Privacy Policy

Who we are

Primed is a workout tracking app for your phone, coming to the App Store and Google Play, with a web dashboard at primedlog.com for the personal trainers who coach on it. Primed is operated by Makappen Ltd, which is the data controller responsible for your information. You can reach us any time at support@primedlog.com.

Makappen Ltd is a private limited company registered in England and Wales, company number 11985285. Registered office: 33 Boston Road South, Holbeach, Spalding, Lincolnshire, England, PE12 7LR.

What we store, and where

• Training data, signed in. If you have an account, your workouts, routines, exercises, readiness check-ins and body measurements sync to our database, hosted by Supabase. Your data is stored as a single record tied to your account, and access rules on the database mean only you can read or write it. That's what lets you log on your phone and see it on your laptop.
• Training data, guest mode. If you use Primed without an account, everything is saved in your browser's local storage and never uploaded. It exists only on that device, so clearing your browser data erases it.
• Health and wearable data. If you connect your phone's health app, Primed reads a narrow set of recovery figures — sleep, heart rate variability, resting heart rate and step count — and only the ones you tick when your phone asks. We read; we never write anything back. The figures are stored with that day's check-in on your account and used for one thing: working out your readiness score. We do not use health data for advertising, we do not sell it, and we never send it to an app store or an ad network. You can withdraw the permission at any time in your phone's settings, and Primed keeps working without it.
• Progress photos. Photos you add are kept on your device. They are left out of ordinary cloud sync on purpose, so they do not follow you to a new phone. There is one exception, and it only ever happens because you asked for it: if you attach photos to a check-in for your trainer and confirm that send, a copy of those photos is uploaded to private storage so your trainer can open them. Nothing is uploaded if you do not attach it. Stored photos sit in a private area that no one can browse; only you and the trainer you are connected to can open them, through links that expire. You can stop sharing at any time from your profile, which deletes the uploaded copies. If you have no trainer connected, no photo of yours is ever uploaded. Keep your own copy with Settings → Privacy → Download my data.
• Voice notes. If you record a voice note for your trainer, the recording is uploaded to private storage so they can play it. Your microphone is only ever used while you are holding the record button, and nothing is captured before or after that. A note is kept until it is deleted, the way a message is: whoever recorded it can unsend it at any time, which deletes the audio for both of you, and the person listening cannot delete someone else's recording. While you are connected only the two of you can play it; if the coaching connection ends, their access stops immediately and your own recordings stay yours.
• Account details. If you create an account (with Google or email), we store your name, email address, and your trial/subscription status. That's all we need to know it's you.
• Payments. We never see or store your card number. If you subscribe in the app, Apple or Google takes the payment and tells us only whether your subscription is active. If you subscribe on the web, our payment provider handles it on exactly the same basis: your card details go straight to them and never touch our servers.
• Emails. We send a small number of transactional emails (via Resend) to the address you signed up with: a welcome email, trial reminders and a receipt-style confirmation. Reply to any of them to reach a human.

Backups and export

Whether you're signed in or a guest, you can download a full copy of your data anytime, and there are two routes because they answer two different questions.

• Settings → Privacy → Download my data. Your copy, in formats other software can open: everything as a JSON file, every set you have ever logged as a spreadsheet, and your body log as a second spreadsheet. Nothing is uploaded and nothing leaves your device in the process.
• Settings → Account → Export & import. The same data as a backup file this app can read back, for moving to a new phone or restoring after a reinstall.

It's your data; take it with you whenever you like.

What we don't do

• No advertising, and no third-party ad trackers.
• No profiling you across other websites, and no ad networks.
• No selling, renting or sharing your personal data with anyone, ever.
• No use of your training or health data for anything except showing it back to you and, if you ask, your trainer.

Analytics, and the only thing we ask you to agree to

On this website we use Google Analytics to count visits and see which pages people actually find useful. It tells us things like how many people opened a page and roughly where in the world they were. We do not use it to build advertising profiles, we do not run ad networks, and it never has access to your training, health or photo data.

It only runs if you say yes. Nothing is loaded and no cookie is set until you press Allow on the bar at the bottom of the page. Press No thanks and Google Analytics is never loaded at all, on any page, and we don't ask again. Declining changes nothing else about the site.

There is no analytics in the Primed app. Not gated, not optional: it isn't in there. Nothing about the training you log is counted or sent anywhere except to your own account.

If you connect a trainer

You can connect your account to a personal trainer so they can coach you. This only ever happens when you accept an invite from them, and nothing is shared until you do.

• What your trainer can see. Your name, so they can tell their clients apart. A summary of the training you log: your sessions and sets, how consistently you are training, and the programmes they have sent you. They also see your body weight and any tape measurements you record, and the check-ins you choose to submit, which can include energy, sleep, soreness, a note, and any progress photos you attach.
• You choose, field by field. Open Settings → Privacy → What your coach sees. It lists everything that leaves your phone for them and lets you switch off your name, your recent workouts, your weekly totals, your body weight and your measurements individually. Turning one off removes it from what they receive, straight away. How often you train — your sessions, your streak and how close you are to your weekly goal — is the one thing you cannot switch off, because without it there is no coaching to do; the screen says so rather than pretending otherwise.
• The identifying details we never send. Your email address, your bio and your date of birth are never sent to a trainer, whatever your settings. The only identifying detail that can reach them is the name on your profile, and you can switch that off too.
• What your trainer cannot see. Anything else in your account. They cannot sign in as you, they cannot change or delete your training history, and they cannot delete your progress photos. Your account stays yours.
• Only while you are connected. Your trainer's access depends on the connection being active. The moment either of you ends it, their access stops.
• Voice notes. A recording is made only while you hold the record button. Whoever recorded it can unsend it, which deletes the audio for both of you; the person listening cannot delete it. Your trainer can play your notes only while the connection is active, and the moment it ends so does that.
• Progress photos. Photos reach your trainer only when you attach them to a check-in and confirm that send. It is never automatic, and it is decided one check-in at a time: attaching photos once does not sign you up to share the next set. Your trainer opens them through links that expire, and only while your connection is active. You can stop sharing a set at any time from your profile, which deletes the uploaded copies, and your trainer cannot delete them themselves.
• Your trainer is responsible for what they do with it. Once they can see your training, they are handling your data as an independent professional, and they are responsible for that under data protection law. If you have a question about how a particular trainer handles your information, ask them directly.

Ending the connection is a single action in the app and needs no one's permission. When you do, you keep everything you have logged.

Sign in with Google

If you sign in with Google, we receive your name, email address and profile picture from your Google account, nothing else. We use them only to create and identify your Primed account.

Deleting your data

In the app, in one place. Open Settings → Help → Delete account, the last item on the list. It permanently erases your account and everything attached to it — workouts, routines and records, readiness check-ins and any health figures we read, body measurements, progress photos, and your coach connection with its messages and check-ins — on our servers and on your devices. It is immediate and cannot be undone, so export a backup first if you want to keep a copy.

Already uninstalled? Email support@primedlog.com from the address on the account and we'll delete it for you, normally within a few days.

Guest mode. There is no account to delete. Erase everything from Settings → Account → Export & import → Reset all data, or by clearing your browser data.

Deleting your account does not cancel a subscription bought through the App Store or Google Play — cancel that in your phone's subscription settings, or you may keep being charged.

Why we're allowed to use your data

UK data protection law requires us to have a lawful basis for everything we do with your information. Ours are:

• To provide the service you asked for (contract). Your account details, your workouts, routines, records and body measurements, and the syncing that puts them on every device you sign in on. Without this we cannot run Primed for you.
• Your consent. The health figures we read from your phone's health app, and anything you share with a trainer. Both are switched on by you and can be switched off by you at any time, in your phone's settings and in Settings → Privacy → What your coach sees. Withdrawing consent does not undo what we did while it was given, and the rest of Primed keeps working.
• Our legitimate interests. Keeping the service secure and working, and counting visits to our website so we know which pages are useful. We have weighed this against your privacy and kept it to the minimum: no advertising, no profiling, no data sold.
• Legal obligation. Keeping the records of a sale that tax and company law require us to keep.

Health data is special category data under UK GDPR. We rely on your explicit consent for it, we use it only to work out your readiness score, and we ask for it only when you turn the connection on.

How long we keep it

• Your training data stays until you delete it. Delete your account and it goes immediately, along with everything attached to it.
• Guest data we never hold at all, so there is nothing for us to keep.
• Records of a payment we keep for six years after the tax year they fall in, because UK tax law requires it. That is the sale record, not your card details, which we never have.
• Support emails we keep for up to two years so we can pick up a conversation where it left off.
• Website analytics is aggregated and retained for up to fourteen months.

Who else touches your data

We use a small number of suppliers to run Primed. They process your data on our instructions only, under contract, and none of them may use it for their own purposes.

• Supabase — the database and sign-in system that holds your account and your synced training data.
• Cloudflare — serves primedlog.com.
• Resend — sends the handful of transactional emails described above.
• Google — Analytics on our website, and Sign in with Google if you choose it.
• Apple and Google — take the payment if you subscribe in the app, and tell us only whether your subscription is active.

Where they are. Some of these suppliers are based in, or store data in, countries outside the UK, including the United States. Where that happens we rely on the UK's adequacy regulations, or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, so that your data keeps the protection UK law gives it. Ask us at support@primedlog.com and we'll tell you which applies to which supplier.

Your rights

Under UK data protection law you have the right to:

• Get a copy of the personal data we hold about you. Settings → Privacy → Download my data does this instantly, or email us and we'll answer within one month.
• Correct anything wrong. Most of it you can edit yourself in Edit profile; email us for anything you cannot reach.
• Have it erased. Settings → Help → Delete account does it immediately, or email us.
• Take it elsewhere in a machine-readable format. That is what the JSON and spreadsheet exports are for.
• Restrict or object to what we do with your data, including anything we do on the basis of legitimate interests.
• Withdraw consent at any time, for the health connection and for anything shared with a trainer.

None of these cost anything, and using them will never get your account treated differently. Email support@primedlog.com and we'll reply within one month.

If we get it wrong. Tell us first and we'll try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to come to us first.

Children

Primed is not for under-16s and we don't knowingly collect anything from one. If you believe a child has given us their information, email support@primedlog.com and we'll delete the account.

Changes to this policy

If we change how we handle your data, we'll update this page and the date at the top. Significant changes will be announced in the app.