AMC Train Privacy Notice

This notice explains what AMC Train collects, why, and what you can do about it. It is written in plain English on purpose.

1. Who we are

AMC Train is run by Andrew McDuff, trading as Andrew McDuff Coaching, a sole trader based in the UK. Andrew is the data controller for the information you put into the app. Contact: andrewmcduffcoaching@yahoo.com.

2. What we collect

• Account details: your name, email address and login details.
• What you log: workouts, exercises, sets and weights, activities, food and drink, goals, notes.
• Health information: bodyweight, measurements, progress photos, pain, sleep, energy and recovery scores, and anything else you choose to add.
• Payment details: if you subscribe, payments are handled by Stripe. We see your subscription status and the last four digits of your card, never your full card number.
• Technical information: basic device and usage information needed to keep the app working and secure.

3. Why we use it

• To provide the app and your account (contract).
• To process health information you log, with your explicit consent (UK GDPR Article 9).
• To take payment for a subscription and keep financial records (contract and legal obligation).
• To keep the app secure and fix problems (legitimate interests).
• To send optional emails and share results, only if you opt in (consent).

4. Who we share it with

We use a small number of trusted providers to run the app: Base44 (app hosting and database), Stripe (payments) and SendGrid (account emails). They only process your information on our instructions. We never sell your data.

Some of these providers may process data outside the UK. Where they do, appropriate safeguards such as the UK International Data Transfer Addendum or equivalent are relied on.

5. How long we keep it

We keep your information while your account is open. You can delete your account at any time in the app (Profile, then Delete account) or at amc-training.base44.app/delete-account. Your account and the data linked to it are then deleted straight away, except:

• invoices and payment records, which we keep for 6 years because HMRC requires it (Stripe also keeps its own payment records);
• a short anonymous note that a deletion was carried out (the date and record counts, not your name or email);
• uploaded files such as photos, which are unlinked from your account and can no longer be opened from the app, but which our hosting provider does not currently let us erase;
• short-lived backups and version history kept by our hosting provider, which expire on its normal schedule.

6. Your rights

You can ask to see, correct, export or delete your data, restrict or object to how it is used, and withdraw consent at any time. Use Privacy & data in the app or email andrewmcduffcoaching@yahoo.com. We will reply within one month. Deleting your whole account (see section 5) happens straight away.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk).

7. Changes

If this notice changes in a way that matters, we will tell you in the app before the change takes effect.