Back to home

Privacy policy

PHNX is a training and nutrition app for people who lift and for the coaches who train them. This page says what the app keeps about you, why, who else sees it, how long it is kept and how to have it deleted. Last updated: 15 October 2026.

In short

  • What you log is stored on your phone first and copied to our server, so it survives a lost phone and reaches the coaches you choose.
  • You choose, coach by coach, what each coach sees. Other members never see what you log.
  • The AI features send only what each request needs to the AI company that answers it. Meal photos are kept only on your phone; a scan sends a small copy to the AI service to read.
  • We do not sell your data, and nothing you log is used for advertising.
  • You can delete your account, and everything in it, from inside the app.

What we keep

  • Your account: your email address, your password (kept only in scrambled, hashed form), the name and username you choose, your profile photo if you add one, whether you joined as a member or a coach, your plan, your scan credits, and the program builds and plan imports you have bought.
  • Your profile: what you tell the app when you set it up and later: sex, year of birth, height, weight, goal and goal weight, activity level, experience, how long you have trained, your aims and sports, nationality, city, home gym, a short bio, your Instagram, TikTok and YouTube names, whether other members may find you, and the injuries you mark. Some of this is health information, and we treat it as such.
  • What you log: workouts and their sets, routines, programs and your training schedule, meals with their foods and macros, foods and exercises of your own, weigh-ins and body measurements, nutrition targets, supplements and when you took them, and the badges you earn.
  • Photos you choose to add: workout photos, progress photos you send in a check-in, your profile photo and, once Community opens, photos you post. Nothing is taken without you pressing the button, and photos are saved again without their location or camera details. Meal photos are kept only on your phone; a scan sends a small copy to the AI service to read (see "How long").
  • Coaching: if you work with a coach in the app, the requests, messages, check-ins, shared notes, routines, schedule, targets and meal plans of that coaching, the ratings you leave, and the notes a coach keeps about you, which only that coach sees. Before a coach accepts a request, phone numbers, emails and links in your messages are hidden.
  • If you are a coach: your coaching profile, which signed-in members see in the directory (name, photo, headline, about, experience, specialities, certificates, languages, city, country, area, gym, how and where you coach, price, availability and gender); a WhatsApp number if you give one, which is never shown to members; your exercise videos; the programs you write; and your business ledger of what clients paid and what you spent, which only you see.
  • Questions you ask the AI are not kept on our server. When a general question (with nothing about you in it) gets a fresh answer, the answer may be kept for the next person who asks the same thing: we keep the answer, a numeric fingerprint of the question and a few topic words, never your words and never who asked. If you mark a kept answer as unhelpful, we note that you did, so each person counts once.
  • What the AI wrote for you: your daily briefs, your weekly and monthly reviews, and the programs it built with the options you chose, so the same one is not paid for twice and you can open it again.
  • Purchases: which plan or item you bought and when, from Google Play or the App Store, through RevenueCat. Our server also keeps each notice RevenueCat sends us about them (a purchase, renewal, cancellation, refund or expiry, with the product, its price, currency, country and store, the store's order number and your account's random ID), for our accounts and to settle refunds and disputes. We never see your card.
  • Usage counts: how many questions and scans you used each day, when you reached a limit, how often the weekly and monthly reviews were opened, and a record of each AI request (which service answered, how long it took and what it cost, never what was said). These keep the limits fair and the costs in check.
  • Community, once it opens: your posts, comments, likes, follows, marketplace listings (with the phone number you give for one), the reports you make and the area you choose. Until then you can join its waiting list, which we keep.
  • Downloads: the first time the app opens, it sends a random install number and the kind of phone (Android or iPhone), so we can count downloads. It is not linked to you or your account; only a scrambled copy of your internet address is used, to stop abuse.
  • Technical logs: like any online service, our server provider keeps short-lived logs of requests, such as internet addresses and times, to run and protect the service.

We do not sell your data, and we do not use it to build advertising profiles.

Who sees it

  • You, on every phone you sign in to.
  • Your coaches. You can have up to two at a time, and neither is told about the other. Each always sees your profile, the check-ins you send them, your chat and your shared notes. The rest is shared area by area, coach by coach: your workouts (with their photos, and your injuries), your schedule, your meals and nutrition targets, your body measurements and weight (with your progress photos), your supplements, and your badges. Every area is on when coaching starts, and you can turn each one off in Get coached → My coach. Turning an area off hides what you logged before as well, including from the AI that helps that coach. A coach sees what you shared from before they accepted you, and stops seeing your log when the coaching ends.
  • Other members: your name, username and profile photo, what you post in Community, the badges you choose to show and, if you choose to be findable (Settings → Privacy), your bio. A rating you leave a coach is shown with your first name. A phone number on a marketplace listing is shown only to someone who taps to message you. A coach's number is never shown: coaches and clients talk in the app's chat.
  • The PHNX team: our dashboard shows your account details, your setup answers (sex, year of birth, nationality, goal, activity level), your plan and credits, when you were last active, a summary of your recent activity (your latest workouts with their totals, how many meals you logged in the last week and their average calories, your latest weigh-ins), your coaching links with their sharing switches (on or off, never what is behind them), your part in Community and what your AI use cost. We use it to help you, to deal with reports, to verify coaches and to keep the service running.
  • Nobody else, except the services below, which run parts of the app for us, and the authorities when the law requires it.

Services that handle your data

  • Supabase: our server. It holds your account, what you log and your photos (except meal photos), sends the sign-in and password emails, and runs the code that talks to the services below.
  • AI services: each request goes to one company, through its paid service for businesses; when that company is unavailable, another one on this list answers instead. Each receives only what that request needs, never your email address.
  • DeepSeek (servers in China): the questions you ask in the chat, with a short profile so the answer fits you (sex, age, height, weight, goal and goal weight, activity level, experience, how long you have trained, your aims and sports, your home gym and whether you use kg or lb); for a question about you, also today's food, your targets, your latest workouts, your best lifts and your supplements; for a question about places near you, your city or country. On Pro, the daily brief (your profile and targets, and the last seven days of food, training, weight, sleep and supplements, with your watch's daily totals if one is connected) and the weekly review (that week's numbers).
  • OpenAI (United States): meal photos you scan, with any note you add, and meals you describe in words. It also turns general chat questions and food names into numbers (embeddings), so that matching answers and foods can be found.
  • Anthropic (United States): building a program: your goal, experience, sex, training days and time, equipment, injuries and any note you add; when a coach builds one for you, also your name, your age, the coach's brief and notes, and a summary of what you share with that coach. On Pro, the monthly review (that month's numbers). On Coach Pro, a coach's reviews of clients, which carry numbers only and label clients c1, c2 and so on. A coach's imported documents, and a program from the chat that you save as routines.
  • Google Gemini (United States): any of the above when the company named for it is unavailable.
  • Google Play, the App Store and RevenueCat: to take payment for plans and purchases and to check them. RevenueCat receives your account's random ID and what you bought. We never see your card.
  • Google AdMob: on the Free plan, ads are shown: a banner, and a full-screen ad after some finished workouts. On any plan you may choose to watch a short video for a scan credit. AdMob may use your phone's advertising ID and device details under Google's own policies, as your phone's settings allow; where the law requires it, Google's consent form asks you first. For a video, we pass AdMob your account's random ID so Google can confirm to our server that you watched it. Paying plans load no ads unless you choose a video.
  • Open Food Facts: when you scan a product's barcode, the phone looks the number up there. Only the barcode is sent.
  • Your phone's speech service: if you speak a note to a meal scan, your phone's speech service (Google's or Apple's) turns it into text, and may send the recording to Google or Apple to do so, under their own policies. We receive only the text.
  • WhatsApp: when you tap to message a seller, WhatsApp opens on your phone; what you then write is between you and them.

When you correct the grams of a scanned food, we keep the food's name, the AI's estimate and your correction (never the photo), with your region, taken from the nationality on your profile, to make future scans more accurate for everyone in that region. They are kept for a year, and other people never see whose correction it was.

Health and watch data

If you connect Health Connect (Android) or Apple Health (iPhone), the app reads your sleep, heart rate, resting heart rate, heart-rate variability, steps and active calories. Without a watch, it can count steps with your phone's own sensor if you allow it. These are read on your phone to work out your sleep and energy scores there; the app never writes to Health Connect or Apple Health, and this data is not stored on our server. On Pro, the daily brief sends a week of daily totals (steps, hours slept, resting heart rate, active calories) with the rest of its summary, through our server, to the AI service that writes the brief; our server keeps the brief it gets back, not the figures. Health data is never used for advertising and never sold. Disconnect at any time in Settings → Health & watch.

Where it is stored

Everything you log is stored on your phone first, so the app works with no signal, and copied to our server when you are online. On Android, backups of the app to other devices are switched off, because the log is personal. Our server and the services above may be in a country other than yours, including the United States, and China for DeepSeek. Data travels encrypted, and on our server access rules let only you, and the people you share with, read your rows.

How long

  • Your account, profile, log, photos on our server, coaching history, posts, the builds and imports you have bought, daily briefs and programs: until you delete them or delete your account.
  • The store notices about your purchases (see "What we keep"): kept for our accounts, also after you delete your account.
  • Meal photos are kept only on your phone. The small copy a scan sends to the AI service passes through our server, which does not keep it. They stay on your phone for a month and are then deleted; the meal keeps its foods and numbers. Your coach never sees them.
  • Workout photos stay on your phone for three months after the workout, then only on our server.
  • Photos and files that nothing points at any more are removed within a couple of days.
  • Weekly and monthly AI reviews: 45 days on our server.
  • A coach's AI reviews of clients: about 13 months.
  • Scan corrections: one year.
  • A coaching request nobody answers lapses after three weeks, and coaching alerts are kept for two months.
  • The record of AI requests: three months.
  • Kept AI answers are dropped after four months.
  • When you delete something, a note that it was deleted (which item, never what it held) is kept for 90 days, so your other phones and your coaches' phones remove it too.
  • A coach's imported documents are deleted as soon as they are read; anything a failed upload left behind goes after a day.

Your choices

  • See, change or delete anything you logged, at any time, in the app.
  • Choose what each coach sees, or end the coaching, in Get coached → My coach.
  • Choose whether other members can find you, in Settings → Privacy.
  • Disconnect Health Connect or Apple Health in Settings → Health & watch.
  • Limit ad personalisation in your phone's settings, or in Google's consent form where it is shown.
  • Delete your account in Settings → Account → Delete account. That removes your account, your log, your photos, your posts and your listings from our server and from the phone. What stays: kept AI answers, which hold nothing of yours; the download count; the record of AI requests, for up to three months and no longer linked to you; a coach's own records of coaching you, such as what you paid them and the programs they wrote; the store notices about your purchases, which keep your account's random ID but not your name or email; and the purchase records that Google, Apple and RevenueCat keep under their own rules. A subscription is cancelled in Google Play or the App Store, not by deleting the account.
  • Ask us for a copy of what we hold about you, to correct it or delete it, or anything else, at support@phnxmove.com.

Children

PHNX is for people aged 13 and over. If you believe a child under 13 has an account, write to us and we will delete it.

Changes

If this policy changes in a way that matters, the app will tell you before it applies.

Contact

support@phnxmove.com