Privacy Policy
Last updated: 26 October 2026 · Translated from the original in Portuguese (Brazil), which prevails if the two differ.
In short. We use your data to build and adjust your training and for the social features you choose to use. We don’t sell data, we don’t show ads and we don’t use tracking tools. You can export everything and delete your account at any time, right in the app.
1. Who is responsible
The controller of the data of the Coach Sporti app and of this website is Matheus Gomes Messias, resident in Portugal. He is also the person in charge of processing personal data under Brazil’s data protection law (LGPD, art. 41). Contact for privacy matters: support@coachsporti.com.
2. What data we process
| Category | Examples | Where it comes from |
|---|---|---|
| Account | Email, account identifier, creation date | You, when you create the account |
| Training profile | Name or nickname, age, sex, weight, height, level, goals, sports, available days and time, equipment and training places; and how long each step of the questionnaire stayed on screen, to shorten what takes too long | You, in the questionnaire and in settings |
| Health data | Injuries and pain you report, limitations, body measurements, perceived effort | You, when you choose to provide it |
| Workouts | Generated plans, sets, loads, reps, times, distances and personal records | You and the app, when you log workouts |
| Community | Public profile, photo, posts, photos and videos, comments, likes, who you follow and who you block, invitations to train together | You, when you use the social features |
| Places | Name and approximate position of the training places you add or search for | You |
| Watch (Health Connect) | Only on Android and only if you connect it: the running, cycling and walking workouts your watch’s app records (type, time, duration, distance) and your heart rate during them; if you also give access to sleep, the length of the previous night, which never leaves your phone | Your phone’s Health Connect, with your permission |
| Device | Notification token, device identifier for syncing, app version; the type and name of each phone or browser signed in to your account and when it was last used, so you can see and end those sessions; and, when you report a problem, the phone model and system version | The app and the browser |
| Support | Messages, suggestions, reports and problem reports you send, with any screenshots you attach | You |
We don’t collect background location, contacts or microphone data. From other apps, we only read Health Connect workouts when you connect your watch, and sleep if you also give that access (only to ask, after a night of less than 6 hours, whether you want lighter loads; only your answer is saved): we don’t write anything there, and this data is not used for advertising, sold or shared. You can disconnect whenever you like, in the app or in Health Connect’s settings.
3. What we use it for and on what legal basis
- Building, adjusting and storing your training and syncing it across devices: performance of a contract (the Terms of Use).
- Health data (injuries, pain, measurements): only with your explicit consent, to adapt exercises and loads. You can withdraw it by deleting that data or your account.
- Social features (public profile, posts, following friends): performance of a contract, according to the visibility choices you make.
- Notifications: consent, given on the device. You can turn them off at any time.
- Security, abuse prevention and moderation of reported content: legitimate interest and legal obligations.
- Support and communications about the service: performance of a contract.
- Usage statistics as overall counts, without identifying anyone (for example, how many people use the app on a phone or in a browser): legitimate interest, to improve the app.
- Testing phase (beta): the team looking at your training data to improve the app. Explicit consent, given when you accept the beta agreement (see below).
While Coach Sporti is in its testing phase, taking part means accepting that the Coach Sporti team (today, Matheus Gomes Messias) may see the training data linked to your account: your profile (and how long each step took), generated plans, completed workouts with their loads and reps, safety answers, records and the feedback you send.
We use this only to understand how the app works in real life and to improve the workouts, the loads and the app itself. This data is not sold, not used for advertising and not shown to other people. Every access is logged and, whenever possible, we look at the data without your name.
You accept the agreement when you create your account (or in the app, if you already had one). You can withdraw it whenever you like under Settings → Account; without it you can’t stay in the testing phase, and you can delete your account with everything in it.
We don’t make decisions with legal or similarly significant effects based solely on automated processing. Your training plan is generated automatically from your data, and you can always change it, swap exercises and adjust loads.
4. Who we share it with
Only with providers that help us run the service, under contract and only with what they need:
- Supabase: database, accounts, files and plan calculation. Servers in London, United Kingdom, a country with a European Union adequacy decision.
- Google Firebase Cloud Messaging: delivery of push notifications. This may involve transfers to the US, protected by standard contractual clauses and by the EU-US Data Privacy Framework.
- RevenueCat: subscription management, once there are subscriptions. It receives your account identifier and the purchase history the store reports, never payment details. This may involve transfers to the US, protected by standard contractual clauses.
- Hostinger: hosting of this website and of the app’s web version, and the support email. It receives the emails you send us and sends your account emails (confirmation and password); it doesn’t receive your workouts.
- YouTube: the exercise videos are on YouTube; when you watch them, YouTube receives your IP address.
- MuscleWiki: with Premium, some exercises show a short MuscleWiki video inside the app; when it loads, MuscleWiki receives your IP address. The video is not saved on your phone.
- Google Play and Apple App Store: distribution of the app and, in the future, subscription management. They handle payment details directly; we never receive them. Google Play also confirms that the app is the original and that the phone hasn’t been tampered with (Play Integrity) and, in Brazil, may report the age range of your Google account, if you or your guardian allow it to be shared; we keep only the result.
What you post as public can be seen by other people in the app. We may disclose data when the law requires it. We don’t sell or rent personal data.
5. How long we keep it
- For as long as the account exists. When you delete your account, the data leaves the live database immediately, including photos and videos.
- We keep backups of the database, encrypted and without photos or videos, for 7 days at most. After that, a deleted account’s data is gone from them too.
- The provider’s technical request logs are kept for 1 day.
- Deleting your account doesn’t cancel a subscription: cancel it in the store (Google Play → Payments & subscriptions). When you delete your account, we also ask RevenueCat to delete your record; the purchase history the store keeps follows the store’s rules.
- On another phone or browser signed in to the account, the app signs out at the next sync; whatever was only on that device stays there until you delete the app or its data.
- Reports about content may be kept for as long as needed to deal with abuse and to meet legal obligations.
6. Your rights
At any time, you can:
- Access your data and take it with you: in the app, under Settings → Account → Export my data.
- Correct it: in the app’s profile and settings.
- Delete it: in the app, under Settings → Account → Delete account. See the Delete account page.
- Object to or restrict processing and withdraw consent, without affecting what was done before.
- Complain to a data protection authority: in Portugal, the CNPD (cnpd.pt); in Brazil, the ANPD (gov.br/anpd).
For any request, write to support@coachsporti.com from your account’s email address. We reply within 30 days.
7. Security
Connections are always encrypted (HTTPS/TLS), database access rules let each person read only their own private data, files are kept in a private space with temporary links, and administrative access is restricted. No system is infallible; if an incident affects your data, we will tell you and the authorities within the legal deadlines.
8. Minimum age and teenagers
Coach Sporti is meant for people aged 16 or over. We don’t accept accounts from anyone under 16; if we learn that an account belongs to someone younger, we delete the account and its data.
At 16 and 17, the person confirms at sign-up that a parent or legal guardian knows about and authorizes the use, and we keep the date of that confirmation. The guardian can ask to see, correct or delete the data by writing to support@coachsporti.com.
Until 18: the community profile is always private (only people the user accepts can see their activity); set effort is capped at 8 out of 10; and there is no advertising or profiling for commercial purposes. Health answers are used only in the person’s best interest, to build and adjust training safely, as required by Brazil’s LGPD (art. 14), Brazil’s Digital Statute of Children and Adolescents (Law 15.211/2025) and the GDPR (art. 8).
Tools for the guardian. In the app, under My app, the guardian has the Guardian panel, protected by a 4-digit PIN that only the guardian knows. With it, the community (following, commenting and training together) stays off until the guardian turns it on, every purchase asks for the PIN, and a daily time limit can be set for the app. The panel shows the time used each day, who the person talks to in the community and which of those profiles belong to adults, without showing anyone’s age. While supervision is on, the app says which settings apply. Usage time is counted only on the phone; the server keeps the settings and the protected PIN, never the PIN as it was typed. If the PIN is forgotten, the guardian writes to support@coachsporti.com and support resets it, returning each setting to the most protective option.
9. This website
This website doesn’t use cookies, analytics or third-party content. The hosting server logs technical access data (IP address, date and page requested) for security reasons, for a short period.
10. Changes
If we change this policy in a significant way, we will let you know in the app before the change takes effect.