Privacy Policy

Who is responsible

Your gym owns and controls its client data. A solo trainer acts as the gym for this purpose. EzResultz provides the service that stores and processes this data for the gym. Ownership does not remove clients’ privacy rights. Contact your gym first about your records, or email support@ezresultz.com.

What we store and why

We store staff account details, client names and any contact details supplied, training goals, schedules, programs, exercise weights and reps, assessments, progress reports, packages, training notes and limitations supplied to the gym, workout-sheet photos, consent dates, and access/change records. Private feedback may include stars and comments when collected. These records support coaching, progress tracking, scheduling and secure account operation. Do not enter health information that is unnecessary for training.

Who can see it

A trainer sees clients assigned to them. Authorized gym managers see records at locations they manage. Other trainers cannot browse those clients. EzResultz staff normally see gym usage rather than client records; support access to client records is restricted, time-limited and audited. Workout photos are private, not public links. Individual ratings are not shown to trainers; managers see rating averages and comments only after the applicable three-response threshold.

Consent and sharing

Before adding a new client, staff must confirm that the client agreed to storage of their training data. We record when that confirmation was made and who recorded it. Clients under 18 require a parent or guardian’s agreement before their training data is stored. Staff must confirm guardian agreement in intake when the client is under 18. This is a staff attestation, not a client or guardian signature. Sharing progress outside the gym requires a separate opt-in; agreeing to storage does not agree to marketing or public sharing.

De-identified training data

EzResultz may use de-identified, aggregated training data (never names, contact details, photos, or any data that identifies a person or gym) to improve the product and create industry benchmarks. This right continues after an account closes.

Service providers

• Lovable Cloud — hosting and database: provides the application infrastructure, account authentication and PostgreSQL database holding gym, staff and client training records.
• Lovable Cloud Storage — file storage: stores private workout-sheet photos and controls access to those files.
• Lovable AI Gateway and OpenAI — photo reading: workout-sheet images and the relevant planned workout are processed through Lovable AI Gateway using the configured OpenAI GPT model to extract exercise marks, weights, reps and RPE for trainer review. Photo reading processes the original image; it is separate from the de-identified benchmark use described here.
• Lovable Email — email delivery: processes recipient addresses and email content to deliver invitations, password resets, opted-in session recaps and rating requests.

These providers process information needed for their service. This list names the services used by EzResultz; their underlying infrastructure and delivery subprocessors must also be reviewed before this draft is finalized.

Retention and deletion

Confirmed workout-sheet photos are normally kept for at least 90 days and may remain longer while the gym keeps the client’s training history. Archiving a client does not delete their records. To request a copy, correction or permanent deletion, contact your gym manager or support@ezresultz.com. We may ask for enough information to verify the request, but never send passwords. Managers can export client records and photos, or permanently delete the client and associated records and photos on request. An approved deletion overrides normal photo retention.

A minimal audit receipt records who completed deletion and when, without the deleted client’s name, notes or training payload. Previous backups may retain copies until they expire; access remains restricted. Any legal retention requirements must be assessed by the gym before deletion. We do not promise a backup deletion deadline in this draft.

Security and your choices

Access is restricted by account role and gym location. No service can promise perfect security. Keep sign-in details and downloaded exports private. Depending on your location, you may have rights to access, correct, delete or restrict use of your data, withdraw consent, or complain to a privacy authority. Withdrawal does not undo earlier lawful processing. Ask your gym or support@ezresultz.com for help.