โ† Back

Privacy Policy

Last updated: 1 November 2026

1. Introduction

T.B Training ("we", "us", "our") provides personal coaching tools for training, nutrition, mindset and check-ins. This policy explains what data we collect, why, and the rights you have over it. It applies to the web app, the Android app and any related services.

2. Data we collect

  • Account data: name, email, password hash, role (coach/client), profile photo.
  • Coaching data: workouts, programs, nutrition plans, meals logged, supplements, habits, check-ins, photos, body metrics, mindset entries, messages between you and your coach.
  • Device & usage data: device model, OS version, app version, crash logs, basic analytics (page views, feature use).
  • Push token: if you opt in to notifications, we store a device push token.
  • Authentication providers: if you sign in with Google, we receive your name, email and avatar from Google.

3. How we use your data

  • Deliver the coaching service (programs, check-ins, messaging, AI feedback).
  • Let your coach review your progress and respond to check-ins.
  • Send notifications you opt into (morning briefings, reminders).
  • Keep the service secure, debug issues, and improve features.
  • Comply with legal obligations.

We do not sell your personal data or use it for third-party advertising.

4. AI features

Some features (workout generation, meal analysis, check-in feedback) send the relevant inputs to an AI provider (Google Gemini) for processing, and your coach can use an AI assistant (Anthropic Claude) to help manage their coaching. Inputs are not used to train third-party models. Outputs are stored against your account so you can revisit them.

Garmin data is never processed by AI. Data that comes from Garmin is technically blocked from every AI feature and from your coach's AI assistant, and it is never used to train, evaluate or improve any AI model.

5. Sharing

We share data only with:

  • Your coach inside the platform.
  • Infrastructure providers (hosting, database, push notifications, AI inference) under contract and processing only on our instructions.
  • Authorities, where legally required.

6. Retention

We keep your data for as long as your account is active. When you delete your account, we delete or anonymise your personal data within 30 days, except where retention is required by law.

7. Your rights

You can access, export, correct or delete your data at any time by contacting us at thomasbetts970@gmail.com. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

7a. Deleting your account

You can ask us to delete your account and data in the app (Profile โ†’ Settings โ†’ Delete account) or without logging in at tbtraining.app/delete-account. We delete it within 30 days and confirm by email. Records we must keep by law, such as payment and invoice records, are kept for up to 6 years.

8. Children

The service is not directed to children under 16. We do not knowingly collect data from children under 16.

9. Security

Data is encrypted in transit (HTTPS) and at rest. Access is restricted by role-level security policies. No system is perfectly secure. Please use a strong, unique password.

10. Changes

We may update this policy. Material changes will be notified in-app. Continued use after an update means you accept the revised policy.

11. Contact

Email thomasbetts970@gmail.com for any privacy question or request.

12. Exercise content

Exercise data and videos provided by MuscleWiki.com. Videos stream from MuscleWiki and are not stored by T.B Training.

Exercise data by RepDB (repdb.co).

13. Health and fitness data from your devices

Connecting a device or service is optional. You choose what to connect in the app (Profile, Connected devices), and you can disconnect at any time.

  • Health Connect (Android) / Apple Health (iPhone): we read only the data types you approve: steps, distance, active and total calories, heart rate, resting heart rate, heart rate variability, sleep, weight, blood oxygen, breathing rate and workouts. We never write to your health data.
  • Garmin Connect: with your permission, Garmin sends us your daily summaries (steps, distance, calories, intensity minutes, floors, resting heart rate, stress, Body Battery), sleep (duration, stages, score), heart rate variability, blood oxygen, breathing rate, body composition (weight) and activities (type, date, duration, distance, pace, heart rate, elevation). You choose which of these to share on Garmin's own permission screen and can change them in your Garmin Connect account. If you allow it, we also send the runs your coach plans for you to your Garmin Connect calendar so you can follow them on your watch.
  • Strava: your activities (type, date, duration, distance, pace, heart rate, elevation). Strava data is kept for a maximum of 7 days and is shown only to you and your coach.

How we use it: only to show you your own health and training stats in the app and to let your coach see them so they can coach you (for example, planning training around your sleep and recovery). We do not use it for anything else.

Never sold, never shared for advertising. We do not sell health or device data and do not share it with anyone for advertising or marketing. It is visible only to you and your own coach.

Your control: you can see all of it in the app, disconnect a device at any time (Profile, Connected devices, or in the Garmin Connect / Strava / Health Connect settings), and ask us to correct, export or delete the data we hold by emailing thomasbetts970@gmail.com. When you disconnect Garmin or delete your Garmin account, we stop receiving data and delete the stored Garmin data on request. Withdrawing consent does not affect anything else in your account.

13a. Who processes your data

These companies process data for us under contract and only on our instructions. None of them buys or sells your data.

  • Supabase (database, file storage and server functions, hosted in the EU, Ireland): stores your account, coaching and health/device data, including Garmin data.
  • Cloudflare (website and app hosting): serves the app; health data passes through it encrypted in transit.
  • Google Firebase (push notifications): receives your device push token only, no health data.
  • Google Gemini and Anthropic Claude (AI features, see section 4): never receive Garmin data.
  • Stripe (payments, coaches only): no health data.
  • Garmin, Strava: the services you choose to connect; they send your data to us at your request.

14. Food data

Food data comes from McCance and Widdowson's Composition of Foods Integrated Dataset (CoFID, Open Government Licence v3.0) and Open Food Facts, available under the Open Database Licence (ODbL).