Legal

Privacy policy

Last updated 20 August 2026 · Applies to the Back2Fit mobile app for iPhone and Android

This policy explains what the Back2Fit app collects, why it collects it, who else handles it, and how to get rid of it. It covers the mobile app only. The website at back2fitwellness.com is separate.

The short version. We collect what's needed to give you an account and show you the courses you've been granted. There is no advertising, no analytics, no tracking, and nothing is sold or shared for marketing. You can delete your account and everything in it from inside the app, without asking us.

What we collect

What	When	Why
Name	You type it when creating an account	So your coach can identify you on their member list
Email address	Creating an account	Signing in, and sending you the sign-in code and access notifications
Phone number	Creating an account	So your coach can match you to your course enrolment and reach you
Password	If you choose a password instead of an emailed code	Signing in. Stored only as a cryptographic hash — nobody, including us, can read it
Profile photo	Only if you add one	Shown on your profile and to your coach. Entirely optional
Course access records	When a coach grants you a course	Knowing which courses you can open and until when

What we do not collect

Worth being specific, because many fitness apps do collect these:

No analytics or tracking. The app contains no analytics, advertising or attribution SDKs of any kind.
No record of what you watch. The app does not store which lessons you opened, how far through a video you got, or when. There is no such data to hand over, because it is never written down.
No health or fitness measurements. No weight, no body measurements, no step counts. The app does not connect to Apple Health or Google Fit.
No location. The app never requests it.
No contacts, calendar, or microphone. The photo library is requested only when you choose to set a profile picture.
No payment details. Nothing is sold in the app, and no card or bank information ever reaches it.

Who else handles your data

We use a small number of service providers to run the app. They process data only on our instructions and for no other purpose:

A cloud hosting provider, for accounts, the database and file storage — including your profile photo.
A video streaming provider, which delivers the course videos. Your device requests video directly from it, so it receives the technical information any video request carries, such as your IP address.
An email delivery provider, which sends your sign-in codes and the notice that a course has been unlocked.

We do not sell your data, and we do not share it with anyone for advertising or marketing. If you would like to know which providers we currently use, ask us and we will tell you.

Where your data is stored

On servers in the United States. If you are using the app from elsewhere, your information is transferred there. Everything in transit is encrypted over HTTPS.

How long we keep it

For as long as you have an account. Delete your account and it goes immediately — see below. If you simply stop using the app, your account and its records remain until you delete them or ask us to.

Deleting your account

In the app: Profile → Delete account. It is permanent and takes effect at once. It removes your profile, your name, email and phone number, your profile photo, your course access records and any access requests you made. It cannot be undone, and it does not need our approval.

Deleting your account removes your access to any course you were granted. If you are unsure, speak to your coach before deleting. If you have already uninstalled the app, see how to request deletion.

Your rights

You can ask us what we hold about you, correct it, or have it deleted. Name and profile photo are editable in the app under Profile; for anything else, write to us and we will respond. Depending on where you live you may also have the right to object to processing, to request a copy of your data in portable form, or to complain to your local data protection authority.

Children

The app is intended for adults enrolled in a Back2Fit course. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we will remove it.

Security

Accounts are protected by your password or an emailed one-time code. Passwords are stored only as hashes. Course videos are served through short-lived signed links that expire, so a link cannot be shared to give someone else permanent access. Access to member data in our administration tools is restricted to coaches.

Changes to this policy

If we change it, the date at the top changes with it. Material changes will be announced in the app or by email before they take effect.

Contact

Questions about this policy, or a request about your data: support@back2fitwellness.com.