Privacy Policy
This policy explains how CoachDrill handles personal data when you use the mobile application, its API and this website. CoachDrill is operated by Murat Şimşek in Türkiye. Questions and privacy requests can be sent to muratsimsek77160@gmail.com.
1. Data we handle
Account and profile
We process your email address, account identifier, preferred name, language, time zone and authentication information. When you create an account, we may record the Terms and Privacy Policy versions you accepted or acknowledged, the acceptance source, selected language and a server timestamp. Password authentication is handled by Supabase; CoachDrill does not receive your plain-text password. If you use Google sign-in, we receive the profile information Google and you permit, such as your email address and basic identity details.
Fitness and nutrition profile
Depending on what you provide, we process age, calculation sex, height, weight, target weight, activity level, goals, dietary preferences, daily calorie and protein targets, coaching preferences, and checkpoint settings. We also process meal descriptions and estimates, macro totals, weight records, workout plans, completed exercises, sets and repetitions, progress summaries and rank events.
AI conversations and meal photos
We process messages you send to the coach and the responses produced for you. When you choose photo analysis, the selected meal photo is sent through the CoachDrill API to OpenAI for analysis. The CoachDrill backend does not store the photo file. The mobile app may keep a local cached copy on your device for up to 30 days; those copies expire automatically and are removed when you delete all app data.
Billing, notifications and operations
We process subscription entitlement and status information, purchase product identifiers and transaction references supplied by RevenueCat or Google Play. We do not receive your complete payment card number. If notifications are enabled, we process a Firebase device token and notification preferences. Technical information may include request timing, error details, app configuration, service usage and AI request/response logs. This public website does not use analytics, advertising cookies, third-party scripts or third-party fonts.
2. How we use data
We use this information to create and secure your account; calculate and show fitness and nutrition targets; record meals, workouts and progress; personalize coaching; analyze meal photos; send requested notifications and reports; manage trial and subscription access; prevent abuse; diagnose errors; protect the service; and answer support or privacy requests.
Our grounds for processing depend on the context and applicable law. They include performing the service you request, your consent where required, complying with law, and our legitimate interests in operating and securing CoachDrill. You can withdraw optional consent, such as notification permission, through your device or app settings.
3. Service providers and disclosures
We use providers that process data only as needed to supply their services:
- Supabase for authentication, database and account administration.
- Hostinger for VPS hosting of the CoachDrill API, public site and operational logs; the current VPS is hosted in Germany.
- OpenAI for AI coaching and meal photo analysis.
- Firebase for Android push notification delivery.
- RevenueCat for subscription entitlement and purchase status.
- Google Play for Android distribution and payment processing.
- Google sign-in when you choose Google authentication.
- Resend for transactional account email delivery.
We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards. We do not sell personal data.
4. Retention and deletion
Application records remain while your account is active unless a shorter period applies. Choosing Settings → Delete all my data deletes your Supabase authentication account and cascades deletion to associated application records. Local meal photo cache files for that account are also removed from the device.
Rolling AI operational logs are normally retained for up to 14 days for reliability, abuse prevention and troubleshooting, then pruned. Backups and security records may take a limited additional period to age out. Payment or transaction records controlled by Google Play and RevenueCat can follow their own legal and technical retention periods. See Delete your account for instructions.
5. Your choices and rights
You can review or correct profile details in the app, disable notifications in app or device settings, stop using optional photo analysis, and delete your account. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection or a portable copy, and to complain to a data protection authority. Email us from your account address so we can verify the request.
6. Security, children and international transfers
We use access controls, encrypted network connections, restricted service credentials and other reasonable safeguards. No online service can guarantee absolute security. CoachDrill is for people aged 14 or older. A parent or legal guardian should supervise a minor’s use and provide permission where applicable.
Our providers may process data in Türkiye, the European Economic Area, the United States and other locations where they operate. Where required, transfers rely on contractual and legal safeguards offered by those providers.
7. Changes
We may update this policy as CoachDrill changes. We will publish the revised text and effective date here, and provide additional notice when required.