How I look after your information

Last updated 30 October 2026

Coach Morgan is run by Paul Morgan ("I", "me"), an online and in-person personal trainer based at The Gym Group, Epsom Way, Handforth, Cheshire SK9 3PW. I'm the data controller for the information described here. Questions or requests: [email protected].

The short version. I only collect what I need to coach you. I never sell your data or use it for advertising. Your health information is only seen by me, and you can ask me to delete everything at any time.

What I collect

Contact details: name, email, phone number, and how you found me.
Your answers when you apply: goals, training experience, schedule, height, weight, and anything you tell me about injuries or health.
Coaching records in the app: workouts and weights lifted, daily checks (training, steps, food, water, sleep, energy, notes), food diary entries, weekly check-ins (weight, measurements, progress photos, answers), and messages with me.
Health information you choose to share, such as body measurements, injuries, and (if you choose to tick it) the day your period starts so I can read weight changes properly. This is special category data under UK GDPR. I use it only to coach you, with your explicit consent, which you can withdraw at any time.
Step count from Apple Health or Health Connect (app only, optional). Only if you tap "Fill from Apple Health / Health Connect" and allow it. The app reads your daily step total only. It does not read any other health data, never writes to Apple Health or Health Connect, and the step number is saved to your daily check exactly as if you'd typed it.
Payment records: what you paid and when. Card details are handled by Stripe and never reach me.
Technical information: if you turn on alerts, a notification token for your phone, used only to send you Coach Morgan alerts.

How I use it

To build and adjust your training and nutrition plan, review your progress, and send you weekly reports and replies (contract and, for health data, your explicit consent).
To take payments and keep business records (contract and legal obligation).
To send reminders and alerts you've switched on, and occasional emails about coaching. You can turn these off or unsubscribe at any time (consent and legitimate interests).
With your permission only, to make a before-and-after image. You choose this in the app and can switch it off whenever you like.

Apple Health and Health Connect data is never used for advertising or marketing, never sold, and never shared with anyone except as described here (stored in your coaching record with my database provider). It is not used to train any AI.

AI-assisted drafts

Some written drafts, like the message in your weekly report or meal ideas, are drafted with the help of an AI service (Anthropic). It's only sent numbers and food preferences. It never gets your name, email, photos or health notes. I read and approve every message before it reaches you.

Who helps me run things

These providers process data for me under data processing terms and only on my instructions:

Provider	What for
Supabase	Secure database and sign-in for the app and coaching records
Cloudflare	Website and app hosting
Stripe	Card payments
Resend	Sending coaching emails (reports, replies, reminders)
MailerLite	Email newsletters and enquiry follow-ups
Cal.com	Booking calls
Anthropic	AI-assisted drafts (no names or health notes, see above)
Apple and Google	Delivering phone notifications

Some of these providers may store data outside the UK. Where they do, they use legally approved safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.

How long I keep it

I keep coaching records while you're a client and for up to 2 years afterwards, in case you come back. After that I delete them or make them anonymous. Payment and tax records are kept for 6 years because the law requires it. If you only made an enquiry and didn't start, I delete your details after 2 years without contact. You can ask me to delete your data sooner (see below).

Your rights

Under UK GDPR you can ask to see a copy of your data, correct it, delete it, limit or object to how I use it, or receive it in a format you can take elsewhere. You can withdraw consent at any time, for example by turning off step syncing, alerts or photo sharing in the app, or by removing Coach Morgan's access in Apple Health or Health Connect settings. To make a request, or to delete your account and data, email [email protected]. I'll respond within one month.

If you're not happy with how I've handled your data, please tell me first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk.

Keeping it safe

Your data is encrypted in transit, access is protected by sign-in, and the database is locked so each client can only see their own records. Only I have coaching access.

Children

Coaching and the app are for adults aged 18 and over.

Changes

If I change this policy, I'll update the date at the top. If the changes are significant, I'll let clients know.