Privacy Policy
Last updated 11 October 2026
This policy covers the QuFit app for trainees and the QuFit Trainer app for coaches. It describes what we collect, why, and what control you have.
1. What we collect
You give us
- Account details — name, email address, phone number and password. Passwords are stored only as a cryptographic hash; we cannot read them.
- Profile details — profile photo, height and date of birth, where you provide them.
- Health and fitness data — body weight, measurements, progress photos, workout logs and meal logs. This is the core of the service.
- Content you post — community posts, reels, comments and likes.
Created by using the service
- Course records — requests, plans, and their status.
- Payment records — amount, method (cash), date and reference. We do not collect or store card details.
- Device identifiers — a per-installation identifier used to keep you signed in on that device and to sign that device out.
2. Why we use it
- To deliver the service: pairing you with a trainer, showing your plan, and recording your progress.
- To keep you signed in on your devices.
- To notify you about your course, requests and payments.
- To keep records we're legally required to keep, such as payment records.
We do not sell your data, and we do not use it for advertising.
3. Who can see your data
Your trainer sees your training data. If you request a course from a trainer, that trainer can see your name, profile photo, the weight and measurements you submit, your progress photos, and your workout and meal logs for that course. That access is the service — it is how they write and adjust your plan.
- Other users see only what you publish to the community, plus your name and profile photo.
- Our staff can access account records where necessary to operate and support the service.
- Service providers — hosting and infrastructure suppliers who process data on our instructions only.
4. How long we keep it
We keep your data while your account is active. When you delete your account we erase it within 30 days, except for records we're required to retain — see Delete your account for the detail.
5. Security
Traffic between the apps and our servers is encrypted in transit. Passwords are hashed. Access to production data is limited to staff who need it. No system is perfectly secure, and we won't claim otherwise — but if a breach affects your data, we will tell you.
6. Your rights
- Access a copy of your data.
- Correct anything inaccurate — most of it is editable in the app.
- Delete your account and personal data.
- Object to a particular use, or withdraw consent where we rely on it.
Exercise any of these by emailing [email protected].
7. Children
QuFit is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will remove it.
8. Changes
If we change this policy we'll update the date above, and for significant changes we'll notify you in the app.