Privacy
Last updated: 26 October 2026
In short
Crush Coach only collects what you type in and, if you connect Apple Health or Health Connect, what you allow it to read. There are no ads, no analytics tools, no profiling, and no data is ever sold or handed to anyone else.
There is one exception, and it stays on the phone: when the app closes because of an error, the error message is written to a local log. It never leaves on its own. You will find it in Settings, under “Diagnostics”, and you decide whether to send it and to whom.
Your data is stored in Europe, only you can read it, and you can take it with you or delete it whenever you like from this same app. The only exception is what you choose to publish in the community, which other Crush Coach users can see.
The only thing that can leave Europe is a PDF or a photo you choose to import as a plan: a Google service reads it, and we explain this below.
What we collect
An account needs an email address and a password, which we never store in plain text.
So the app can do what it does, we keep what you enter:
- your profile: first and last name, year of birth, sex, height, goal, discipline and level
- your plans, your workout history, the exercises you add, your skill progress, the equipment your gym does not have, your settings and any workout you left half done
- your body measurements: weight, circumferences and body fat percentage
- the photos and videos you choose, that is your profile picture and your form demonstrations
- if you use the community: your nickname, the posts and comments you publish, the Crushes you give, who you follow, who you block, the reports you send and, if you allow notifications, the address of your phone to send them to
Sex, year of birth, weight, circumferences and measured body fat are used to work out the indices the app shows — body mass, body fat, lean mass — and to read your weight trend against your goal. Nothing else.
If you connect Apple Health
On iPhone you can connect Crush Coach to Apple Health. It stays off until you turn it on, and iOS asks for your permission for each type of data.
On Android the same applies to Google Health Connect: same data, same rules, and you grant permissions in Health Connect.
Crush Coach writes the workouts you finish to Apple Health: duration and calories.
From Apple Health it reads, and keeps with the rest of your data:
- the average and maximum heart rate of each workout, including those done before you connected it
- the weight recorded by scales or other apps, on days when you did not enter it yourself, and the body fat percentage if your scale measures it
- the calories recorded by Apple Watch during the workout, instead of the estimate
It reads your runs, from whichever app records them: distance, duration, route, steps, heart rate and calories. It keeps them only on this phone, to show them to you, and they are not uploaded to your account.
It reads the calories and protein your nutrition app writes to Health, to show them next to your weight. They are not stored.
It reads other apps’ other workouts only to avoid counting calories twice: those are not stored.
Data read from Apple Health is used only for what is written here. It is never used for advertising, sold or handed to anyone.
If you import a plan from a PDF or a photo
You can create a plan from a PDF or from one or more photos. The file goes through our servers to Gemini, Google’s artificial intelligence service, which reads it and extracts exercises, sets and reps.
We keep neither the PDF nor the photos: only the resulting plan stays, among yours. Google, however, processes them under its own terms, including on servers outside the European Economic Area, and may use them to improve its services.
That’s why we tell you before the first upload, and ask you to send only files that contain the plan and nothing else personal: in a photo, no faces or other papers. If you import nothing, nothing reaches Google.
If you publish in the community
In the community you can publish a plan or a completed workout, comment on other people’s, give a Crush and follow whoever interests you. Until you do any of these, nothing of yours is public.
From your first post, comment, Crush or follow, other Crush Coach users see:
- your profile’s first name, last name and picture and, if you choose one, a nickname. If your profile has no name, we ask for it at your first post, comment, Crush or follow, and you can enter a nickname instead. You change name and picture from your profile, the nickname from your community page
- the plan, with exercises, sets and loads, or the workout, with exercises, sets, loads, duration, volume and date
- the title and text you write, the photos and videos you add, comments, who gave the post a Crush and how many people copied it, who you follow and who follows you
- for a workout, the records set that day
- if you turn on “Last 30 days” in “Edit profile”, your numbers for the last thirty days: workouts, volume, weeks in a row and all-time workouts
- if you turn on “Completed challenges” in “Edit profile”, the weekly challenges you completed in the last six months, with the week of each one, and out of how many weeks
Whoever publishes sees who gave them a Crush, commented on or copied their posts, and who started following them.
Heart rate, calories, weight, body measurements, the workout note and your exercise notes are never published.
A post is a copy made when you publish: editing or deleting the plan doesn’t change it, until you update it yourself from the post. You can delete your posts and comments whenever you like, and deleting your account removes them all.
You can block a user — you won't see each other's posts and comments anymore — and report posts, comments and profiles. A report reaches us together with your account, and no one else sees it. Content reported by three people is hidden right away until we review it; we remove content that is unlawful or abusive.
If you allow notifications, we tell you about new Crushes, comments, replies and followers. The notification text contains the name of whoever did it and, for comments and replies, the start of what they wrote. Signing out stops the phone from receiving them.
If you ask for it, by tapping «Find people you know», Crush Coach reads the email addresses in your contacts to suggest people you know who already use the app. Your contacts do not leave the phone: only a fingerprint of each email is sent — a code, not the email itself — which our servers match against those of the accounts and forget right after. Names, numbers and the rest of your contacts stay on the phone, and we keep nothing.
In the same way, people who have your email in their contacts can see you among the suggestions. If you do not want this, turn it off in Settings → Community → Let contacts find me.
This is health data
Weight, circumferences, body indices and heart rate fall under the special categories of personal data set out in Article 9 of the GDPR.
We process it only on the basis of your explicit consent, which you give by choosing to enter it: it is optional, and the app works without it. You can withdraw that consent at any time by deleting the data or your account.
For data read from Apple Health, you give consent by turning on “Connect to Health” and accepting the iOS permissions. You withdraw it by turning it off, or from the Health settings; what was already read stays until you delete the workouts, the measurements or your account.
What we do not collect
We do not collect your location, your advertising identifier, your browsing history, or any data about how you use the app. We do not keep your contacts: if you connect them, we use them only for the suggestions, as explained above.
Crush Coach contains no third-party components for analytics, advertising or tracking. The error log is written by the app itself and never leaves the phone: no external service receives it.
Where it lives
On Supabase, which hosts the database and files on Amazon Web Services infrastructure in the Central Europe region (Frankfurt, Germany). It never leaves the European Economic Area.
Supabase processes the data on our behalf, as a data processor.
To reach your phone, notifications go through Expo's push service, in the United States, and through Apple's and Google's: they receive the notification text and the phone's address, and nothing else.
How it is protected
- every database row is tied to your account by a rule enforced by the database itself: another user cannot read your data even knowing its identifier. The only exceptions, for those who use the community, are the public profile — nickname, name and picture — posts, comments, Crushes and who you follow, which exist precisely to be seen
- photos and videos live in private stores, isolated per user, and open only through expiring links
- traffic between the app and the servers is always encrypted
- a working copy stays on your phone so the app works offline, and it is wiped when you sign out
For how long
As long as you keep your account. There is no automatic expiry, and we keep no copies of people who leave.
Your rights
You can exercise the rights set out in Articles 15-22 of the GDPR at any time: access, rectification, erasure, restriction, objection and portability.
In practice, without having to ask anyone:
- access and rectification: every piece of data is visible and editable on the screen it belongs to
- portability: Settings → Data → Export backup produces a file with everything; Export history as CSV gives you your workouts as a table
- erasure: Settings → Account → Delete account immediately removes your account, data and files from our servers, with no undo
You also have the right to lodge a complaint with your data protection authority.
Children
Crush Coach is not aimed at children under 16 and does not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.
If this policy changes
If it changes in any substantial way we will tell you inside the app, before the changes take effect. The date at the top tells you the latest revision.
Who is responsible for your data
The data controller is Alex Citeroni.