of your subscription status Anonymous purchaser identifier and subscription status
An analytics provider Usage analytics Usage events and an app-generated identifier. No bodyweight or food totals
A crash reporting provider Crash reporting Crash reports

The subscription management, analytics, and crash reporting providers process data in the United States.

We don’t sell your personal data. We don’t share it with advertisers or data brokers. We would disclose it to authorities only when the law requires it.

How long we keep it

We keep your data for as long as you have an account. Workouts you log are never deleted on their own, because your history is what the coach learns from.

When you delete your account, your data is deleted from our database straight away. It can remain in our provider’s backups for up to 7 days before those backups expire. Usage events and crash reports are kept for up to 1 year. They’re linked to a random account identifier, not your name or email.

Your rights

Under the PDPA you have the right to the following. If you live elsewhere, such as in the European Union or the United Kingdom, the data protection law where you live (such as the GDPR) gives you the same rights, and we honour them the same way.

To use any right that isn’t built into the app, email [email protected]. We’ll answer within 30 days.

You can withdraw consent in Profile at any time. When you do, Coachcard stops collecting health-related data and deletes from our servers and your phone your sex, age, height and weight, your goal weight, and your bodyweight and intake logs. Your workouts, personal records and plan stay. Calorie and protein targets need this data, so they stop working until you consent again.

If you’d rather remove everything, you can delete your account instead (see below). Either way, you can export your data first.

Deleting your account

You can delete your account at any time in Profile → Delete account. This permanently deletes your account and all of your data from our database, then clears Coachcard’s data from your phone. This can’t be undone, so export first if you want a copy.

Deleting your account doesn’t cancel a subscription. Apple and Google bill you, so cancel in your App Store or Google Play subscription settings.

Children

Coachcard is for people aged 18 and over. We don’t knowingly collect data from anyone younger. If you think a child has given us data, email [email protected] and we’ll delete it.

Security

Data travels between your phone and our servers encrypted (HTTPS). Our database only lets each account read and write its own data. No system is perfectly secure, but we limit who and what can reach your data. If a breach puts your rights at risk, we’ll notify you and the authorities as the PDPA requires.

Changes to this policy

If we change this policy in a way that affects how your data is used, we’ll tell you in the app before the change takes effect. If a change needs your consent again, we’ll ask for it. The version and effective date at the top show which policy is current.

Contact

Kyi Moe Min [email protected]