Privacy policy
Last updated 16 October 2026
Draft. This text has not yet been reviewed by a lawyer and may change before the app is publicly available.
This policy explains what personal data the Calibre Coach app collects, why, where it is kept, who can see it, and how you can see, correct or delete it. Calibre Coach is operated by Samarth Agarwal ("we", "us"), the Data Fiduciary for your personal data under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act").
The short version
- You sign in with your phone number. We don't ask for an email address or a password.
- We store your training data, and the health information you choose to give us, on servers in India.
- Your trainer can see your training and health information, because coaching you is the point. Nobody else can, apart from the service providers listed below who run our infrastructure.
- We don't sell your data, show ads, or use third-party analytics or advertising trackers.
- You can ask for a copy of your data, correct it, or have it deleted at any time.
What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Phone number | You, at sign-in; or your trainer, when they invite you | To sign you in with a one-time SMS code, and to link you to your trainer |
| Name | You or your trainer | To show you to your trainer and in the app |
| Training plans | Your trainer, or you if you write your own | To show you what to do each day |
| Workout logs: sets, reps, weights, effort, rest, times, activities, notes, skipped or changed workouts | You, as you train | To record your training, show your history and personal bests, and let your trainer adjust your plan |
| Health information: injuries and physical limitations ("constraints"), and pre-session check-ins (sleep, energy, soreness, and whether you have pain, where and how bad) | You, or your trainer on your behalf | To keep you away from exercises that conflict with an injury, and to let your trainer adapt a session to how you feel |
| Session and package records: in-person sessions booked, attended or missed | Your trainer | To run your coaching with your trainer |
| Technical data: request logs (time, IP address, device and app details, errors) | Your device, automatically | To keep the service running and secure, and to fix faults |
Health information is optional. The app works without it, but it can't then warn you or your trainer about exercises that clash with an injury. We treat it with extra care: it is marked separately in our database so that we can find, export and delete all of it reliably.
We do not collect your location, contacts, photos, or data from other apps, and we do not ask for payment details in the app.
Consent
We process your personal data on the basis of your consent, given when you create your account, and for health information when you first enter it. You can withdraw consent at any time by deleting your account (see below). Withdrawing consent doesn't affect processing that happened before, but it does mean we can no longer provide the service to you.
Calibre Coach is not intended for anyone under 18, and we do not knowingly collect their data.
Who can see your data
Your trainer
If you are coached by a trainer on Calibre Coach, that trainer can see your name, phone number, plans, workout logs, notes, check-ins (including pain) and constraints, and can add constraints and plans for you. That is how they coach you. A trainer can see only their own clients. They cannot see plans you write for yourself.
Our service providers
We use these companies, as Data Processors acting on our instructions, to run the service:
- Supabase: sign-in (phone number and one-time codes) and our database. Hosted in Mumbai, India.
- Google Cloud (Cloud Run): our application server. Hosted in Mumbai, India (region asia-south1).
- An SMS provider: delivers your one-time sign-in code. It receives your phone number and the code only.
- Google Workspace: our email, if you write to us.
Apple and Google distribute the app through their app stores under their own privacy policies.
Anyone else
We don't sell or rent your personal data, or share it for advertising. We will disclose it only if the law requires us to, for example in response to a valid order from a court or government authority.
Where your data is stored
Our database and application server are in India (Mumbai). Your phone also keeps a copy of your plans and any workouts logged offline, until they sync. If a service provider ever needs to process your data outside India, we will do so only where the DPDP Act permits it, and we will update this policy.
How long we keep it
We keep your data for as long as you have an account. When you delete your account, we delete your personal data as described below. Server request logs are kept for no more than 30 days.
Your rights
Under the DPDP Act you have the right to:
- Access: a summary of the personal data we hold about you and how we use it, and the identities of those we have shared it with.
- Correction and completion: most of your data you can correct in the app; for anything else, ask us.
- Erasure: deletion of your personal data.
- Grievance redressal: a response from us to any complaint about how we handle your data.
- Nomination: to name someone who may exercise these rights for you in the event of your death or incapacity.
To use any of these rights, email support@calibrecoach.com from, or quoting, the phone number on your account. We may ask you to confirm the request from that number before acting on it.
Deleting your account
You can ask us to delete your account at any time. We delete your account and everything tied to it, including all your workout logs, plans, notes, check-ins, constraints and session records, and remove your phone number from our sign-in system. Your trainer loses access to all of it. If you are also a trainer on Calibre Coach, your trainer account stays and only your client data goes.
How to ask, and what to expect: Delete your account.
Security
Data travels between the app and our servers encrypted (HTTPS) and is stored encrypted at rest by our hosting providers. Only our application server writes to the database, and it checks on every request that you are allowed to see or change the data involved. No system is perfectly secure; if a breach affects your personal data, we will tell you and the Data Protection Board of India as the DPDP Act requires.
Changes to this policy
If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top shows when it last changed.
Contact and complaints
Samarth Agarwal
Privacy questions, requests and complaints (Grievance Officer): support@calibrecoach.com
We aim to respond within 7 days. If you are not satisfied with our response to a complaint, you may complain to the Data Protection Board of India.