Privacy Policy

Last updated: September 25, 2026

Overview

Locked-In Fitness ("we", "our", "the app") connects people looking for training with independent personal trainers ("coaches"). This policy explains what data we collect, why we collect it, who we share it with, and how you can get rid of it. It covers the iOS app and locked-in-app.com.

Data We Collect

Account information: Name, email address, and a password stored only as a bcrypt hash. If you sign in with Apple or Google, we receive your name and email from those services instead.
Profile information: Whether you are a client or a coach, city, state and zip code, sports and specialties, bio, years of experience, hourly rate, certifications, profile photos and, for coaches, an optional intro video.
Precise location: If you tap "Share my location" and allow the iOS prompt, we read your device's GPS coordinates and save them to your profile. We use them to calculate how far away another person is, so the Lock-In deck can be ordered by who is genuinely nearest. Coordinates are read while you are using the app; we never collect location in the background, and we do not build a history of where you have been — a new share replaces the last one. Other users are shown a distance in miles, never your coordinates. You can refuse, or later revoke, the permission in iOS Settings; the app then falls back to the city and zip code on your profile.
Fitness information you choose to give: Clients can record a fitness level, training goals, any injuries to be aware of, and a preferred coaching format. This is shared with coaches you match with so they can train you safely. It is not medical data, we do not read it from Apple Health, and you can leave it blank or clear it at any time.
Messages and ratings: The messages you exchange with a match, and the rating and review you leave after a session.
Usage data: Swipes, matches, bookings, reschedules, cancellations, and how you move through the app.
Payment data: For each booking or session package, the amount, our fee, the date and the payment status. Card numbers, bank details and any identity documents go directly to Stripe and are never stored on our servers. For coaches, Stripe holds the payout account; we store only Stripe's account reference and whether payouts are enabled.
Subscription data: If a coach buys Boost or Pro, Apple processes the purchase and sends us a signed transaction identifier, the product, and the renewal or expiry date. We never see your Apple ID payment method.

How We Use Your Data

To create and manage your account
To show you nearby coaches or clients, ordered by distance, and to let both sides decide whether to connect
To let matched users message each other
To book, reschedule, cancel, charge and refund training sessions and session packages
To pay coaches, collect our platform fee, and meet our tax and accounting obligations
To grant and maintain Boost and Pro benefits, and to show a coach their own analytics
To schedule the reminders your device shows before a confirmed session — these are generated on your phone, not pushed from us
To keep the service safe, investigate abuse, and fix problems

We do not use your data for advertising, and we do not profile you for anyone else.

Data Sharing

We do not sell, rent or trade your personal data. We share limited information only in these cases:

With the other side of a match or booking: Your name, photo, profile, distance in miles and booking details, so a session can actually happen. A client's fitness level, goals and injuries are visible to coaches they have matched with.
With Stripe: Payment and payout processing. Stripe is the controller of the card and bank data it collects, under its own privacy policy.
With Apple: Sign-in with Apple, and the purchase and renewal of the Boost and Pro subscriptions.
With Google: Sign-in with Google, where you use it.
With Amazon Web Services: Hosting of the app's servers, database and uploaded photos, in the United States.
Legal requirements: Where required by law, regulation or legal process, or to protect someone's safety.

Data Security

Passwords are hashed with bcrypt. All traffic between the app and our servers runs over HTTPS with TLS. Servers are hosted on AWS with restricted access, and payment credentials are held by Stripe rather than by us.

Data Retention

We keep your personal data while your account is active. If you delete your account, your profile, photos, messages, swipes, saved location and session history are erased immediately. Records of completed payments are retained by us and by Stripe where we are required to keep them for tax, accounting and dispute purposes.

Your Rights

You have the right to:

Access and view your personal data in the app
Update or correct your profile at any time
Delete your account and its data yourself, from Settings → Account Actions → Delete Account
Withdraw location permission, or any other consent, at any time
Ask us for a copy of your data, or for it to be deleted, by email

To exercise these rights, contact support@locked-in-app.com. If you are in California, the EU or the UK, you also have the rights given to you by the CCPA, GDPR or UK GDPR; we do not sell personal information as those laws define it.

Safety and Reporting

Locked-In puts strangers in touch with each other and they then meet in person, so we take reports seriously.

Reporting: Every profile and every chat has a Report action. You can also email support@locked-in-app.com. Tell us what happened and we will look at it.
Blocking: Blocking someone removes them from your deck and your matches, stops them messaging you, and hides you from them. It takes effect immediately and you do not need our permission.
What we do about it: We review reports, and we suspend or remove accounts that harass, threaten, misrepresent their qualifications, or put anyone at risk. Serious matters are referred to the police.
Certifications: A Certified Trainer badge means we have seen the certificate. It is not a guarantee of competence, and it is not a background check.
Meeting safely: Coaches are independent, not our employees. Meet in a public place the first time and tell someone where you are going.

Age

Locked-In Fitness is rated 18+ and is for adults only. You must be 18 or older to create an account. The app puts people in touch with each other and they arrange to meet in person, which is why we do not make it available to minors. We do not knowingly collect data from anyone under 18; if you believe a minor has an account or has given us data, email support@locked-in-app.com and we will remove it.

Third-Party Services

The app relies on the services below, each with its own privacy policy:

Apple — sign-in, subscriptions, App Store
Google — sign-in
Stripe — payments and coach payouts
Amazon Web Services — hosting

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with a new date. Your continued use of the app after a change means you accept the revised policy.

Contact Us

Questions about this policy or your data:

Email: support@locked-in-app.com