Updated 10 Oct 2026
Data controller: the provider of Luvvfy (luvvfy.com). For anything about personal data, contact privacy@luvvfy.com — we will give further details of the data controller on request.
User accounts (coaches and trainees) — Luvvfy is responsible. What a coach records about their own trainees — the coach decides what to record; Luvvfy stores it and shows it for them as they use the app.
Coach accounts: the email you sign in with (through Google, or with an email and password — the password is stored one-way hashed, so nobody can read it), your name, username, the sports you teach, your phone (if you add it), your profile photo (if you add one) and the public-profile details you fill in. Trainee records a coach keeps: name, nickname, phone, email, labels, the coach's notes, appointments and their place, session recaps, plans, packages and the money records the coach enters, body metrics, and session photos. Trainee accounts: the email you sign in with (through Google, or with an email and password), the name you choose, your profile photo, your post-session answers, and the body metrics and photos you add. Messages you send through “Send feedback”, with: the page you were on, coach or trainee side, device type and browser, the app version, your account and sign-in email, the time, and a screenshot if you attach one.
The health screening, injuries and limitations and related details are sensitive data, used so the coach can plan training and be warned when a plan includes exercises that involve an injured area. The health form (filled in by the trainee, or by the coach when adding a trainee) cannot be saved without ticking consent, and when a coach records injuries or injured areas for a trainee with no consent on record, the app asks the coach once to confirm the trainee has agreed. Goals, body measurements and the coach's notes are recorded by the coach as part of coaching. What a trainee fills in for one coach is not visible to any other coach.
To provide the service you signed up for (contract): the schedule, remaining sessions, session recaps and the trainee's pages. Health data: on the trainee's explicit consent. Feedback messages: to fix problems, improve Luvvfy and reply to you by email. We do not sell data and do not use it for advertising.
A coach sees only their own trainees; coaches are kept apart by the database's access rules. A connected trainee sees the bookings, plans, packages and session recaps their coach records — never the coach's private notes. The coach sees the trainee's post-session answers, the health details they fill in for that coach, the photos they add to sessions, and a connected trainee's profile photo. Body measurements a trainee logs themselves are visible only to the trainee. A coach's public profile (luvvfy.com/c/…) exists only if the coach turns it on, and shows totals — never a trainee's name or details. What a public profile already shows can also be read by AI apps (such as Claude or ChatGPT) through Luvvfy's connector (luvvfy.com/mcp) — only what that page shows, never a phone number, an email or anything about trainees, and nothing once the coach closes the profile. A session-summary link a coach copies can be opened by anyone who has it, without signing in; it shows the date and time, the coach's name and sport, the trainee's name (the name they chose in Luvvfy, or the name the coach recorded if they have no account), focus, plan and exercise names, the effort the coach recorded (except “too hard”, which this link never shows), the coach's message and the photos the coach added — never the coach's nickname for the trainee — and the coach can revoke it.
A coach can choose to connect an AI app to their own account — for now only Claude, ChatGPT and apps on the coach's own computer. When the coach allows it, the coach instructs Luvvfy to send that app the following when it asks: the schedule (dates, times, states, trainee names, plan and package names), working hours and free time, the list of trainees and their labels, packages and sessions left, unpaid amounts, the coach's plan library, and training history (exercises done and skipped, the intensity the coach recorded, the trainee's own effort answer and the stars the trainee gave). Never sent: health information, the coach's private notes, anything trainees wrote, phone numbers and emails, appointment places, and photos. If the coach lets it manage appointments, the app can book, move and cancel appointments that are not yet checked in — every time it shows the coach a summary to confirm first, and the appointment records which app made the change. It can't delete anything else or touch money. When a session's plan conflicts with a limitation on the trainee's form, the app is told only that there is a warning, never what it is. What is sent is processed by that app's provider (such as Anthropic or OpenAI) under its own terms, possibly outside Thailand. When allowing it, the coach confirms they have the right to share their trainees' data with that app. The coach can turn appointment management off, or disconnect, any time in Settings › Connected apps, with effect from that moment. We keep a log of which tool an app called, when and how many rows it returned (never what was sent) for 90 days.
Supabase — database, sign-in and photo storage DigitalOcean — the server that runs the app Resend — the 6-digit codes we email when you sign up and when you forget your password, and email to the Luvvfy team: feedback messages and alerts when something breaks (an alert says what broke and on which page, with email addresses, link codes and keys removed before it is sent) Google — Sign in with Google Stripe — when payments for the service open
The app's data is stored in data centres in Singapore, which is a transfer outside Thailand. Some providers (such as Google and Resend) may process data outside Thailand.
For as long as the account is active. When a trainee asks us to delete: we delete or de-identify the personal parts (name, phone, email, profile photo, every session photo — the ones the trainee added and the ones the coach added — what the trainee wrote about themselves, and what the coach wrote about them — notes, appointment places and typed reasons); the training records and the money records the coach kept remain, de-identified, as the coach's teaching and accounting records. Daily database backups are kept for 7 days; photos have nightly copies kept for 14 nights, which the server's weekly backups hold for a further 4 weeks — so deleted data can remain in a backup until it expires.
You can ask to see and get a copy of your data, correct it, delete it, withdraw consent (for example for health data), object to how it is used, and receive it in a reusable format. Send requests to privacy@luvvfy.com — a trainee can write directly, without going through their coach. For now there is no button in the app for a copy or export of your data, withdrawing consent, or deleting a coach account: we handle these by email at privacy@luvvfy.com, and we ask you to write from the email of that account so we know it is yours. If you believe we have handled your data wrongly, you can complain to the Personal Data Protection Committee (PDPC).
The app sets only the cookies it needs: sign-in, your chosen language, which side you are using (coach or trainee), and short-lived cookies while you sign in. No advertising or tracking cookies. Your browser may keep small display preferences on your device (such as your schedule view), which are not sent to us.
Data is encrypted in transit and at rest. The service runs on SOC 2 Type II–audited infrastructure from Supabase (on AWS) and DigitalOcean. Each coach can reach only their own data, and we do not sell data.
For anything about personal data: privacy@luvvfy.com For anything else: hello@luvvfy.com