Privacy Policy

Effective October 8, 2026

1. Who we are

Coachbell (coachbell.app) is an app for personal trainers and their clients: voice-logged training, bookings, check-in, online coaching (programs, homework, chat), packages and payments. Coachbell is the data controller for account data; for records a trainer keeps about their own clients, the trainer is the controller and Coachbell processes the data on their behalf (Thailand Personal Data Protection Act, B.E. 2562).

2. Data we collect

• Clients: name, phone number (never shown to trainers) and login email; bookings, messages and training logs (exercises, weights, sets, reps, distance, pace); the intake form (age, sex, height, weight, goals, eating habits, emergency contact) and homework (weight, body fat, waist, photos, videos); packages, payments and transfer-slip photos. We never collect card numbers or online-banking credentials.
• Trainers: name, packages, prices, promotions, PromptPay ID; notes and warnings about their clients, programs and homework comments.
• Voice: dictation uses the phone's built-in speech-to-text (Apple / Google). Coachbell only receives the resulting text and does not record or store audio.
• Technical: a random account ID and what is needed to deliver notifications. No advertising trackers.

3. Health data (sensitive data)

Chronic conditions, injuries, surgery, medical restrictions, pain and medication are sensitive data under section 26 of the PDPA. We collect them only with your explicit consent (when you fill in the intake form or report a condition to your trainer in the app) and use them only for your safety during training. They are shown as warnings to your trainer only; other clients and other trainers cannot see them. Trainers may also note what they observe during a session (e.g. "right knee feels tight"), which is likewise visible to the trainer only. You may withdraw consent or ask for this data to be deleted at any time.

4. How we use it

To record and show training history, programs, homework and progress; to warn the trainer before a session; for bookings, check-in, packages, bills, slip checks and notifications; and to verify your identity when you sign in on a new device. We do not sell data and do not use it for advertising.

5. Who can see it

• The trainer you connect with sees your name, training data, intake form, homework and your messages with them — other trainers do not.
• You see your own logs, program, homework, bills and messages, but not the notes and warnings your trainer keeps.
• Service providers acting on our behalf: Supabase (database, authentication, file storage), Vercel (web hosting), email / SMS delivery (login codes), Apple / Google (notifications and on-device dictation).
• Authorities, when required by law.

6. Storage, security and retention

Data is stored in Supabase's cloud, encrypted in transit (HTTPS) and at rest, with access rules enforced in the database. Photos and videos are private and opened through links that expire within an hour. We keep data while your account is active. When you delete your account, your personal data (intake form, homework, messages, upcoming bookings) is deleted immediately; past sessions and bills the trainer needs for their records are kept without any link to your account.

7. Your rights

You may access, copy, correct, delete, restrict or object to the use of your data and withdraw consent. Edit your details in the app or delete your account in the app. We reply to requests within 30 days. You may also complain to Thailand's Personal Data Protection Committee (PDPC). The app is intended for adults; users under 20 should have a parent's consent. We will notify you in the app before material changes to this policy take effect.

8. Contact