Privacy Policy

The short version

• We collect what the app needs to work: your email, your profile, and the training, food, and club activity you log.
• We do not sell your data and we do not run ads. We measure which features get used — tied only to your account number, never your name, and never across other apps or websites.
• You can export everything you have logged as a JSON file, and you can delete your account from inside the app at any time.
• You need to be at least 13 to use EduFit. If you are under 18, a parent or guardian can email us about your account.

01Who we are

EduFit is the companion app for your school's fitness club. It runs on iPhone and in a web browser. The two share one account and one database.

The app is built and run by Logan Jarrin for the club. There is no company behind it and no commercial model — nobody makes money from your data because there is no way to. If you want to talk to a person about anything on this page, email logan@getedufit.app.

02What we collect

Everything in this list is something you typed, tapped, or logged in the app. We do not read your contacts, your photos, your location, or anything else on your device.

Account and profile

• Your email address. This is how you sign in — there is no password.
• Display name and initials. Shown to other club members on the leaderboard, the club feed, and member lists.
• Grade and club role (member, coach/admin, or sponsor).
• Body and training basics you enter during setup: height, weight, age, sex, activity level, training focus, and experience level. These are used to work out your calorie, protein, carb, fat, and water targets.

What you log

• Workouts: sessions, the exercises in them, sets, weight, reps, RPE, notes, and where you trained if you fill that in.
• Personal records and any workout templates you build or share.
• Food and water: food diary entries (which food, which meal, how many servings, what time), water logs, and any custom foods you create.
• Weight logs over time.
• Learning: which lessons you have read, how far through you got, and which answer you picked on a lesson quiz.
• Club activity: comments you write on the club feed, challenge entries, calendar RSVPs, and notifications the app has sent you.
• Moderation records: if you block someone or report a post or comment, we store that report — including a copy of the content as it was when you reported it — so a coach can review it.

Sign-in and device records

• Sign-in codes. When you request a code we store a one-way hash of it (SHA-256), not the code itself, plus when it expires. It is valid for 10 minutes and single-use.
• A device ID. A random string your app generates on first launch. It is not Apple's advertising identifier or anything Apple issues, and it is not shared with anyone. It exists so that a sign-in code emailed to you can only be redeemed on the device that asked for it.
• A device label (for example “iPhone 15”) so you can see and sign out of your active sessions.
• A hash of your session token — see How we protect your data.

03Why we collect it, and our legal basis

We only use your data to run the app for you and for the club. There is no secondary use.

To sign you in

Your email, the hashed sign-in code, the device ID, and the hashed session token. Without these there is no account.

To show you your own data

Your workouts, food diary, water, weight, PRs, and lesson progress are read back to you in the app and used to draw your charts and streaks.

To calculate targets

Height, weight, age, sex, activity level, and focus feed the calorie and macro target calculation. Apart from the safety check below, nothing else is derived from them.

To spot a possible health risk

Your logged weight and food entries are checked automatically for patterns that may indicate a health risk — rapid weight loss or very low intake — and if one shows up, the school's designated safeguarding person (the counsellor or nurse) may be shown a flag so they can check in with you. Club coaches are not shown these flags, and neither are you.

To run the club features

Display name, initials, grade, streak, and points appear on the leaderboard and member list. Comments, challenge entries, and RSVPs are visible to other club members by design.

To keep the club feed safe

Reports, blocks, and the automatic content filter exist so coaches can act on abusive or inappropriate posts.

To fix crashes

Crash and error reports, with personal information switched off — see Who else sees your data.

To learn what to build next

Which screens and features get used, grouped under your account number — see Analytics. You can switch this off at any time in Settings → Share usage analytics.

Your health and fitness details are special. Height, weight, workouts, and your food diary count as health data under privacy law — Thailand's PDPA and Europe's GDPR both say this category needs your explicit agreement, not just an account. That is why setup asks you to agree before you enter them. You can withdraw that agreement at any time by resetting your data or deleting your account, and the club also collects a parent or guardian's permission through the club membership form.

For everything else: our legal basis is performance of a contract for what is needed to run your account, and legitimate interests for keeping the club feed safe, keeping the app from crashing, and counting which features get used — with a switch in Settings to turn the counting off.

04What we never do

• We do not sell your data, and we never have.
• We do not show ads and we do not share anything with ad networks or data brokers.
• We do not track you across other apps or websites. The iOS app's privacy manifest declares tracking as false and lists no tracking domains.
• We do not profile you for marketing. We do measure which features get used — see “Analytics” below — and after you sign in those events are grouped under your account number, never your name, and we read the results in aggregate.
• We do not use your data to train machine-learning models, and we do not send it to any AI service.

05Analytics

We measure which parts of EduFit get used, so we know what to build and fix next. Two tools do this, and both are set up to be the least invasive version of themselves:

In the app

The iOS and Android apps use PostHog to record which screens and features are opened — for example “someone started a workout” or “someone opened the Learn tab”.

• It is linked to your account, not to your name. Once you sign in, these events are grouped under your account number — a code like user-81de4391. That is what lets us answer questions such as “do members keep using EduFit after a month”. We never send PostHog your name, your email, your school or your grade, so PostHog cannot tell who that account number belongs to. Only we can, and only from our own database.
• Before you sign in, these events are anonymous and are not grouped under any account.
• Session replay is switched off. Nothing records your screen.
• You can turn it off. Settings → Share usage analytics. Off means these events stop leaving your device.
• We do not use automatic capture of everything you tap. Only named events we chose deliberately are sent, and none of them carry the text you type or the food, weights or notes you log.
• It is not used for advertising and does not follow you into other apps. The apps' privacy manifests declare tracking as false.

On the website

The website uses Vercel Web Analytics to count page views. It is cookieless — nothing is stored on your device — and aggregate: we see “this page was viewed 40 times”, not “this person viewed this page”. Vercel already hosts the website and is listed as a processor below.

Neither tool receives anything you log — your workouts, meals, weight and posts stay in our own database and are never sent to an analytics service. Nothing here is sold, shared with ad networks, or used to train anything.

06Who else sees your data

EduFit is built on a small number of outside services. They process data on our instructions and only for the job listed here.

Convex

Hosts the database and the backend functions. Everything described above is stored on Convex. This is where your account actually lives.

Vercel

Hosts this website. Vercel sees ordinary web-server information — your IP address and browser — when you load a page. It does not receive your workout or food data; that goes from your browser straight to Convex.

EmailJS

Sends the sign-in code email. It receives your email address and the 6-digit code, and nothing else.

Sentry

Receives crash and error reports plus performance timings (how long screens take, app hangs) from the app and the website. Personal information is switched off, and so are screenshots and view hierarchies. Sentry gets stack traces, breadcrumbs, device model, OS version, and app version — not your email, and not what you logged.

PostHog

Receives product analytics from the iOS and Android apps — which screens and features are opened, plus device model, OS version and app version. After you sign in, events are grouped under your account number (a code like user-81de4391) — never your email, name, school or grade, so PostHog cannot tell who that number belongs to. It does not receive anything you log, and session replay is switched off.

Apple

Distributes the iOS app through the App Store. Anything you do in the App Store itself is covered by Apple's privacy policy, not this one.

Food databases

When you search for a food or scan a barcode, our server asks USDA FoodData Central and Open Food Facts for nutrition information. The only thing sent is the search word you typed or the barcode number you scanned. Your name, email, account ID, and diary are not sent, and because the request goes out from our server rather than your phone, neither is your IP address.

Exercise database

Exercise descriptions and images are imported in bulk from wger, an open-source exercise database. That import happens ahead of time, on our side. No user data is involved.

07What other club members can see

Some things are private to you, and some are club-visible by design. It is worth knowing which is which.

Only you can see

• Your food diary and water logs.
• Your weight logs and body measurements.
• Your calorie and macro targets.
• Your lesson progress and quiz answers.
• Your email address.

Other club members can see

• Your display name, initials, grade, and role.
• Your streak and points on the leaderboard.
• Comments you write on the club feed.
• Your entries in club challenges and your RSVPs to club events.
• Workout templates you choose to share or make public.

The app's Settings screen has privacy switches for hiding your weight and body fat from club surfaces and for choosing who sees your PRs. Club coaches (admins) can additionally see the moderation queue and can remove posts and comments. Coaches cannot see the health-risk flags described above — those are shown only to the school's designated safeguarding person (the counsellor or nurse).

08How long we keep things

Your account and everything in it

Kept for as long as your account exists. There is no automatic expiry — your training history is the point of the app. Delete your account and it goes, as described in the next section.

Sign-in codes

Expire 10 minutes after they are issued, and stop working the moment they are used or after 5 wrong attempts.

Sessions

Expire 90 days after sign-in. Signing out revokes the session immediately.

Content reports

Kept while the report is open and for a period after a coach resolves it, so a pattern of repeat behaviour can be seen. Our working default is 12 months.

Crash reports (Sentry)

Kept for as long as Sentry's plan retains them, then deleted automatically by Sentry.

Backups taken by Convex may hold a copy of deleted data for a short period before they roll off. We cannot reach into a backup to delete an individual record, but backups are never used to bring a deleted account back.

09Getting your data out, and deleting it

Download my data

In the app, Settings → Download my data gives you a JSON file containing your profile, food diary, water logs, weight logs, workouts and sets, PRs, custom foods and exercises, posts, comments, challenge entries, workout templates, lesson progress, and notifications. It does not include other members' data or the shared food and exercise catalogue.

Reset my data

Settings → Account → Reset my data clears everything you have logged — your workouts and the sets inside them, personal records, food diary, water, weight, lesson progress and challenge entries.

You stay signed in and stay in the club. Your streak and points go back to zero, because both are worked out from the history you are clearing. Posts and comments you wrote on the club feed stay, because other members replied to them.

A reset is not a privacy erasure. Your account, your email and your analytics record all remain. If you want to be removed entirely, delete your account instead — that is the option below, and it is the one that erases everything.

Delete my account

In the app, Settings → Delete account removes your account straight away. There is no waiting period and you do not have to email anyone. Here is exactly what happens.

Permanently deleted: your profile and member record, your food diary entries, water logs, weight logs, workout sessions and every set inside them, your personal records, your challenge entries, your notifications, your lesson progress, your private and shared workout templates, your custom foods, any custom exercises that were never approved, all of your active sessions, any outstanding sign-in codes for your email address, and your analytics record — the person profile and every event attached to it are deleted from PostHog as well, not only from our own database.

Kept but stripped of your name: a few things other members already rely on cannot simply vanish from their screens. Posts you authored have their text replaced with “[Former member]” and their author set to “[deleted]”. Comments you wrote become “[deleted]”. Workout templates you had made public, and custom exercises a coach had approved into the shared library, stay in the library with your name removed. None of these remain linked to you.

Correcting things

You can edit your profile, your targets, and anything you have logged directly in the app. If something is wrong and you cannot fix it yourself, email logan@getedufit.app.

If you are covered by GDPR, UK GDPR, or a similar law

You have the right to access your data, correct it, delete it, get a portable copy, restrict or object to how we use it, and complain to your data protection authority — in Thailand that is the Personal Data Protection Committee (PDPC). The export and delete tools above cover access, portability, and erasure without you having to ask us for anything. For anything else, email logan@getedufit.app and we will reply within 30 days. We will not charge you and we will not make it difficult.

Your data is stored on servers operated by Convex, and this website is served by Vercel; both may process and store data in the United States and other countries. If you are in the EEA or the UK, that means your data may be transferred outside your country. We rely on the standard contractual clauses those providers offer for those transfers.

10Students under 18

EduFit is made for a high-school fitness club, so most of the people using it are under 18. That shapes how it is built.

• You must be at least 13 to use EduFit. We do not knowingly collect anything from a child under 13. If we find out that an account belongs to someone under 13, we will delete it.
• We collect the minimum a training app needs. There is no advertising, no tracking, no profiling, and no data sale — the parts of app data collection that usually worry parents simply are not here.
• The club feed is not public. Only signed-in club members can see it, only coaches can create posts, and every comment goes through an automatic filter before it is stored.

If you are a parent or guardian

Email logan@getedufit.app from an address you can be reached at and tell us your student's name and the email address on the account. You can ask us to:

• tell you what we hold about your student;
• send you a copy of it;
• correct anything that is wrong;
• delete the account and its data entirely.

We may ask a question or two to confirm that you are the parent or guardian before we act — that check protects the student. We aim to respond within 30 days.

11How we protect your data

• No passwords. Signing in is a 6-digit code emailed to you. There is no password to leak, reuse, or guess.
• Codes are never stored. We store a SHA-256 hash of the code. It expires in 10 minutes, it is single-use, it is locked to the device that requested it, and 5 wrong guesses kill it. Each email address is limited to 5 outstanding codes an hour.
• Session tokens are never stored either. When you sign in we generate a 256-bit random token, hand it to your device once, and keep only its SHA-256 hash on the server. Nobody — including us — can read your token out of the database.
• On your phone, the session token is kept in the iOS Keychain with hardware-backed encryption, marked so that it never syncs to iCloud or to another device. In a browser it is stored in that browser's local storage.
• Everything travels over HTTPS/TLS — the app, the website, and every call to the backend.
• Permission checks live on the server. Every function that reads or writes your data verifies your session first, and admin-only actions verify your role as well. A modified app cannot get around them.
• You can see and end your sessions. Settings lists every active device, and signing out revokes that session immediately.

No system is perfectly secure. If you think something is wrong with your account, or you have found a security problem, email logan@getedufit.app and we will treat it seriously. If a breach ever affects your data, we will tell affected members by email and, where the law requires it, notify the relevant authority.

12Changes to this policy

If we change this policy we will update the Last updated date at the top of this page. This page is the live version — it is always what applies today.

If a change is significant — new data collected, a new company receiving your data, or a change to what happens when you delete your account — we will also announce it in the app's club feed before it takes effect, so you have a chance to read it or to leave.

13Contact

One person reads this inbox. Email logan@getedufit.app about anything on this page — a data request, a correction, a security concern, a parent question, or just a “what does this mean?”

You may also want the Terms of Service, which cover the rules for using the app.