Privacy Policy

Who we are

Primed is a workout tracking app for your phone, on the App Store and Google Play, with a web dashboard at primedlog.com for the personal trainers who coach on it. Primed is operated by Makappen Ltd, which is the data controller responsible for your information. You can reach us any time at support@primedlog.com.

Makappen Ltd is a private limited company registered in England and Wales, company number 11985285. Registered office: 33 Boston Road South, Holbeach, Spalding, Lincolnshire, England, PE12 7LR.

What we store, and where

• Training data, signed in. If you have an account, your workouts, routines, exercises, readiness check-ins and body measurements sync to our database, hosted by Supabase. Your data is stored as a single record tied to your account, and access rules on the database mean only you can read or write it. That's what lets you log on one device and pick it up on another.
• Training data, guest mode. If you use Primed without an account, everything is saved on the device you are using and never uploaded. It exists only there, so it goes when you delete the app, or when you clear that browser's data if you are using Primed in a browser.
• Health and wearable data. If you connect your phone's health app, Health Connect on Android or Apple Health on iPhone, Primed reads a narrow set of recovery and movement figures and only the ones you tick when your phone asks. On Android those are exactly six, all read-only, and we request no others: sleep, heart rate variability, resting heart rate, steps, distance and active energy burned. We read; we never write anything back. The figures are stored with that day's check-in on your account. Sleep, heart rate variability and resting heart rate feed your readiness score; steps, distance and active energy are shown to you in the app as your own activity and do not feed the score. If you are connected to a trainer and you send a weekly check-in, that check-in includes an average of your recent sleep hours, so a sleep figure that came from your health app can reach your trainer. Nothing else derived from your health app is ever sent to them, you choose to send each check-in, and you can end the connection at any time. We do not use health data for advertising, we do not sell it, we never send it to an app store or an ad network, and we never share it with anyone other than a trainer you have chosen to connect to. You can withdraw the permission at any time in your phone's settings, and Primed keeps working without it.
• Progress photos. Photos you add are kept on your device. They are left out of ordinary cloud sync on purpose, so they do not follow you to a new phone. There is one exception, and it only ever happens because you asked for it: if you attach photos to a check-in for your trainer and confirm that send, a copy of those photos is uploaded to private storage so your trainer can open them. Nothing is uploaded if you do not attach it. Stored photos sit in a private area that no one can browse; only you and the trainer you are connected to can open them, through links that expire. You can stop sharing at any time from Progress, under Photos you have shared, which deletes the uploaded copies. If you have no trainer connected, no photo of yours is ever uploaded. Keep your own copy with Settings → Privacy → Download my data.
• Voice notes. If you record a voice note for your trainer, the recording is uploaded to private storage so they can play it. Your microphone is only ever used while you are holding the record button, and nothing is captured before or after that. A note is kept until it is deleted, and the person listening cannot delete someone else's recording. While you are connected only the two of you can play it; when the coaching connection ends they stop being able to open it, though anything already open on their screen can linger for a few minutes, and your own recordings stay yours.
• Messages with your trainer. If you connect to a trainer, the messages the two of you send are stored on your account, so the conversation is there the next time either of you opens it. Any photo or voice note sent in a message is uploaded to private storage. A message is sent deliberately, so it is not covered by the sharing switches in the app: what you type or attach, you have chosen to send. Message photos and voice notes sit in a private area that no one can browse, and are opened through links that expire. If you have no trainer connected, none of this exists for you.
• Account details. If you create an account (with Apple, Google or email), we store your name, email address, and your trial/subscription status. That's all we need to know it's you.
• Profile details, if you add them. Edit profile also lets you add a photo, a short bio, your date of birth, your sex, your height, your experience level and your training goal. Every one of them is optional, you can change or clear any of them at any time, and Primed works without them. They are stored with your account, they are used only inside the app to show your details back to you and to shape which plans it suggests, and none of them is ever sent to a trainer.
• Payments. We never see or store your card number. Subscriptions are bought in the app, so Apple or Google takes the payment and your card details go to them, never to our servers. We use RevenueCat to keep track of whether that purchase succeeded, so it receives your Primed user id and your purchase history and tells us only whether your subscription is active.
• Feedback you send us. If you use Settings → Help → Send feedback, we store what you wrote and the email address on your account, so we can read it and reply. Nothing else goes with it.
• Trainer applications. If you apply to coach on Primed, we store what you put in the form: your name, email, business name, years of experience, your highest qualification, your registration number, your public liability insurer, a link to your website or Instagram, and what you wrote about how you coach. We keep it to decide on your application and to run your coach account if we approve it.
• Emails. We send a small number of transactional emails (via Resend) to the address you signed up with: a welcome email, a reminder before your trial ends, and the messages that confirm a password reset or an email change. Receipts come from Apple or Google, not from us. Reply to any of ours to reach a human.

Backups and export

Whether you're signed in or a guest, you can take a full copy of your data anytime, and there are two routes because they answer two different questions. In a browser both save as files. In the phone app the copy currently comes to your clipboard instead, so paste it into a note, a document or an email to keep it.

• Settings → Privacy → Download my data. Your copy, in formats other software can open: everything as a JSON file, every set you have ever logged as a spreadsheet, and your body log as a second spreadsheet. Nothing is uploaded and nothing leaves your device in the process.
• Settings → Account → Export & import. The same data as a backup file this app can read back, for moving to a new phone or restoring after a reinstall.

It's your data; take it with you whenever you like.

What we don't do

• No advertising, and no third-party ad trackers.
• No profiling you across other websites, and no ad networks.
• No selling, renting or sharing your personal data with anyone, ever.
• No use of your training or health data for anything except showing it back to you and, if you ask, your trainer.

Analytics, and the only thing we ask you to agree to

On some pages of this website, though not the home page, we use Google Analytics to count visits and see which pages people actually find useful. It tells us things like how many people opened a page and roughly where in the world they were. We do not use it to build advertising profiles, we do not run ad networks, and it never has access to your training, health or photo data.

It only runs if you say yes. Nothing is loaded and no cookie is set until you press Allow on the bar at the bottom of the page. Press No thanks and Google Analytics is never loaded at all, on any page, and we don't ask again. Declining changes nothing else about the site.

There is no analytics in the Primed app. There is no setting for it, because there is nothing to switch off. Nothing about the training you log is counted or sent anywhere except to your own account.

If you connect a trainer

You can connect your account to a personal trainer so they can coach you. This only ever happens when you accept an invite from them, and nothing is shared until you do.

• What your trainer can see. Your name, so they can tell their clients apart. A summary of the training you log: your sessions and sets, how consistently you are training, and the programmes they have sent you. They also see your body weight and any tape measurements you record, and the check-ins you choose to submit, which can include your body weight, energy, sleep, a note, and any progress photos you attach.
• You choose, field by field. Open Settings → Privacy → What your coach sees. It lists everything that leaves your phone for them and lets you switch off your name, your recent workouts, your weekly totals, your body weight and your measurements individually. Turning one off removes it from what they receive, straight away. How often you train, meaning your sessions, your streak and how close you are to your weekly goal, is the one thing you cannot switch off, because without it there is no coaching to do; the screen says so rather than pretending otherwise.
• The identifying details we never send. Your email address, your bio, your date of birth and your profile photo are never sent to a trainer, whatever your settings. The only identifying detail that can reach them is the name on your profile, and you can switch that off too.
• What your trainer cannot see. Anything else in your account. They cannot sign in as you, they cannot change or delete the workouts you log, and they cannot delete your progress photos. Your account stays yours.
• Only while you are connected. Your trainer's access to your check-ins, your shared figures, your progress photos and your voice notes depends on the connection being active. When either of you ends it, they stop being able to open those, and anything already open on their screen can linger for a few minutes.
• Voice notes. A recording is made only while you hold the record button. The person listening cannot delete someone else's recording. Your trainer can play your notes only while the connection is active; when it ends they stop being able to open them, though anything already open on their screen can linger for a few minutes.
• Progress photos. Photos reach your trainer only when you attach them to a check-in and confirm that send. It is never automatic, and it is decided one check-in at a time: attaching photos once does not sign you up to share the next set. Your trainer opens them through links that expire, and only while your connection is active. You can stop sharing a set at any time from Progress, under Photos you have shared, which deletes the uploaded copies, and your trainer cannot delete them themselves.
• Your trainer is responsible for what they do with it. Once they can see your training, they are handling your data as an independent professional, and they are responsible for that under data protection law. If you have a question about how a particular trainer handles your information, ask them directly.

Ending the connection is a single action in the app and needs no one's permission. When you do, you keep everything you have logged.

If you report someone, or block them

You can report any message, photo or voice note your trainer sent you, and you can block them outright. Both are private: the person you report is never told who reported them.

• What a report stores. The reason you picked, who you are, who you reported, when, and a short extract of the message being reported so we can see what you saw. Where the report is about a photo or a voice note, we keep the reference needed to open that file during the review.
• Who reads it. Only us, and only to review the report. Reports are never shown to the person reported, never used for anything else, and never sold or shared with an advertiser.
• What a block stores. A standing record that the two accounts must not be reconnected, so the same trainer cannot invite you again. It has to outlive the connection to work, so it is kept even after the coaching link is gone.
• How long. A report or a block lives for as long as both accounts involved do. If you delete your account, the reports you filed and the blocks you set go with it. The same is true if the trainer deletes theirs.

Sign in with Google

If you sign in with Google, we receive your name, email address and profile picture from your Google account, nothing else. We use them only to create and identify your Primed account.

Deleting your data

In the app, in one place. Open Settings → Help → Delete account, the last item on the list. It permanently erases your account and everything attached to it: workouts, routines and records, readiness check-ins and any health figures we read, body measurements, progress photos, and your coach connection with its messages and check-ins, on our servers and on the device you delete it from. It is immediate and cannot be undone, so export a backup first if you want to keep a copy.

Already uninstalled? Email support@primedlog.com from the address on the account and we'll delete it for you, normally within a few days.

Guest mode. There is no account to delete. Erase everything from Settings → Account → Export & import → Reset all data, or by deleting the app, or by clearing that browser's data if you are using Primed in a browser.

Deleting your account does not cancel a subscription bought through the App Store or Google Play. Cancel that in your phone's subscription settings, or you may keep being charged.

Why we're allowed to use your data

UK data protection law requires us to have a lawful basis for everything we do with your information. Ours are:

• To provide the service you asked for (contract). Your account details, your workouts, routines, records and body measurements, and the syncing that puts them on every device you sign in on. Without this we cannot run Primed for you.
• Your consent. The health figures we read from your phone's health app, and anything you share with a trainer. Both are switched on by you and can be switched off by you at any time, in your phone's settings and in Settings → Privacy → What your coach sees. Withdrawing consent does not undo what we did while it was given, and the rest of Primed keeps working.
• Our legitimate interests. Keeping the service secure and working, and counting visits to our website so we know which pages are useful. We have weighed this against your privacy and kept it to the minimum: no advertising, no profiling, no data sold.
• Legal obligation. Keeping the records of a sale that tax and company law require us to keep.

Health data is special category data under UK GDPR. We rely on your explicit consent for it, and we ask for it only when you turn the connection on. We use it to work out your readiness score and to show you your own activity in the app, and the only time any of it leaves your account is inside a weekly check-in you choose to send to a trainer you are connected to, which carries your average sleep hours and how you rated your energy, and nothing else we read from your health app.

How long we keep it

• Your training data stays until you delete it. Delete your account and it goes immediately, along with everything attached to it.
• Guest data we never hold at all, so there is nothing for us to keep.
• Records of a payment we keep for six years after the tax year they fall in, because UK tax law requires it. That is the sale record, not your card details, which we never have.
• Support emails we keep for up to two years so we can pick up a conversation where it left off.
• Website analytics is aggregated and retained for up to fourteen months.

Who else touches your data

We use a small number of suppliers to run Primed. They process your data on our instructions only, under contract, and none of them may use it for their own purposes.

• Supabase: the database and sign-in system that holds your account and your synced training data.
• Cloudflare: serves primedlog.com.
• Resend: sends the handful of transactional emails described above.
• Google: Analytics on the pages of this website that use it, the web fonts every page of this site loads, and Sign in with Google if you choose it.
• Apple and Google: they take the payment if you subscribe in the app.
• RevenueCat: keeps track of your subscription entitlement across the two stores. It receives your Primed user id and your purchase history, and tells us only whether your subscription is active.

Where they are. Some of these suppliers are based in, or store data in, countries outside the UK, including the United States. Where that happens we rely on the UK's adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so that your data keeps the protection UK law gives it. Ask us at support@primedlog.com and we'll tell you which applies to which supplier.

Your rights

Under UK data protection law you have the right to:

• Get a copy of the personal data we hold about you. Settings → Privacy → Download my data does this instantly, or email us and we'll answer within one month.
• Correct anything wrong. Most of it you can edit yourself in Edit profile; email us for anything you cannot reach.
• Have it erased. Settings → Help → Delete account does it immediately, or email us.
• Take it elsewhere in a machine-readable format. That is what the JSON and spreadsheet exports are for.
• Restrict or object to what we do with your data, including anything we do on the basis of legitimate interests.
• Withdraw consent at any time, for the health connection and for anything shared with a trainer.

None of these cost anything, and using them will never get your account treated differently. Email support@primedlog.com and we'll reply within one month.

If we get it wrong. Tell us first and we'll try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to come to us first.

Children

Primed is not for under-16s and we don't knowingly collect anything from one. If you believe a child has given us their information, email support@primedlog.com and we'll delete the account.

Changes to this policy

If we change how we handle your data, we'll update this page and the date at the top. Significant changes will be announced in the app.