Legal

Privacy & Cookie Policy

Last updated 30 October 2026

Who we are

PM Coaching (Frederikshavn, Denmark) is the data controller for personal data processed through pmcoaching.app and our apps. Questions about your data: hello@pmcoaching.com.

What we collect and why

Account data — name, email and password (stored hashed) so you can sign in.

Training and health data — workouts, sets, bodyweight, steps, goals, meal plans and chat messages you send to your coach. We use it to deliver your coaching, statistics and leaderboard. Your name and heaviest lifts are visible to other members on the leaderboard.

Payment data — handled by Stripe. We never see or store your card number; we keep your subscription status and history.

The legal basis is the contract with you (delivering the service) and, for health data, your explicit consent when you create an account and log it.

Who processes data for us

Supabase (database, login, file storage), Stripe (payments), Cloudflare (hosting and security), Anthropic (answers in the AI coach chat — only the messages you send there) and Expo (mobile push notifications). They process data only on our instructions under data processing agreements.

How long we keep it

For as long as you have an account. When you ask us to delete your account we delete or anonymise your personal data, except what we must keep for bookkeeping (Danish Bookkeeping Act: 5 years).

Your rights

You can request access to, correction, export or deletion of your data, object to or restrict processing, and withdraw consent at any time by emailing us. You can also complain to Datatilsynet (the Danish Data Protection Agency), datatilsynet.dk.

Cookies

We only use cookies that are strictly necessary for the site to work. We don't use advertising or tracking cookies. If we add optional cookies (e.g. analytics) they will only be set after you choose “Accept all”, and you can change your choice any time via “Cookie settings” in the footer.

CookiePurposeTypeExpiry
sb-*-auth-tokenKeeps you signed in to your client or coach account (Supabase).Strictly necessarySession / up to 1 year
pm_consentRemembers your cookie choice.Strictly necessary1 year
__stripe_mid, __stripe_sidFraud prevention during checkout — set by Stripe on its payment pages only.Strictly necessary30 min – 1 year

Security

All traffic to pmcoaching.app is encrypted with HTTPS (TLS 1.2 or newer) and browsers are told to always use HTTPS (HSTS). Access to your data is restricted with row-level security so clients only see their own data and coaches only see their own clients.