Legal
Privacy policy
Last updated: 29 October 2026
This policy explains what personal data I collect through this website and the coaching app, why I collect it, who I share it with, and the rights you have. I’ve tried to keep it in plain English.
1. Who I am
This website and app are run by Lee Casey, a sole trader trading as Coach Lee Casey, based in Cork, Ireland. I am the “controller” of your personal data, which means I decide how it is used.
For any question about your data, or to use any of your rights below, email me at coachleecasey365@gmail.com.
2. What data I collect
- Account details: your name, email address, password (stored securely in encrypted form, I can’t see it) and whether you are a client or trainer.
- Goals and coaching information: the goals you share with me and notes about your coaching.
- Health and body data: weight check-ins, body fat and tape measurements, progress photos, your daily step counts, and your meal and workout logs.
- Ratings and comments: the star rating and comments you leave on a workout, and the comments you leave on a day of eating. Only you and I can see them, and you can change or remove them at any time.
- Weekly check-ins: your answers about your week (energy, sleep, hunger, stress, digestion, how training and food went, and anything you write), saved with a summary of what you logged that week. Only you and I can see them. You can change the current one, and I’ll delete any of them if you ask.
- When you last used the app: the time you last had the portal open, so I can see who’s active and check in with anyone who’s gone quiet. Only I can see it.
- Free plan sign-ups: your first name (if you give it), email address, and whether you chose to receive coaching tips.
- Messages: anything you send me by email or Instagram direct message.
- Food diary and targets: the food you log (what, how much and when), and if you use the calorie calculator, your age, sex, height, weight, activity level and goal.
- Your questionnaire: what you tell me when you sign up or later: your goals, job and family routine, training background, health (injuries, medical conditions, medication and pregnancy), the foods you like and dislike, allergies and intolerances, how you cook, your habits (sleep, alcohol, takeaways), and, only if you choose to answer, a rough weekly food budget. I use it to build and adjust your plan.
- Rest alerts (optional): if you turn on rest alerts, a notification address for your phone or browser, and the time your current rest ends. The pending alert is deleted as soon as it’s sent.
- Technical data: basic information your browser sends when you visit, such as your IP address, browser type and the pages you request. This is handled by the hosting provider to deliver and protect the site.
3. Health data and your explicit consent
Weight, progress photos, your questionnaire answers, your check-ins, your comments, and meal and workout logs can reveal information about your health. Under the GDPR this is “special category” data, and I only process it with your explicit consent, which you give with a separate checkbox when you create a client account.
You can withdraw this consent at any time by emailing coachleecasey365@gmail.com. Withdrawing it doesn’t affect anything I did before you withdrew it. Because tracking this data is central to the coaching, withdrawing consent means I’ll stop processing it and will no longer be able to coach you through the app.
4. Why I use your data and my legal basis
- To provide your coaching and run your account: creating your plans, reviewing your progress and running check-ins. Legal basis: performing my contract with you (Article 6(1)(b) GDPR), and your explicit consent for health data (Article 9(2)(a) GDPR).
- To give you the free 4-week plan you asked for. Legal basis: doing what you requested (Article 6(1)(b) GDPR).
- To send you occasional coaching tips, only if you ticked the optional box. Legal basis: your consent (Article 6(1)(a) GDPR). You can unsubscribe at any time by replying to any email or emailing coachleecasey365@gmail.com.
- To reply to your messages. Legal basis: my legitimate interest in responding to enquiries (Article 6(1)(f) GDPR).
- To keep the site secure and working. Legal basis: my legitimate interest in running a secure website (Article 6(1)(f) GDPR).
I don’t sell your data, and I don’t use it for automated decision-making.
5. Who I share your data with
I use a small number of service providers (“processors”) who handle data on my behalf and only on my instructions:
- Supabase stores the app’s database, login system and uploaded files. Your data is stored in the EU, in Supabase’s Frankfurt, Germany region (EU Central 1).
- Vercel Inc. hosts this website. Vercel is a US company, so when you visit the site it may process technical data such as your IP address, including outside the EU.
- Google (Gmail) handles email I send and receive, including sending the free plan and replying to you.
- Apple and Google deliver rest alerts to your phone if you turn them on. They only receive the alert itself (for example “Rest over: Face Pull, set 2 is next”), not your account or health details.
- Open Food Facts, a free open database of packaged foods, is searched when you look up a shop product or scan a barcode. It receives only the search words or barcode, not who you are.
- Meta (Instagram) handles messages if you contact me by Instagram direct message. Meta’s own privacy policy applies to your use of Instagram.
Where a provider transfers personal data outside the European Economic Area, the transfer is protected by an approved safeguard, such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
I may also share data if the law requires it, for example with authorities who have a legal right to request it.
6. How long I keep your data
- Account and coaching data, including health data: for as long as you are a client. If you close your account or ask me to delete your data, I’ll delete it within 30 days, unless the law requires me to keep something for longer.
- Free plan sign-ups: until you ask me to remove you, or unsubscribe from coaching tips. If you only asked for the plan, I won’t send you any other emails.
- Messages: for as long as needed to deal with your enquiry or coaching.
7. Your rights
Under the GDPR you have the right to:
- access a copy of the personal data I hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how I use your data;
- receive your data in a portable format;
- withdraw your consent at any time.
To use any of these rights, email coachleecasey365@gmail.com. I’ll reply within one month.
If you’re unhappy with how I’ve handled your data, you can complain to the Data Protection Commission, Ireland’s data protection authority, at dataprotection.ie. I’d appreciate the chance to sort it out with you first.
8. Cookies
The site only uses cookies that are strictly necessary to keep you logged in to the app. I don’t use advertising or analytics cookies.
9. Age
The coaching and app are for adults aged 18 and over.
10. Changes to this policy
If I make significant changes, I’ll update the date at the top of this page and let clients know.