Last updated 29/09/2026
The short version. OwnCoach stores what you log so it can show it back to you. We don't sell your data, we don't show ads, and we don't use analytics or tracking tools. You can ask for a copy of your data or have it deleted at any time.
Who we are
OwnCoach runs the OwnCoach app and the website at owncoach.app. We are based in the Netherlands and we are the controller of your personal data under the General Data Protection Regulation, the GDPR.
What we collect
Your account
- Your email address and a hashed version of your password. We never see or store the password itself.
- Details you choose to add: first and last name, sex, date of birth and height.
- Your settings, such as units, date format, theme, reminder time and the time zone of your device.
What you log
- Weigh-ins, with any notes you add.
- Food log entries, the foods and recipes you create, their nutrition values and any photos you attach, and your grocery lists.
- Workouts, exercises, sets, runs and timers.
- Goals, nutrient targets and weekly workout goals, and streaks worked out from your weigh-ins.
Technical data
- For each signed-in device, its IP address and browser or app version, so you stay signed in and we can spot misuse.
- If you turn on reminders, the push address your device gives us to deliver them.
- Our servers keep short technical logs of requests to keep the service running and secure.
We don't collect your location, contacts or anything from other apps.
Why we use it
- To provide OwnCoach. Storing and showing your logs, working out totals, trends, streaks and goal progress, and sending the emails you need to sign in. This is necessary to perform our agreement with you.
- To process your health data. Weight, food intake, body details and training are health data under the GDPR. We only process them because you give explicit consent by creating an account and logging them. You can withdraw that consent at any time by deleting the data or your account.
- To send reminders. Only when you turn them on, based on your consent.
- To keep OwnCoach secure. Limiting sign-in attempts and emails, and preventing abuse, based on our legitimate interest in a safe service.
We never use your data for advertising, we never sell it, and we never use it to make automated decisions about you.
Who we share it with
Only with the service providers that run OwnCoach for us, under agreements that limit them to our instructions:
- Hetzner Online GmbH, Germany. Our servers and database run in their data centres in the European Union.
- Amazon Web Services EMEA SARL, Luxembourg. Photos you add are stored in Frankfurt, and account emails are sent through their email service in Frankfurt.
- Push services from Apple, Google or Mozilla, depending on your device, deliver reminders you have turned on. They only see an encrypted message.
Two services receive a small amount of data directly from your device:
- Open Food Facts, France. When you scan a barcode, we look up that barcode number in their open food database. No account details are sent with it.
- Google Fonts, Google Ireland Limited. Our typeface is loaded from Google, which receives your IP address when a page loads.
We will also share data if the law requires it, and only as far as it requires.
Where your data lives
Your data is stored in the European Union. Some of our providers belong to groups based in the United States. Where data could reach them, it is covered by the EU standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep it
We keep your data for as long as you have an account. Anything you delete in the app is deleted straight away, and so is your account when you delete it under More, then Account. Photos are removed from storage within a few minutes after that. Sign-in sessions end when you sign out. Technical logs are removed within 30 days.
Your rights
You can ask us to:
- show you the data we hold about you, or send you a copy in a common format;
- correct data that is wrong;
- delete some or all of your data, or your whole account;
- limit how we use your data, or stop using it where we rely on our legitimate interest;
- stop processing based on your consent, at any time.
You can do most of this yourself: edit or delete anything you logged, download all of your data as a file with Export my data, and delete your whole account with Delete account, both under More, then Account. For anything else, write to admin@owncoach.app from the email address on your account. We reply within 30 days. If you think we handle your data wrongly, you can complain to the Autoriteit Persoonsgegevens, the Dutch data protection authority, or to the authority in your own country.
Security
All traffic to OwnCoach is encrypted. Passwords are stored as hashes, sign-in links expire after 15 minutes and work once, and we limit repeated sign-in attempts. Access to our servers is limited to the people who run OwnCoach.
Cookies
We use two small cookies. One keeps you signed in. The other remembers your device's time zone so days start at your midnight. Both are needed for the app to work, and neither is used for tracking.
Children
OwnCoach is not meant for anyone under 16. If you think a child has created an account, let us know and we will delete it.
Changes
If we change this policy in a way that matters, we tell you in the app or by email before the change takes effect. The date at the top shows when it last changed.
Contact
OwnCoach is based in the Netherlands. For anything about this document, write to admin@owncoach.app. We reply within 30 days.