Hidden PT Co.
Privacy Policy
Last updated 19 October 2026
Hidden PT Co. provides software that personal trainers use to deliver training programmes to their clients. This policy explains what the Hidden PT Co. mobile app collects, why, and what happens to it. It is written to be read, not to be survived.
Who is responsible for your data
Hidden PT Co., Jersey, Channel Islands, is the data controller for the app and its database. Your personal trainer is a separate controller for the training programme they design for you and for the workbook in which they keep it. If you want to know how your trainer handles their own records, ask them directly.
What we collect
- Account details. Your email address and display name. We use email only to sign you in and to contact you about the service.
- Training data. The sets, repetitions and weights you record, the date and time you recorded them, and any notes you add to an exercise.
- Body and nutrition data you choose to enter. Bodyweight, steps, food entries and macro totals. Nothing here is required to use the app.
- Other activities you choose to add. Things you did outside your programme, such as a game of tennis or a swim, with optional minutes, effort, average heart rate, calories and a note.
- Your weekly check-in. Your answers about energy, sleep, stress, soreness and any pain, and anything you tell your trainer.
- Progress photos, if you take them. Stored privately and visible only to you and your trainer.
- Technical data. App version, build number and basic error information, so we can fix faults.
We do not collect advertising identifiers. We do not track you across other apps or websites. We do not sell your data, and we never will.
Health data
Training logs, bodyweight and food entries are health-related information and we treat them as sensitive. We process them only to provide the service to you and your trainer, on the basis of the agreement between you and your trainer and your use of this app. We do not use them for profiling or automated decision-making.
Who can see it
- You. Always.
- Your personal trainer. They see your programme, your logged sets, and the metrics and photos you enter, because that is how coaching works.
- Our infrastructure providers. Supabase hosts the database, authentication and photo storage. Google hosts the workbook your trainer keeps your programme in. Apple distributes the app. They process data on our instructions and do not use it for their own purposes.
We disclose data to nobody else unless the law requires it.
Where your data is held
Data is stored on servers operated by Supabase and Google. Transfers outside Jersey, the UK and the EEA rely on the standard contractual safeguards those providers offer.
How long we keep it
We keep your account and training history for as long as your account exists. Delete your account and it goes, as described below. Backups roll off within 30 days.
Deleting your account
You can delete your account from inside the app, in Settings. When you do:
- Your account, login identity, training history, logged sets, metrics, food entries and progress photos are deleted from our database and storage.
- Your trainer keeps the programme workbook they created for you. It is their business record, in their own Google Drive, and it is not ours to delete. If you want it removed, ask your trainer.
Deletion is immediate and cannot be undone.
Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email support@hiddenptco.com and we will respond within 30 days. If you are unhappy with our response you can complain to the Jersey Office of the Information Commissioner at jerseyoic.org.
Children
The app is not intended for anyone under 16. If a trainer invites a younger client, that trainer is responsible for obtaining parental consent.
Security
Access is protected by one-time email codes rather than passwords. Data is encrypted in transit and at rest, and database access rules restrict every row to the client it belongs to and their trainer. No system is perfect; if something goes wrong that affects you, we will tell you.
Business contacts and partnership emails
Separately from the app, we sometimes email organisations, such as gyms, PT course providers and trade bodies, about partnering with us. We only use business email addresses that the organisation publishes on its own website. We keep the organisation's name, the address, where we found it and any replies, and use them only to contact that organisation about Hidden PT Co. We never sell or share them.
To stop these emails, reply UNSUBSCRIBE or email support@hiddenptco.com. We will stop within 48 hours and keep your address on a do-not-contact list so it is never emailed again. We rely on our legitimate interest in telling businesses about our service. You can ask what we hold about you, or complain to the Jersey Office of the Information Commissioner.
Changes
If we change this policy we will update the date at the top and, for anything significant, tell you in the app.