Security & data ownership
Your gym owns its client data
Client training records belong to your gym, not to individual trainers. When a trainer leaves, every client's history, working weights and next session stay with your gym. Managers can export a client's records or permanently delete them on request. EzResultz uses only de-identified, aggregated data (never names, contact details, photos or anything that identifies a person or gym) to improve the product.
Who can see what
Access rules are enforced in the database itself. Trainers see only their assigned clients. Managers see the clients at the locations they manage. Clients don't have accounts or passwords; they use expiring links to view recaps and leave ratings. EzResultz staff see gym-level usage only. Viewing a gym's client records requires opening a support session, which ends automatically after 30 minutes, is recorded in an audit log, and notifies your managers.
What we store
Client names and contact details your gym enters, training programs and session results, training notes and limitations your trainers record, and workout sheet photos. We don't collect payment details, government IDs or insurance information.
How it's protected
Data is encrypted in transit and at rest by our hosting provider. Workout photos are private and never publicly linked. Account changes, client reassignments and edits to locked sessions are recorded in an audit log.
Service providers
- Lovable Cloud — hosting and database: provides the application infrastructure, account authentication and PostgreSQL database holding gym, staff and client training records.
- Lovable Cloud Storage — file storage: stores private workout-sheet photos and controls access to those files.
- Lovable AI Gateway and OpenAI — photo reading: workout-sheet images and the relevant planned workout are processed through Lovable AI Gateway using the configured OpenAI GPT model to extract exercise marks, weights, reps and RPE for trainer review. Photo reading processes the original image; it is separate from the de-identified benchmark use described here.
- Lovable Email — email delivery: processes recipient addresses and email content to deliver invitations, password resets, opted-in session recaps and rating requests.
Each provider processes only the information needed for its service.
Questions
Email support@ezresultz.com.