1. Who we are
This Privacy Policy explains how PTX ("PTX", "we", "us", or "our") collects, uses, shares, and protects personal information when you use the PTX website, web application, and related services (together, the "Service").
For data protection purposes, PTX is the controller of personal data processed in connection with the Service. If you have questions about this policy or how we handle your data, contact us at privacy@ptx.app.
2. Scope
This policy applies to personal data we process when you visit our marketing site, create an account, use coaching features, communicate with virtual trainers, manage a subscription, or contact support.
The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18.
3. Information we collect
Account and identity
- Name or preferred name, email address, and password (stored in hashed form)
- Age confirmation and privacy/terms consent records
- Account settings such as preferred trainer and notification preferences
Onboarding and profile
- Training goals, experience level, schedule, and available equipment
- Optional information you choose to provide about injuries, limitations, or preferences
- Body metrics you choose to log (for example bodyweight)
Training and coaching activity
- Workout plans, logged sets, reps, loads, session completion, and progress history
- Messages you send to virtual trainers and AI-generated coaching responses
- Programme adaptations, proposals, and related coaching events
Billing
- Subscription status, trial dates, and plan type
- Payment details are processed by our payment provider (Stripe). We do not store full card numbers on PTX servers.
Technical and usage data
- IP address, device/browser type, approximate location derived from IP, and diagnostic logs
- Pages viewed, feature usage, and session metadata needed to operate and secure the Service
- Cookies and similar technologies as described in section 9
4. How we use your information
We use personal data to:
- Create and manage your account, authenticate you, and provide customer support
- Generate and adapt training programmes, nutrition targets, and coaching feedback
- Operate virtual trainer conversations and apply confirmed programme changes
- Process subscriptions, trials, invoices, and payment-related communications
- Maintain security, prevent abuse, debug issues, and improve reliability
- Send service messages (for example security alerts, billing notices, and product updates)
- Comply with legal obligations and enforce our Terms of Service
Where we rely on consent (for example certain optional communications or cookie categories), you can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
5. Lawful bases (UK GDPR / GDPR)
Depending on the activity, we process personal data under one or more of the following bases:
- Contract — to provide the Service you sign up for
- Legitimate interests — to secure, improve, and administer the Service in ways that do not override your rights
- Consent — where required (for example optional analytics cookies or marketing emails)
- Legal obligation — where we must retain or disclose information to comply with law
Some information you provide (such as injury notes) may be treated as health-related data. We process this only as needed to deliver safer coaching features you request, based on your explicit consent and/or the necessity of providing the Service you ask for. You can omit optional health details during onboarding.
6. AI and virtual trainers
PTX uses artificial intelligence to power virtual trainers (currently Jack, Maya, Max, and Theo) and related coaching features. Messages and relevant profile/training context may be sent to our AI providers to generate responses and structured coaching actions.
- Virtual trainers are AI systems, not human coaches reviewing every conversation in real time
- We design prompts and product controls to reduce unsafe or inappropriate advice
- Human support staff may access conversation content if you escalate an issue or report a problem
- We do not sell your coaching conversations
7. When we share information
We may share personal data with:
- Infrastructure providers — hosting, databases, and application delivery partners that process data on our instructions
- AI providers — to generate coaching responses and programme suggestions
- Payment processors — currently Stripe, for subscription billing
- Analytics providers — only if analytics is enabled for your region/account and in line with cookie preferences
- Professional advisers and authorities — where reasonably necessary for legal, security, or regulatory reasons
We do not sell your personal data. If we are involved in a merger, acquisition, or asset sale, personal data may be transferred subject to appropriate confidentiality and notice commitments.
8. International transfers
Our service providers may process data in the United Kingdom, European Economic Area, United States, or other countries. Where we transfer personal data internationally, we use appropriate safeguards such as adequacy decisions or standard contractual clauses, together with supplementary measures where required.
9. Cookies and similar technologies
We use cookies and similar technologies to:
- Keep you signed in and protect your session (strictly necessary)
- Remember preferences needed for the Service to function
- Measure product usage if analytics is enabled
You can control non-essential cookies through your browser settings and any cookie controls we present. Blocking strictly necessary cookies may prevent login or core features from working.
10. Retention
We retain personal data for as long as your account remains active and as needed to provide the Service. After you delete your account or request erasure, we delete or anonymise personal data within a reasonable period, unless we must retain certain records for legal, tax, dispute-resolution, or security purposes.
Backup systems may retain residual copies for a limited time before rotation. Billing records may be retained longer where required by financial or tax law.
11. Your rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data; to restrict or object to certain processing; to withdraw consent; and to lodge a complaint with a supervisory authority.
In the United Kingdom, you can contact the Information Commissioner's Office (ICO). In the EEA, you may contact your local data protection authority.
To exercise privacy rights, email privacy@ptx.app. We may need to verify your identity before fulfilling a request.
12. Security
We use technical and organisational measures appropriate to the risk, including encrypted transport (HTTPS), hashed passwords, access controls, and production configuration checks. No online service is completely secure; please use a strong unique password and protect your login credentials.
13. Third-party links
The Service may link to third-party sites or services. Their privacy practices are governed by their own policies, not this one.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the "Last updated" date and, for material changes, provide additional notice (for example by email or in-product message) where appropriate. Continued use of the Service after an update means you acknowledge the revised policy.
15. Contact
Privacy questions and requests: privacy@ptx.app
General support: support@ptx.app