---
title: "Privacy Policy | Boost Fitness"
description: "Learn how Boost Fitness protects your privacy and handles your personal information."
canonical_url: "https://boostfitness.io/legal/privacy-policy"
meta:
  "og:description": "Learn how Boost Fitness protects your privacy and handles your personal information."
  "og:image": "https://boostfitness.io/_og/d/c_Default.takumi%2Ctitle_Boost%2BFitness%2Ctagline_~V2Vic2l0ZXMsIGNsaWVudCBtYW5hZ2VtZW50LCBwYXltZW50cywgYW5kIG1hcmtldGluZyBmb3IgZml0bmVzcyBwcm9mZXNzaW9uYWxzLg%2Cp_Ii9sZWdhbC9wcml2YWN5LXBvbGljeSI%2Cs_AmC_ezGbaRZVRLJo.png"
  "og:image:height": "600"
  "og:image:type": image/png
  "og:image:width": "1200"
  "og:title": "Privacy Policy | Boost Fitness"
  "twitter:image": "https://boostfitness.io/_og/d/c_Default.takumi%2Ctitle_Boost%2BFitness%2Ctagline_~V2Vic2l0ZXMsIGNsaWVudCBtYW5hZ2VtZW50LCBwYXltZW50cywgYW5kIG1hcmtldGluZyBmb3IgZml0bmVzcyBwcm9mZXNzaW9uYWxzLg%2Cp_Ii9sZWdhbC9wcml2YWN5LXBvbGljeSI%2Cs_AmC_ezGbaRZVRLJo.png"
---

> Index of every page on this site: [llms.txt](https://boostfitness.io/llms.txt)

**Legal**

# Privacy Policy

**Last updated: 11 October 2026**

Sections 2 and 5 describe how sharing works from 11 October 2026. Until then, your coach sees what you log in their client area, as before, and it is part of your coach's records.

## In short

- Boost Fitness is a coaching platform. Coaches run their business on it. Their clients (we call them members) use the coach's website and the Boost Fitness iPhone app, with or without a coach.
- What you log yourself, like food, weigh-ins and your own workouts, is yours. With your permission, we keep it in your own Boost account.
- From 11 October 2026, you choose what each coach sees, one category at a time. When you join a coach, nothing you log yourself is shared until you say so. If you were already a member, your coach keeps seeing what they saw before until you choose, or until you join another coach on Boost, when we'll ask you again for each coach, or until you withdraw your health-data consent, when we delete it (section 4). Turning something off works at once.
- A coach's own plan, check-ins and messages stay between you and that coach. Other coaches never see them.
- We don't sell your data. Apple Health data is never used for advertising and never sent to AI.
- Boost is for people aged 16 and over, in the app and in coaches' client areas.
- You can delete your account in the app or on your coach's website at any time.

## 1. Introduction

This policy explains how Boost Fitness ("we", "us") collects, uses, shares and protects personal information. It covers:

- our website, boostfitness.io, and the dashboard coaches use;
- coaches' websites and client areas that run on Boost;
- the Boost Fitness iPhone app.

**Who we are.** Boost Fitness is the trading name of Mason Tustin, a sole trader in England.

- Business address: C/O D P C Stone House, 55 Stone Road Business Park, Stoke-On-Trent, Staffs, United Kingdom, ST4 6SR
- Email: [**support@boostfitness.io**](mailto:support@boostfitness.io)
- We've paid the UK Information Commissioner's Office (ICO) data protection fee; our registration number will be added here when the ICO issues it.

If Boost Fitness becomes a company, that company will take over this policy and our responsibilities under it. We'll tell you at least 30 days before, and name the company. If you don't want to carry on, you can delete your account.

## 2. Who is responsible for your data

Two parties can be responsible for a member's data: Boost, and each coach the member trains with. The law calls the responsible party the "controller". A party that only acts on someone else's instructions is a "processor".

| **Data** | **Who is responsible** | **What that means** |
| --- | --- | --- |
| Your Boost account: login, email, age answer, preferences, and the coaches you're linked to | **Boost** (controller) | We decide how it's used, under this policy. |
| Your own diary: everything you log yourself (see section 3.2) | **Boost** (controller), once you've agreed to us keeping it (section 4) | We keep it for you and share it only with the coaches you choose. |
| What a coach gives you and what you do with it: their programmes and workouts and your logs of them, their habits, check-ins, forms and your answers, their supplements, goals and meal plans, chat with them, bookings and payments to them | **The coach** (controller), with **Boost as their processor** | We hold it for the coach and use it only on their instructions. The coach's privacy notice explains what they do with it. |
| What you choose to share with a coach | **The coach**, for their own use of it | Once you share a category, the coach uses it to coach you, under their privacy notice. |
| Coaches' own accounts, websites, client lists and ads tools | **Boost** for the coach's account; **the coach** for the clients and leads they add | We act as the coach's processor for their client and lead records. |

Boost and each coach are separate controllers. Neither decides how the other uses your data. We pass a category to a coach only because you told us to.

**What an item is decides who it belongs to, not where you typed it.** A weigh-in or progress photo you add inside a coach's check-in is yours. Your answers to the check-in are the coach's.

If you were a member before 11 October 2026, what you log yourself stays your coach's record until you choose, or until you join another coach on Boost, when we'll ask you again for each coach, or until you withdraw your health-data consent, when we delete it (section 4).

You can read each coach's privacy notice in the app (Account → Privacy policy and Terms) and on the coach's website.

## 3. What we collect

### 3.1 Coaches

- Name, email, phone, business details and branding.
- What you build: websites, pages, programmes, workouts, recipes, forms, courses and other content.
- Billing details for your Boost subscription. Polar sells the subscription and takes the payment; we never see your full card number.
- Payout and sales details if you sell through Stripe.
- Data from accounts you connect, such as Meta (Facebook and Instagram), as section 3.5 explains.
- The client details you add, which you are responsible for (section 2).

### 3.2 Members: what you log yourself

This is your diary. It is yours whichever coach you train with, or with no coach.

- **Food:** your food diary, foods you add yourself, and your own supplements.
- **Body:** weigh-ins, measurements, and your intake answers (such as sex, age, height and body-fat range).
- **Photos:** progress photos you add yourself.
- **Metrics:** steps, sleep and water you enter yourself.
- **Apple Health:** what Boost reads from Health, if you connect it (section 6).
- **Workouts:** your own workouts, routines, custom exercises and records.
- **Habits** and **goals** you set yourself.

Much of this is health information. Data protection law treats health information as "special category" data and protects it more strictly.

### 3.3 Members: your account and coaching

- **Account:** name, email, how you sign in (email code, password, Apple or Facebook), and your answer to "Are you 16 or over?". If you give a date of birth, we use it to check you're old enough (16) and to work out calorie targets. A date of birth under 16 isn't kept.
- **Preferences:** units, time zone, appearance and app theme.
- **Your choices:** whether you've agreed to us keeping your diary, what each coach sees, when you chose, on which screen, and which version of our wording you saw. We keep these as a record of your consent.
- **Coaching data** (held for your coach, section 2): your coach's plan and your logs of it, check-ins and forms, chat messages, voice notes and attachments, bookings, courses and payments, any medical or emergency details you give that coach, and when you last opened the app or their client area.
- **Support:** messages you send us, screenshots you attach, and reports of chat messages.

### 3.4 Collected automatically

- **On the web:** device and browser details, your IP address (and the rough location it shows, such as your country), the pages you visit, the buttons you tap, and errors. When you're signed in, this is linked to your Boost account (your user id and email address). Section 12 explains session replays.
- **In the app:** PostHog (EU) records the screens you open and a short list of steps: opening the app, signing in and how, your date of birth and "Your health data" answers, finishing onboarding, connecting Apple Health, and your first workout and first food logged. It is linked to your Boost account (your user id). Before you sign in, the app keeps a short list of steps in memory only and sends them with your account once you sign in; nothing is saved on your phone for this until then, and if you never sign in, nothing is sent. It never includes what you log, such as weights, food, check-in answers or Apple Health values. We use no advertising tools.
- **App errors and crashes:** when something goes wrong in the app, it sends a short error report to our own error log: the part of the app and the action it happened in, an error code, a short message, the app version, your device model and your iOS version. It is linked to your account, so we can fix the fault and help you. Errors from your Apple Watch go through your iPhone into the same list. In the TestFlight and App Store versions, a crash also sends a crash report to PostHog (EU): where in the app it crashed, the app, iOS and device details, and your Boost user id. Neither kind includes your workouts, food, check-in answers, Apple Health values or anything you type. Errors on our servers, including ones your app's requests cause, are recorded by PostHog without any health information. If you allow it in iOS settings, Apple also shares crash reports and app usage statistics with us.
- **Push notifications:** a device token, so Apple can deliver notifications to your iPhone.

### 3.5 From other services

- **Sign in with Apple or Facebook:** your name, your email (or Apple's private relay address), and the account number Apple or Facebook gives Boost for you. If you sign in with Apple using the same verified email as your existing Boost member account (not a "Hide My Email" address), we link Apple sign-in to that account.
- **Apple age range:** if Apple shares your age range with the app (some US states require this), we use it only to check you can use the app, and we don't keep it.
- **Apple Health:** the readings in section 6, only if you connect it.
- **Coaches' connected accounts:** Meta sends us campaign, ad account and page data the coach allows.
- **Stripe and Polar:** payment status and the details needed to keep records.

## 4. How we use it, and our legal bases

Data protection law needs a legal basis for each use. For health data it also needs an extra condition, and ours is your explicit consent. From 11 October 2026, the "Your health data" screen asks whether Boost Fitness may keep your health information: when you create your account, or the first time you sign in after that date. It also tells you that our support team can look at your account when you ask for help or to fix a problem. Without this consent we can't keep a diary for you, so you can't use the app. Your coach's own plan, check-ins and messages aren't part of your diary: they're your coach's, under their privacy notice. You can withdraw at any time: delete your account (section 10), or email [**support@boostfitness.io**](mailto:support@boostfitness.io) and we'll delete your diary.

| **What we do** | **Data** | **Legal basis** | **Health data condition** |
| --- | --- | --- | --- |
| Run your account, the app, the client area and your diary | Account, diary | Contract | Your explicit consent ("Your health data" screen) |
| Show your diary to the coaches you choose | The categories you choose | Your consent | Your explicit consent (the join, sharing and Apple Health screens) |
| Sync with Apple Health | Section 6 | Contract | Your explicit consent |
| Hold coaching data for your coach | Coaching data | The coach's basis; we act as their processor | The coach's |
| Keep your diary from before 11 October 2026 for your coach until you choose (or join another coach on Boost, or withdraw your health-data consent, when we delete it) | Diary | The coach's basis; we act as their processor | The coach's |
| Check your age | Age answer, date of birth, Apple age range | Legitimate interests (keeping under-16s out of the app and under-13s out of client areas, and meeting US app-store age laws) | n/a |
| Send service emails: codes, receipts, notices about your account | Email, account | Contract; legitimate interests | n/a |
| Keep the service secure, stop bots and abuse, review reported messages | Device, logs, reports | Legitimate interests | n/a |
| Fix faults and answer support requests, including our staff viewing your account as you | Logs, account, what you send us | Legitimate interests | Your explicit consent ("Your health data" screen) |
| Website and app diagnostics and statistics (section 12) | Device, pages, screens and steps, clicks, errors, crashes | Legitimate interests (you can object) | n/a: no health data |
| Keep a record of your consent | Your choices (section 3.3) | Legal obligation (we must be able to show your consent); legitimate interests (defending claims) | Legal claims |
| Keep payment records | Payments | Legal obligation (UK tax law) | n/a |
| Defend or bring legal claims | What is relevant | Legitimate interests | Legal claims |
| Run coaches' accounts, websites and ads tools; bill coaches | Coach data | Contract | n/a |
| Measure our advertising (coaches) | Coach email, name, IP address, browser details, purchase | Legitimate interests (you can object at any time) | n/a |
| Tell coaches about Boost updates and offers | Coach email | Legitimate interests; for sole traders, the "soft opt-in" the e-privacy rules allow. You can opt out of product news in every email we send. | n/a |

We don't send members marketing emails unless you've agreed to them.

**If you were a member before 11 October 2026.** Until then, what you logged in your coach's client area was your coach's record, and Boost held it for them. That stays the same until you choose, or until you join another coach on Boost (then we ask you again for each coach), or until you withdraw your health-data consent (then we delete what you logged yourself, including entries from before 11 October 2026): your coach keeps seeing what they saw before, under their privacy notice, and Boost keeps holding it for them as their processor. The next time you sign in, we ask whether Boost Fitness may keep your diary for you, and what your coach sees. From then on, Boost looks after your diary and your coach sees only what you choose.

- Apple Health and habits you set yourself are never carried over.
- Some members are always asked instead: for example, if you have more than one coach, or if we couldn't confirm your link to your coach.

## 5. What your coaches see

From 11 October 2026: **what you start yourself goes only to the coaches you share it with.** There are eight categories: food, body (including intake answers), photos, metrics, Apple Health, workouts, habits and goals.

- **When you join a coach**, one screen shows what "\<Business> and their team" will see, so they can coach you. You can share these, choose, or join without sharing. Nothing is ticked for you.
- **Later**, you can change it at any time: in the app (Account → My coaches → What \<Coach> sees) or on the coach's website (Account → What each coach sees).
- **Turning a category off** stops that coach seeing it at once. It also removes totals and summaries made from it, such as day totals, habit values and analytics. It can't undo what the coach has already seen or written down.
- "Their team" means the people the coach lets into their Boost business account, such as other trainers.

**What a coach gives you stays between you and that coach.** Their workouts and your logs of them, their habits and ticks, their check-ins, forms and your answers, their supplements, the goals they set, meal plans you send them, and your chat. **Other coaches never see these.**

**Leaving a coach:**

- You can leave a coach in the app (Account → My coaches) or on their website. If they remove you, the effect is the same.
- Your sharing with them ends at once. Your history with them is deleted from Boost: their programmes, workouts and habits with your logs of them, your check-in and form answers, and their notes, check-in reviews and files about you. Your chat with them closes, and neither of you can open it again.
- What you log yourself stays in your account (section 9).
- If you have paid courses with them, you choose: **leave now**, which ends that access at once and stops subscriptions renewing, or **wait** until it ends. Leaving doesn't refund what you've already paid. Ask your coach if you think you're owed a refund.
- If your Boost login was made on one coach's website and they're your only coach, you can't leave them, because that would close your account. You can delete your account instead (section 10).
- Rejoining asks you again what to share.

**Other rules:**

- A coach sees what you log yourself only while you are an active client. If they pause or suspend you, or you haven't yet confirmed them, they see nothing you log yourself.
- Your coaches can see when you last opened the app or their client area.
- Food from a coach's own library or meal plan, and a coach's own exercises, stay with that coach. Other coaches see that food only inside your day totals, and those exercises only as "Exercise".
- Other coaches can't see which coach a food or exercise came from, so one coach can't learn about your other coaches from what you log.
- With more than one coach, you pick one nutrition coach. Another coach whose plan you pause sees "Nutrition plan paused by \<your name>" and is never told about your other coach.
- A personal best in a coach's workout tells that coach. A personal best in your own workout tells the coaches you share workouts with.
- Profile changes go to all your coaches unless you say otherwise. Medical and emergency details are asked by each coach separately.

## 6. Apple Health

Connecting Apple Health is optional. You can disconnect at any time.

- **We read:** weight, steps, sleep and resting heart rate.
- **We write:** workouts you finish in Boost Fitness (with an estimate of the energy you used), and weights you log.
- The app reads from Health and writes to it on your iPhone. We keep what we read in your Boost account, on our servers in London, so your stats stay up to date on every device. Our hosting providers, Supabase and Vercel, store and process it for us under contract, and for nothing else. We never store Health data in iCloud.
- **Coaches:** when you connect, we ask about each coach separately: "Share Health data with \<Coach> and their team?" Nothing is pre-selected. If you share, they see your weight, steps, sleep and resting heart rate from Apple Health on your profile, to coach you. A coach you join later is asked about when you join. You can change it at any time.
- **When you disconnect,** you choose to delete what we read from Health, with anything worked out from it, or to keep it. To stop iOS sharing with us, use the Health app.
- Health data is **never** used for advertising or marketing, **never** sold, and **never** sent to analytics tools, Meta or any AI model, including the AI that writes coaches' weekly to-do lists.

## 7. Who we share it with

**We don't sell personal information.**

We share it with:

- **Your coaches,** as section 5 explains.
- **Our service providers.** They act only on our instructions, under contracts that protect your data:

| **Provider** | **What they do** | **Where** |
| --- | --- | --- |
| Supabase | Database, sign-in, file storage | London, UK |
| Vercel | Hosting the website and API; bot checks; counting page visits without cookies; AI gateway | London, UK (pages served worldwide) |
| OpenAI, Microsoft Azure, Amazon Bedrock and Google (Gemini API and Vertex AI), through Vercel's AI gateway | AI features coaches use: reading the workouts, recipes and client lists they import (a client list can include names, contact details and notes); the weekly to-do list about their clients (counts and percentages only, never names, contact details, food, weights or Apple Health data); documents; ad analysis; and grouping the names coaches give their own library items, so we can see what Boost's library lacks. OpenAI's models are the main ones; Google's Gemini is the back-up for some features. | USA and other countries (section 13) |
| Resend | Emails sent for coaches, including members' sign-in codes, and our account emails to members, such as account-closure confirmations | USA |
| Loops | Emails from Boost to coaches, and Boost's notices to members | USA |
| PostHog | Diagnostics and statistics on the website and in the app, crash reports from the app, and errors on our servers (section 12) | EU (Germany) |
| Apple | Push notifications (your device token and the notification text) | USA |
| Amazon Web Services | Storing and processing coaches' ad images and videos | Sweden |
| Google (Google Workspace) | Our [**support@boostfitness.io**](mailto:support@boostfitness.io) email | USA and other countries |
| Asana | Keeping track of support requests | USA |

- **Other companies, when you use their features.** Each is responsible for its own use of your data, under its own privacy policy:

| **Company** | **When** | **Where** |
| --- | --- | --- |
| Apple | Sign in with Apple; your age range, if your iPhone shares it | USA |
| Meta | Facebook sign-in. Boost's Meta Pixel on our public website pages, only if you allow marketing cookies (section 12). When a coach starts a trial or buys a Boost plan: the purchase, with a scrambled (hashed) copy of the coach's email address and name, their IP address and browser details, so we can measure our ads. Coaches' own ad tools, which they connect. | USA, Ireland |
| Google (YouTube) | Exercise demo videos, played in YouTube's privacy-enhanced mode. When a video loads or plays, Google receives your IP address and device details. | USA |
| Stripe | Payments members make to coaches. Most are taken on the coach's own Stripe account. Payments through a coach's pay link are taken on Boost's Stripe account and passed to the coach; for those, Boost keeps the payment record. | USA, Ireland |
| Polar | Sells Boost subscriptions to coaches as our merchant of record: it takes the payment and keeps its own records of the sale | Sweden, USA |

- **Barcode look-ups.** When you scan a barcode, our server looks it up on Open Food Facts (France). Only the barcode number is sent, nothing about you.
- **When the law requires it,** or to protect people's safety or our rights.
- **If Boost is sold or becomes a company,** the new owner would take on this policy. We would tell you first (section 1).

**AI.** The AI features above send the content involved (for example, the client list a coach imports) through Vercel's AI gateway to AI models from OpenAI or Google, run by OpenAI, Microsoft Azure, Amazon Bedrock, Google's Gemini API or Google Cloud Vertex AI. Under their terms, none of them uses it to train AI models, and neither do we. Vercel deletes it as soon as each request is finished. The company running the model may keep it for up to 24 hours to answer repeat requests faster, and to check for abuse for up to 30 days (OpenAI) or 55 days (Google's Gemini API), or longer where the law requires. Anything its safety systems flag may be kept for review under its own policy.

## 8. How we protect it

- Data is encrypted in transit and at rest.
- Rules in the database decide who can see each row. One check decides what a coach sees, and automated tests check each kind of coach, member and category before each release.
- Coaches can turn on two-step login.
- Only the two people who run Boost have staff access. Staff look at an account only to fix a problem or answer a request. When we view an account as its owner, it's recorded, and from that session we can't change your sharing choices, answer the age question, leave a coach or delete your account.
- We remove email addresses and keys from our error logs.

No system is perfectly secure. If a breach puts you at risk, we'll tell you, the ICO and anyone else the law requires.

## 9. How long we keep it

| **Data** | **How long** |
| --- | --- |
| Your account and diary | While your account is open. Removed within 30 days of you deleting your account (section 10). |
| What you log yourself after you leave a coach, or they remove you | Stays in your account if you've agreed to us keeping your diary. If you haven't, it's deleted with that coach's records. |
| Coaching data | While you're with that coach, then as their privacy notice says. Deleted at once if you leave that coach or they remove you, and within 30 days if your account or the coach's account is deleted. Payment records are kept as below. |
| Closed chats (after you leave a coach, or they remove you) | Deleted 30 days after the chat closes. |
| Your consent choices | Sharing choices: while you're linked to that coach. Your health-data and Terms answers: while your account is open. Then six years, with only the details needed to show what you agreed to. |
| Payment records | Six years, with your name and contact details removed from our records, as UK tax law requires. For payments to coaches, the record is kept in Stripe. Stripe and Polar keep their own records of each payment under their own privacy policies. |
| Support requests | Deleted two years after the request closes. Requests to delete an account or to use your data protection rights are kept for six years after they close, to show we acted on them. |
| Our error log (website and app errors) | 180 days. |
| Website and app diagnostics in PostHog (app crash reports included), and website replays | Diagnostics: 12 months. Replays: 30 days. |
| App sign-ups never finished (an email code never entered) | Deleted after 30 days. |
| Backups | Deleted data can stay in encrypted backups for up to 7 days, until they are overwritten. |

## 10. Deleting your account

**In the app:** Account → Delete account. **On your coach's website:** Account → Sign-in & security → Delete account. Either way, we email you a 6-digit code to confirm it's you.

- Your account closes as soon as you confirm. You're signed out on that device at once, and on your other devices within an hour.
- We remove your data within 30 days. This includes the check-ins, form answers and messages held in your account for your coaches. We keep payment records, with your details removed, for six years, as UK tax law requires, and a record of your consent choices (section 9).
- Your coaches lose access to all of it, at the latest when we remove it. We tell each coach you trained with that you've closed your account, so they can delete any copies they made outside Boost.
- Any subscription you pay a coach stops renewing, so no more payments are taken. Your access ends when your account closes. Closing it doesn't refund the rest of the period you've paid for. Ask your coach if you think you're owed a refund.
- If you signed in with Apple, we tell Apple to end Boost's link to your Apple ID.
- We email you to confirm.

**By email:** write to [**support@boostfitness.io**](mailto:support@boostfitness.io) from your account's email address. We reply within 5 working days and finish within 30 days. Coaches who want to close their account should email us.

**If you remove Boost Fitness in your Facebook settings,** Facebook tells us and shows you a confirmation code. We remove Facebook sign-in from your Boost account within 30 days and ask whether you'd like your account closed. To check progress, email us your code.

**Leaving a coach is different.** Your account and what you log yourself stay. That coach's access ends at once, and their records about you in Boost are deleted (section 5).

## 11. Your rights

You have the right to:

- get a copy of your data;
- correct it;
- delete it;
- limit or object to how we use it;
- take it with you in a common format;
- withdraw consent at any time. Withdrawing doesn't affect what happened before.

Most of this you can do yourself: change sharing in My coaches, edit your diary, or delete your account. For anything else, email [**support@boostfitness.io**](mailto:support@boostfitness.io). We answer within one month.

If your request is about a coach's records, such as their check-ins or chat, the coach decides. We'll pass your request to them and help them answer.

We don't make decisions about you based only on automated processing. Your email address and your answer to "Are you 16 or over?" are needed to use the app. Everything else you give us is up to you, though some features need it: calorie targets, for example, need your intake answers.

You can complain to the ICO at ico.org.uk or on 0303 123 1113. If you're in the EU or EEA, you can also complain to the data protection authority where you live. If you're in the USA, see section 15. We'd like the chance to help first.

## 12. Cookies, diagnostics and analytics

**In the app:** PostHog (EU) records the screens you open and the steps listed in section 3.4, so we can see where people get stuck. There are no session replays, and it doesn't record what you tap or type. Once you're signed in, the app keeps PostHog's own ids and a queue of steps not yet sent on your phone, and asks PostHog for its settings when it starts. When you sign out or delete your account, the app stops analytics and deletes the identifiers and unsent events it stored on your phone. There are no advertising tools and no tracking, and nothing is shared with advertisers or data brokers. App errors go to our own error log and app crashes to PostHog (EU); section 3.4 lists what each holds. We rely on our legitimate interests. You can object, or ask us to delete these, at any time by emailing [**support@boostfitness.io**](mailto:support@boostfitness.io).

- Exercise demo videos from YouTube play in YouTube's privacy-enhanced mode inside the app. When a video loads or plays, Google receives your IP address and device details and may store data in the video player, under Google's privacy policy.

**On the web:** our Cookie Policy lists every cookie.

- **Signed out,** PostHog measures visits without cookies until you allow analytics cookies. Vercel counts page visits without cookies and without identifying you.
- **Signed in,** PostHog (EU) records the pages you visit, what you tap and how far you scroll (with the words on screen hidden, except on our public marketing pages) and any errors. This is linked to your account and email address, so we can find faults, answer your support requests and see how Boost is used. It runs whatever your cookie choice, because we need it to keep Boost working. We rely on our legitimate interests. You can object, or ask us to delete these diagnostics, at any time by emailing [**support@boostfitness.io**](mailto:support@boostfitness.io).
- **Session replays:** we never record replays on coaches' websites or in client areas, so a replay never shows what a member logs. On boostfitness.io (including the coach dashboard) and our sign-in pages, we may record a replay of a signed-in session to find faults. Everything typed is hidden. On the pages where coaches see their clients (Clients, Analytics and Chat), and on our own support and admin pages, all text, numbers and images are hidden too. If you allow analytics cookies while signed out, we may also record a replay of your visit to boostfitness.io or our sign-in pages, with everything typed hidden.
- **Nothing about your health,** such as weights, food, check-in answers or Apple Health values, is sent to PostHog or Meta. We remove it from every event before it's sent.
- **The Meta Pixel.** Boost's Meta Pixel loads only on our public website pages, and only if you allow marketing cookies. Where it loads, we and Meta Platforms Ireland are joint controllers for collecting that data and sending it to Meta, under Meta's Controller Addendum. Meta is responsible for what it does with it afterwards. No pixel ever loads in client areas or on the pages where coaches see their clients. A coach can add their own Meta Pixel to their public website pages; their privacy notice covers it.

## 13. International transfers

We keep our database and files in London. Some providers in section 7 are in the USA, the EU or elsewhere. Our hosts keep your data in London, but their staff in the USA can access it to support the service, under the safeguards below. AI requests (section 7) can be processed in any country where the AI providers run their services.

When data leaves the UK, we use one of the protections UK law allows: a UK adequacy decision (for example, for the EU), the UK Extension to the EU–US Data Privacy Framework where the provider is certified, or the UK's International Data Transfer Agreement or Addendum. You can ask us for a copy of the safeguards for any provider by emailing [**support@boostfitness.io**](mailto:support@boostfitness.io).

**If you're in the EU or EEA.** The EU recognises the UK as protecting personal data adequately, so your data can come to us in London.

## 14. Children and age limits

- **Coaches** must be 18 or over.
- **Boost is for people aged 16 and over**, in the Boost Fitness app and in coaches' client areas. We ask your age when you set up an account or sign in with an email code, and once if we don't have an answer.
  - If you say you're under 16, we don't sign you in or set up an account.
  - If we learn later that you're under 16, we sign you out, close your account and delete what's in it within 30 days. If you train with a coach, we let them know.
  - If you answered by mistake, email [**support@boostfitness.io**](mailto:support@boostfitness.io).
- **We don't knowingly collect personal information from anyone under 16.** If we find we have, we delete it. If you think someone under 16 is using Boost, email [**support@boostfitness.io**](mailto:support@boostfitness.io).
- **For everyone, including under-18s:** when you join a coach, nothing you log yourself is shared until you choose. We show no ads in the app or in client areas. We never sell your data or use what you log for advertising. We don't collect your precise location or track where you go.

## 15. If you live in the USA

- **Consumer health data.** Our [**Consumer Health Data Privacy Policy**](https://boostfitness.io/legal/consumer-health-data) explains the health data we collect, why, who we share it with, and your rights under Washington's My Health My Data Act, Nevada's law and similar laws.
- **We don't sell your personal information.** We use it for targeted advertising only through Boost's Meta Pixel on our public website, which loads only if you allow marketing cookies, and, for coaches, through the purchase details we send Meta (section 7). The pixel never runs in client areas and never receives health information. You can turn it off at any time in Cookie settings, or opt out of both by emailing [**support@boostfitness.io**](mailto:support@boostfitness.io).
- **Do Not Track.** Our website doesn't respond to Do Not Track signals. Apart from the Meta Pixel above, no third party collects information about your activity over time and across other websites through Boost.
- **Your rights** in states with privacy laws, such as Connecticut: you can ask us to confirm what we hold about you, get a copy in a portable format, correct it or delete it, and opt out of targeted advertising. We use sensitive data, such as health data, only with your consent. We don't use profiling to make decisions about you that have legal or similarly significant effects. We never use your data for targeted advertising, or sell it, if we know you're under 18. Email [**support@boostfitness.io**](mailto:support@boostfitness.io). We answer within 45 days.
- **Appeals.** If we refuse, reply "Appeal". We answer within 45 days. If you're still unhappy, you can complain to your state attorney general.
- **Children.** Boost isn't for anyone under 16 (section 14).

## 16. Changes to this policy

When we change this policy, we update the date at the top. If a change matters, we tell you by email or in the app before it takes effect. Where we need your consent for something new, we'll ask.

## 17. Contact

Email [**support@boostfitness.io**](mailto:support@boostfitness.io), or write to Mason Tustin, trading as Boost Fitness, at the business address in section 1.

**Coaches:** you are responsible for the client data you control (section 2). Your clients see your privacy notice in the app and on your website. Boost generates it from your business details; see the coach Terms and Data Processing Terms.

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://boostfitness.io/#identity","@type":"Organization","description":"Websites, client management, payments, and marketing for fitness professionals.","name":"Boost Fitness","url":"https://boostfitness.io","logo":{"@id":"https://boostfitness.io/#logo"},"sameAs":["https://instagram.com/boostfitness.io"]},{"@id":"https://boostfitness.io/#website","@type":"WebSite","description":"Websites, client management, payments, and marketing for fitness professionals.","inLanguage":"en-GB","name":"Boost Fitness","url":"https://boostfitness.io","publisher":{"@id":"https://boostfitness.io/#identity"}},{"@id":"https://boostfitness.io/legal/privacy-policy#webpage","@type":"WebPage","description":"Learn how Boost Fitness protects your privacy and handles your personal information.","name":"Privacy Policy","url":"https://boostfitness.io/legal/privacy-policy","isPartOf":{"@id":"https://boostfitness.io/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://boostfitness.io/legal/privacy-policy"]}],"primaryImageOfPage":{"@id":"https://boostfitness.io/#logo"}},{"@id":"https://boostfitness.io/#logo","@type":"ImageObject","caption":"Boost Fitness","contentUrl":"https://boostfitness.io/boostfitnesslogo.png","inLanguage":"en-GB","url":"https://boostfitness.io/boostfitnesslogo.png"}]}
```

## Sitemap

See the full [sitemap](https://boostfitness.io/sitemap.md) for all pages.