Privacy policy.

Zama Fitness Ltd runs this site and the member portal. We are the data controller for everything below. Write to us at hello@zamafitness.co.uk.

Your account: email address, a password (stored only as a hash by our sign-in provider) or your Google sign-in, your first name, and when you joined.

Your plan answers: sex, age, height, weight, goal, how often you train, where you train and what kit you have, injuries, exercises you love or hate, diet, allergens, how many people you shop for, budget and cooking time.

Health answers: whether a doctor has told you to limit exercise, whether you take weight-loss medication, pregnancy, and eating disorder history. On Weigh-In Day we also ask about pain, chest pain and fainting. These are special category data under UK GDPR. We only hold them with your explicit consent, which you give by ticking the box in the sign-up questions, and we use them for one thing: deciding whether your plan is safe to run and whether a coach needs to speak to you first.

What you log: morning weigh-ins, sessions and the sets, reps and weights in them, your meal swaps, and your monthly check-in answers.

Payment: your card is taken by Stripe. We never see or store card numbers. We keep your Stripe customer and subscription references, the plan you are on, and whether the last payment went through.

Emails: which emails we sent you and whether they were delivered. If you reply, we keep the reply.

Coach notes: your coach may write private notes about your plan. Those are for the coaching team and are not shown to you, but you can ask for a copy.

We do not collect your location, contacts, photos from your phone, or anything from other apps.

• Building your calorie and protein targets, your training block and your week of meals, and changing them on Weigh-In Day from your own trend.
• Letting your coach read your month and reply to you.
• Safety: a health answer can pause your plan until a coach has looked, and a coach is told the moment it happens.
• Reminders and reports by email: a welcome, Weigh-In Day reminders, your report, and your coach's review. We email you before every renewal.
• Taking payment and keeping the records the law requires.
• Answering you when you write to us.

Our legal bases are the contract with you (running your plan), your explicit consent (health answers), our legitimate interest in keeping the service safe and working, and our legal obligations (billing records). We do not sell your data, and we do not use it for advertising.

• Google Firebase holds your account and your member data, in Google's London region.
• Stripe takes your payments and holds your card details under its own policy.
• Resend sends our emails.
• Vercel hosts the site and runs the code that builds your plan.

Each of them processes data only on our instructions. Where any of them move data outside the UK, they do so under the UK's approved transfer terms. We do not share your data with anyone else unless the law requires it.

While you are a member, and for twelve months after your plan ends, so you can pick it back up with your history intact. After that we delete your account and everything you logged.

Billing records (what you paid and when, with no health data in them) are kept for six years, because HMRC requires it.

If you ask us to delete your account sooner, we do it within 30 days and keep only that billing record.

You can ask us, at any time, to:

• send you a copy of everything we hold about you,
• correct anything that is wrong (most of it you can change yourself in Settings),
• delete your account and your data,
• send your logs and weigh-ins to you in a file you can take elsewhere,
• stop using your health answers (we can only run a plan safely with them, so this means closing your account),
• stop emailing you anything that is not needed to run your plan.

Email hello@zamafitness.co.uk and we answer within a month. If you are not happy with how we handled it, you can complain to the Information Commissioner's Office at ico.org.uk.

We use no advertising or tracking cookies. The site keeps your sign-in in your browser so you stay signed in, and the portal keeps a few conveniences there too (which tab you were on, a session you were partway through). Clearing your browser storage removes them and signs you out.

If we change what we collect or who handles it, we update this page and email every member before the change takes effect. The date at the top is the last change.

See also our terms.