Progress Over Passion

Privacy Policy

Last updated 28 August 2026

1. Who this applies to

This policy covers the Progress Over Passion iOS app and the API that serves it. The app has two kinds of account: clients, who log their own training, and coaches, who review their clients’ progress and assign work.

2. What we collect

Everything below is information you enter yourself or that the app records as a direct result of you using it. There is no background collection.

Account information

• Email address and password (handled by our authentication provider — we never store your password ourselves)
• Your name
• An account identifier, and which coach you are linked to
• Profile photo, if you add one

Health and fitness information

Collected only if you choose to provide or log it:

• Date of birth, sex, and height
• Body weight readings over time, and a goal weight
• Workouts — exercises, sets, reps, and loads, both planned and completed
• Nutrition entries, including calories and macronutrients
• Training preferences, such as a weekly exercise goal and preferred training days
• Activity streaks and experience points, which the app derives from the above

Photos

• Progress photos you choose to upload
• Meal photos, if you use the feature that estimates nutrition from a photo

Other content and technical data

• Notes, tasks, and any custom metrics you or your coach create
• Your time zone and preferred weight unit
• Ordinary server logs — request paths, response codes, timestamps, and IP address — kept for security and debugging. Authorization headers are stripped before anything is written to a log.

3. What we do not collect

• No advertising identifiers and no cross-app or cross-site tracking. The app’s privacy manifest declares no tracking domains.
• No third-party analytics or advertising SDKs.
• No location data.
• No contacts, no microphone, no data from Apple Health.

4. How your coach sees your data

This is the part worth reading closely, because it is the point of the app.

If you sign up using a coach’s invite code, or later redeem one, you are linked to that coach. That coach can see the training data you log — your workouts, weight history, nutrition entries, progress photos, and tasks — so they can coach you on it. A coach can only ever see the data of clients linked to them, and this is enforced on our server for every single request, not merely hidden in the app.

No other client can see your data. If you want to end that access, ask your coach to unlink you, or delete your account as described in section 8.

5. How we use your information

• To run the app: showing your history, calculating totals and trends, tracking streaks
• To let your coach review your progress and assign workouts and check-ins
• To keep accounts secure and to diagnose faults

We do not use your information to build advertising profiles, and we do not use your content to train machine-learning models.

6. Service providers

We use a small number of providers to operate the app. They process data on our behalf, under their own security obligations.

Meal-photo analysis

If you photograph a meal to estimate its nutrition, that image is sent to Anthropic’s API, which returns estimated calories and macronutrients. This happens only when you use that feature. Your other photos, including progress photos, are never sent there. Anthropic does not use data submitted through its API to train its models.

Google Calendar (coaches only)

A coach may optionally connect their own Google Calendar. Access is read-only, is used solely to display their events inside the app, and can be disconnected at any time. Clients are not asked for calendar access.

7. How your data is protected

• All traffic between the app and our servers is encrypted in transit (HTTPS).
• Photos live in a private storage bucket. Nothing is served from a public link; images are delivered through short-lived signed URLs that expire after ten minutes.
• Every request to our API is verified against your signed-in session before any data is returned.
• Passwords are stored and verified by our authentication provider, never by us.

No system is perfectly secure, and we cannot guarantee absolute security.

8. Keeping and deleting your data

We keep your information for as long as your account exists, because the app’s purpose is to show change over time.

You can delete your account from inside the app, under Profile. You will be asked for your password to confirm. Deleting your account permanently removes your profile, workouts, weight history, nutrition entries, progress photos, tasks, and progression history. This cannot be undone.

If you are a client, deleting your account also removes your coach’s access to your data. Backups are cycled out on a rolling basis and server logs are retained for a limited period for security purposes.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or erase your personal information, and to object to or restrict certain processing. You can correct most information directly in the app, and you can erase everything using the in-app account deletion above. For anything else, contact us at the address below.

10. Children

This app is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it. Because the app collects health and fitness information, anyone under the age of majority where they live should have a parent or guardian review this policy.

11. International transfers

Our providers may process and store data in countries other than your own, including the United States. By using the app you understand your information may be transferred to and processed in those countries.

12. Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes will be communicated in the app.

13. Contact

Questions about this policy or your data: progressoverpassion@gmail.com