Privacy policy

Data controller

EasyGym is a service of:

Overview

EasyGym ("the service") is software personal trainers use to build workout plans for their clients. We collect as little personal data as possible to make the service work, and we never sell or rent data to third parties.

What data we collect

• Trainer account data: email address, name and optionally your business name. Needed to log in and to link your plans to your account.
• Client data you enter: your client's name, training goal, level, ticked injuries or limitations, available equipment, number of sessions per week and any notes. You enter this data as the trainer; you are the data controller for it.
• Generated plans: the training blocks and sessions you create, stored so they do not change between two views or printouts.
• Payment data: your subscription status, chosen plan and customer ID at our payment provider. Card details never reach our servers — they are processed directly by Stripe.

Health data about your clients

The injury markers you tick per client (low back pain or knee complaints, for example) are health-related data. Tick only what you need for a safe plan and tell your client you keep that information. Preferably avoid full names where you do not need them: a first name or initials is enough for the service to work.

What we use data for

• To deliver the service: generating, storing and exporting plans.
• To manage your subscription and client limit.
• To contact you about your account or important changes to the service.
• To trace errors and improve the software.

We do not use your client data for advertising and we do not build profiles from it for third parties.

Security

• All data is stored in a European database (EU-West region) with row-level security: technically, each trainer can only retrieve their own clients and plans.
• Connections are encrypted over HTTPS.
• Passwords are stored hashed and are not readable by us.
• Payment data is processed exclusively by Stripe.

Third-party services

• Supabase: database, authentication and storage (EU region).
• Stripe: payments and subscription management.
• Vercel: hosting of the web application.

Retention

We keep your data for as long as your account is active. If you cancel and request deletion, we erase your account, clients and plans. Billing records are kept for as long as the statutory accounting retention period requires.

Your rights (GDPR)

You have the right to access your data, have it corrected, deleted or transferred, and to object to certain processing. Email info@geteasygym.com to exercise those rights. Because EasyGym is operated from Belgium, the GDPR applies to every user wherever they are based, and you also have the right to lodge a complaint with the Belgian Data Protection Authority or with the supervisory authority in your own country of residence within the EU.

Cookies

EasyGym sets one strictly necessary cookie, and only after you log in: it keeps your session alive. If you only visit the public website, no cookies are set. There are no analytics, tracking or advertising cookies on the site. Details in the cookie policy.

Contact

Questions about this policy or about your data: info@geteasygym.com.

Changes

We may update this policy. Changes appear on this page with a new date at the top.