This Privacy Policy describes how Nhance Group Ltd (company number 12380926), registered in England and Wales ("we", "us", "our") collects, uses, and protects your personal data when you use the PTMax personal training platform ("the Service"). We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data We Collect
We collect the following categories of personal data:
Account data: your name, email address, and profile picture.
Health & fitness data: body weight logs, training goals, session attendance records, and workout prescriptions entered by you or your coach.
Communication preferences: your email and push notification settings.
Payment data: if you purchase a session package, payment is processed by Stripe. We do not store your card details. We retain a record of the transaction and package entitlement.
Usage data: session timestamps, device timezone, and standard server logs for security and debugging purposes.
Google account data: if you sign in with Google, we receive your name and email address from Google. We do not receive your Google password.
2. How We Use Your Data
We use your data to:
— provide and operate the personal training management features of the Service;
— allow coaches to view client progress, schedule sessions, and deliver workout prescriptions;
— send you transactional notifications about your sessions (email and push);
— process payments for session packages via Stripe;
— maintain security, detect abuse, and improve the Service.
3. Legal Basis for Processing
We process your personal data under the following legal bases (UK GDPR Article 6):
Contract: processing necessary to provide the Service you have signed up for.
Legitimate interests: security monitoring and service improvement.
Consent: push notifications (you can withdraw consent at any time in Profile > Notifications).
Health and fitness data is special category data under UK GDPR Article 9. We process it on the basis of your explicit consent given when you create an account and use the health-tracking features of the Service.
4. Data Sharing
We do not sell your personal data. We share it only with:
Your coach: coaches you are linked to can see your profile, session history, workout data, and goals. They cannot see your health metrics unless you have shared them.
Session feedback: ratings and comments you leave on a session are shared only with the specific coach or client attached to that session. They are never aggregated, published, or used to score, rank, or evaluate a coach's profile.
Stripe: payment processing. Stripe's privacy policy applies to data you provide during checkout.
Infrastructure providers: our hosting provider (EU-based) processes data on our behalf under appropriate data processing agreements.
5. Data Retention
We retain your data for as long as your account is active. If you delete your account, your personal data is permanently deleted within 30 days, except where we are required to retain it for legal or regulatory reasons (e.g. financial records retained for 7 years under UK law).
6. Your Rights
Under UK GDPR you have the right to:
— access the personal data we hold about you;
— correct inaccurate data (via Profile > Edit Profile);
— delete your account and associated data (via Profile > Delete Account, or see our account deletion page);
— withdraw consent for push notifications at any time;
— lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Security
We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and access controls to protect your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Children
The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes we will notify you via the app or email. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
10. Contact Us
For any privacy-related questions or to exercise your rights, contact us at:
Nhance Group Ltd
Email: info@nhance.io