Privacy

The Regimen holds the things a gym already knows about you: your name, your email, the scores you choose to log, the classes you come to, and what your coaches write down so they can coach you well. People at your gym can see your training, because that is what a gym leaderboard is. Nobody outside your gym can. We do not sell any of it, we do not run ads against it, and you can delete all of it yourself from the Profile screen without asking anyone.

Your account. The email address you sign in with, and a password held only as a one-way hash by our authentication provider — we never see or store the password itself. If you forget it, we email you a link to set a new one.

If you run a gym’s subscription. Stripe takes the card and keeps the billing details. We keep only Stripe’s references to the gym’s customer and subscription, where the plan stands (on trial, paid up, overdue or ended) and its dates, and which of the gym’s owners pays, so another owner can take billing over before that owner leaves. We never see or store the card number.

Your profile. Your name, an optional photo, whether you prefer pounds or kilograms, and optionally your gender and your date of birth. Gender is there for one reason: the Men and Women filters on the leaderboard. Date of birth is there so your coaches know when it is your birthday, and, only if you turn on Post my birthday, so the app can put a birthday card in that day’s workout comments. You can leave both blank and everything else still works.

Your training. The results you log — a time, a weight and the reps you lifted it for, a number of reps or rounds, the level you did it at (Rx, Scaled or one of your gym’s own), and any note you attach. The maxes you enter so the app can work out your percentages, which only you can see. The fist bumps you give and the comments you write, under scores and under workouts, including any badge you share into them. Personal records, rep maxes and estimated maxes are worked out from your results each time, not stored separately.

Chats. The messages you send in your gym’s chat, in groups and in one-to-ones: the words, who you @mention and which message you reply to, a photo, a PR or badge you share, and a poll; your votes and reactions; and, for each chat you are in, how far you have read, your notification choice and any mute, so the chat button can count what is new for you. For a group: its name, its emoji or picture, its last day if it has one, who started it, who is in it and who runs it. A photo is made smaller on your phone or in your browser before it is sent.

Who you mention. When you @mention someone in a comment or a chat message, it keeps who you mentioned, so their name can be shown and they can be told. You can only mention people who can see that workout, or that chat.

Notifications on your iPhone, if you turn them on. An address for each phone you turn them on for, which Apple and Expo issue so a notification can reach that phone; your choice of which notifications you get and when your class reminder comes; and the notifications we send you (who they are about and a short line, such as the start of a comment or a chat message) for up to 7 days, so we can tell whether they arrived. Signing out removes that phone’s address.

Your bodyweight, if you log it. Readings you choose to enter under History, each with its date. Only you can see them: not your coaches, not your gym’s owner, not other members, and they never appear on your athlete card.

Workouts you log yourself. What you log under History for training away from the gym: the day, its name, the workout, how it was scored and your score, Rx or Scaled, the movements you tagged, and your notes. Only you can see them: not your coaches, not your gym’s owner, not other members, and they never appear on your athlete card, a leaderboard or your gym’s TV, or count toward a badge. They count toward your own records and maxes, marked as yours. They belong to you, not a gym, so they stay with you if you change gyms.

Your attendance. Which classes you reserved or joined the waitlist for, which you were checked in to and by whom (including whether you scanned the code at the door), and so which classes you booked and did not come to.

Your gym membership. Which gyms you belong to, your role in each, when you asked to join and who let you in, and which of the gym’s tracks you have been added to.

What your coaches write about you. Your gym keeps a private coaching file on each member. It can hold injuries and limitations (the body area, what you should avoid or modify, and when it started and ended), your strengths and weaknesses, background your coach finds useful, your goals, and a dated log of conversations with the name of the coach who wrote each entry. It can also record that a coach got in touch after you had not been in for a while, or that you are away until a certain date. Injuries are health information, and we treat this file as the most sensitive thing we hold — see below.

An email invite, if your gym sends you one. Your address and the invite, from the moment a gym admin sends it, whether or not you ever create an account.

Which screens are used, and when something breaks. When you open a screen, we record its name (such as “Today” or “History”), whether you are on the web or the iPhone app, and your role at the gym, against a random account number. When the app hits an error, we record the error, with email addresses, record numbers and anything you typed stripped out first. We do not record your name, your email, your scores, what you tap, or your screen.

A copy on your device. So the app keeps working when the gym’s wifi drops, it keeps a copy of the screens you have opened, and any score waiting to send, on the phone or in the browser you used. That copy stays on the device until you delete the app or clear the browser’s data for this site. On a shared computer, use a private window.

A request to bring a gym, if you send one. What you write in the Bring your gym form (your name and email, the gym’s name and city, whether you own it, coach there or train there, and your note), and which account you were signed in with, if any. It is emailed to our support inbox so we can answer you, and kept so we know who asked. We also keep a one-way hash of the network it came from (never the address itself), so we can limit how many requests from one place are emailed in an hour.

If you coach, and your gym has a coach station. The PIN you set for the gym’s coach iPad, held only as a one-way hash, and a record of each class you open on it (which device, which class and when), which your gym’s owners and admins can see. The station itself is a sign-in with no email that belongs to the gym, not to a person.

Your age band, where the law asks for it. Where a law requires it (Texas, for Apple accounts made there since June 2026), the iPhone app asks Apple which age band the phone’s Apple account is in (13 to 15, 16 to 17, or 18 and over) and keeps that band with the ID Apple gives the app’s download on that account. Never your birth date, and nothing from an ID document. If a parent or guardian withdraws their consent through Apple, Apple tells us that ID, and the account is paused until they allow it again. If the phone’s Apple account is under 13, the app doesn’t open on that phone and nothing is kept.

The camera, only while you scan. When you scan your gym’s check-in code, the iPhone app uses the camera to read the code and nothing else. No picture is taken, kept or sent; only the code is. A wrong code is noted, only that it happened and when, for a day at most, so nobody can find a gym’s code by trying every number.

We do not collect your location, your contacts, health data from Apple Health or any other device, advertising identifiers, or anything about what you do in other apps.

Your gym’s coaches, admins and owners can see your name, your photo, your results, your attendance including classes you missed, and your coaching file. They see your birthday and the age you are turning, which tells them your date of birth. If you turn on Post my birthday, they also see it while programming, so a workout can be named for you. Admins and owners see your email address when you ask to join, and the addresses they sent invites to. Owners can also download the gym’s records, which list each member’s name and email address alongside the gym’s workouts and scores. That is the point of the product; a coach who cannot see your scores cannot coach you.

Your coaching file is for your gym’s coaches, admins and owners only. You can see the goals in it; the rest is not shown to you in the app, and you can ask us for a copy of all of it at any time (see below). Every time a coach opens your file, and every change anyone makes to it, is logged with their name, and your gym’s owner can read that log. When a coach needs to know about an injury during class, the class roster shows them a flag, which only staff can see.

Other members of your gym can see your name and photo; your results on any leaderboard they can also see, including the note you attached to a score; fist bumps, and comments under scores and under the workouts they can see (a workout on a coaches-only track keeps its comments to staff); your athlete card (how many workouts, records and benchmarks you have logged, your last 30 days, your year of training at a glance, and up to six of your records); your badges, which can show a count (how many early classes you have come to, or how many of your goals you have reached) but never which classes or what a goal was; and which of today’s and upcoming classes you have booked. They cannot see your email, your date of birth, your bodyweight, your maxes, the workouts you log yourself, your coaching file, or which classes you came to in the past. Nothing about your badges, birthday or first day is posted for you in News.

The gym chat is for everyone at your gym. Anyone who is a member can read it, and see who wrote each message, who reacted to it and who voted for what in a poll. Your gym’s owners and admins can delete any message in it and pause someone from writing in it for a while; they and your coaches can pin a message to its top. A message you delete is gone for everyone, and “Message deleted” stays in its place. When you leave a gym you can no longer read its chat; what you wrote stays until you delete your account, so delete anything you want gone before you leave.

Groups and one-to-ones are read by the people in them, and by your gym’s owners and admins, who can open every chat at the gym, one-to-ones included; every group and one-to-one says so at its top. An owner or admin opening one is not shown to the people in it. A group a coach makes open to the gym can be read by anyone there. A group’s admins choose who is in it; someone removed from a group, or who leaves it or the gym, can no longer read it, and what they wrote stays. Someone you block can’t add you to a group or message you one-to-one.

A photo in a chat is kept privately, not at a public address: only people who can read that chat can open it, through a link that works for an hour at a time. It is deleted when its message is deleted, and a group’s picture when it is changed.

Celebrations. Two cards are posted for you, only if you turn them on (when you create your account, or later in Settings): Post my birthday puts a card with your name and photo in that day’s workout comments, and on your gym’s TV that day, which shows your gym the day of your birthday but never the year or your age (your coaches, as above, also see your date of birth while programming); Welcome me on my first day puts one there on your first day at a gym. Either card is yours to delete, and your gym’s owners and admins can delete them too. A badge you share into the comments shows on your gym’s TV that day as well, and so does a PR you post there. A posted PR shows everyone who can see the workout the lift, the number, what it beat and the attempts behind it, as they were when you posted it; delete the post, or the score, and it goes.

Reports and blocks. If you report a comment or a chat message, your gym’s owners and admins see it as it was when you reported it, who wrote it, your name, the reason you chose and any note you added (and, for a chat message, its photo and the few messages either side of it), so they can decide whether it stays. A copy is emailed to our support inbox too, with your email address, so we can follow it up. The person who wrote it is not told who reported it. If you block someone, only you can see that you did; they are not told. Reports are kept after they are settled, and go when the gym, or the account of the person who reported, is deleted; if the person who wrote a reported comment deletes their account, the report keeps the words but not their name.

Feedback. Feedback you send your gym from Send feedback goes to its owners and admins, not its coaches, with your name and photo, or without them if you choose Send anonymously. Anonymous feedback still reaches us with your account attached, so it can count toward your badge and so no one can flood a gym with it; we never tell the gym who sent it. Feedback you send us comes with your name, email address, the gym you sent it from and your device and app version, so we can reply and fix what you found; it reaches us in the app and by email. Both are kept until the gym, or your account, is deleted.

Sharing a badge as a picture. When you share a badge outside the app, the picture (your badge, its level, your first name, your gym’s name and logo) is drawn on our server at that moment, sent to your phone or browser, and not kept by us. Where it goes after that is up to you and the app you share it to.

Your photo is stored at a web address that is not secret. The app only shows it to people at your gym (and on your gym’s TV, below), but anyone who has the link can open the image, and the link keeps working until you remove the photo or delete your account.

A picture on a News post. When a coach, admin or owner adds a picture to a post in News, everyone at the gym sees it with the post, and on Today while the post shows there. It is kept the same way as your photo, at a web address that is not secret, and it is deleted when the picture is taken off the post or the post is deleted. Whoever posts it chooses it from their own device; the app reads no other picture there.

Anyone standing by your gym’s door, if the gym puts a check-in screen there, sees your first name, the first letter of your last name and your photo for a few seconds when you check in, and in its list of who is in the class that is on. The screen shows nothing else about you, and it holds no account of its own: only a private link that your gym can switch off or replace at any time.

Anyone who can see your gym’s TV, if the gym has one on the wall, sees the day’s workouts and leaderboards: your name and your score, with its level, on the pieces you logged that day, and your photo beside your score if your gym picks one of the TV’s designs with photos. It also shows what is celebrated that day, as above.

Members of other gyms can see nothing at all. This is enforced in the database itself, on every row, rather than by the app remembering to ask — a query for another gym’s data returns nothing even if the app is wrong.

We can technically reach the database in order to run and fix the service, and we look only when we have to. We do not read your training data or your coaching file for any other purpose, and we never record your screen, because your screens can show coaching files and bodyweights.

Coaches record injuries so they can change your training around them. Only coaches, admins and owners at your gym can see them, and nobody can read them without that view being logged. We do not use them for anything else, and we do not share them with anyone except the companies below, and only so that the service runs. If something in your file is wrong, ask your coach to fix it, or ask us.

Your bodyweight is health information too, which is why only you can see it.

Only the companies that run the service for us, and only so that it runs: Supabase (our database, sign-in, the emails that come with signing in, and where photos and gym logos are kept), Vercel (which hosts the web app), Stripe (which takes a gym owner’s card and the gym’s monthly payments), PostHog (the screen and error records described above), Resend (which sends gym invites, and the requests and reports that come to our support inbox, by email), Google (which hosts that support inbox), Expo (which passes notifications to Apple to deliver to your iPhone, so the words of each notification go through them and Apple) and Amazon Web Services (which holds our nightly backups). They act on our instructions and may not use your data for their own purposes. We do not sell or rent your data, and we do not share it with advertisers or data brokers.

If we are ever legally required to hand something over, we will tell you unless we are forbidden from doing so.

Go to Profile, then Settings, then Delete account, on either the web or the iOS app (not in a gym yet? It is under Sign out on the join screen). It asks you to type DELETE, and then it is done. Your profile and photo, your date of birth, your results and notes, your maxes, your fist bumps and comments, your chat messages, votes and reactions, the reports you made and the people you blocked, the feedback you sent, your notification choices and phones, your age band, your bodyweight log, the workouts you logged yourself, your attendance and bookings, and everything in your coaching file (injuries, goals, notes, and the log of who opened it) are removed immediately and permanently. We do not keep a shadow copy and there is no support queue to go through.

A few things stay with the gym, with your name taken off: workouts you programmed as a coach and announcements you posted, because they are the gym’s history rather than your personal data; and notes you wrote in other members’ coaching files, because those are part of their file. And if you are the only owner of a gym that still has other members, we will ask you to make someone else an owner first, so that deleting your account does not take their data with it. A gym where you are the only member is deleted along with your account.

Leaving a gym is not the same as deleting your account: the scores you logged there stay part of that gym’s history until you delete your account.

Backups are kept for up to 30 days for disaster recovery and then deleted, so a deleted account can persist in an encrypted backup for that long. We do not restore individual records from backups.

You can edit your name, photo, gender, date of birth and unit preference yourself on the Profile screen, and edit or delete any result, workout or bodyweight reading you logged. If you want a copy of everything we hold about you, including your coaching file, or you want something corrected that you cannot reach yourself, email us at support@theregimentrained.com and we will send it within 30 days.

If you are in the UK, the EU, or a US state with a privacy statute, you have rights to access, correct, delete and port your data, and to object to processing. The paragraph above is how you exercise them; we do not charge for it and we will not make the service worse for you because you asked.

The Regimen is not for children under 13, and we do not knowingly create accounts for them; the app will not store a date of birth for anyone under 13. If your gym coaches under-13s, the account should belong to a parent or guardian. If you believe a child has an account, email us and we will remove it.

If we change this policy in a way that matters, we will say so in the app before the change takes effect rather than quietly editing this page. Questions, requests, or anything that looks wrong: support@theregimentrained.com, or see Help.

The terms of using the app are over here.