Privacy Policy

This Privacy Policy explains what information PlanGains collects, how we use it, and the choices you have. It applies to your use of the PlanGains platform.

1. Information we collect

• Account data: name, email, password (stored hashed by our auth provider), and login metadata.
• Profile & fitness data: details you choose to provide such as height, weight, fitness goals, experience level, training availability, and injury notes.
• Activity data: workouts you log (exercises, sets, reps, weights), programs you follow, and progress over time.
• Messages: the content of messages you send to and receive from Creators through the Platform.
• Payment data: we do not store full card numbers. Payments are processed by Stripe; we store limited billing metadata (e.g., subscription status, customer/subscription identifiers).
• Usage & device data: analytics about how you use the Platform (see Cookies & analytics).

2. Health-related information (sensitive data)

Some information you provide — such as injuries, body metrics, and training history — is health-related. We collect it only to provide and personalize your coaching experience. By providing it, you consent to its processing as described here and in our AI & Health-Data Disclosure. [Lawful-basis / consent mechanics for sensitive data pending legal review — O2.]

3. How we use your information

• To operate the Platform and deliver the programs and messaging you subscribe to.
• To give your Creator the context needed to coach you (your program and recent logged training).
• To process subscriptions and payments.
• To improve reliability, safety, and the product experience.
• To communicate service and transactional messages.

4. AI processing of your messages

To help Creators reply at scale, your message and a limited snapshot of your training context (active program and recent logged sets) may be sent to third-party AI providers (currently Anthropic and Google) to draft a reply in the Creator’s voice. We use these providers under commercial terms that do not permit your data to be used to train their models. A Creator reviews drafts before they are sent. Full details are in our AI & Health-Data Disclosure.

5. Who we share information with

• Your Creator: sees your messages and the training context needed to coach you.
• Payment processor (Stripe): to process subscriptions and payouts.
• AI providers (Anthropic, Google): to draft replies, under no-train commercial terms.
• Infrastructure & service providers: hosting and database (Supabase, Vercel), email (Resend), and product analytics (PostHog).

We do not sell your personal information.

6. Cookies & analytics

We use cookies and a privacy-conscious analytics tool (PostHog) to understand usage and improve the product. [Cookie banner / consent specifics pending legal review — O2.]

7. Data retention

We keep your information for as long as your account is active and as needed to provide the service, comply with legal obligations, and resolve disputes. You can request deletion as described below.

8. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to withdraw consent. To exercise these, contact us at [privacy email — to be added].

9. Security

We use industry-standard measures (encryption in transit, access controls, row-level security on our database) to protect your data. No system is perfectly secure, but we work to safeguard your information.

10. Children

The Platform is not intended for anyone under 18, and we do not knowingly collect their data.

11. International data transfers

Your information may be processed in countries other than your own, including by the service providers listed above. [Transfer safeguards pending legal review — O2.]

12. Changes & contact

We may update this Policy; material changes will be communicated. Questions? Contact us at [privacy email — to be added].