What the app stores, why it needs it, and the things it deliberately does not do.
MyFitClub is in prototype. This notice describes what the software actually does today, and it is accurate — but it has not been through legal review, and it is not yet a contract. It will be replaced before the app is open to the public.
| Data | Why |
|---|---|
| Your name and email address | To identify your account and let your club's manager recognise a join request. |
| Your password, hashed | Stored as a scrypt hash with a random salt. The password itself is never written down anywhere, and cannot be recovered from the hash. |
| Your profile picture, if you add one | Shown to the other members of your club. Resized on your own device before it is uploaded. |
| Which exercises you completed, and when | This is the app. It drives your day, the club streak, the week's cards and the monthly view. |
| Kudos, votes and proposals | The weekly poll and the club's encouragement both need to know who did what. |
| Away notes you write | Shown to your club so a missed day reads as a reason rather than a gap. |
| A session cookie | Keeps you signed in. It is HttpOnly, so no script can read it, and the server stores only a hash of it. |
| Push subscription, if you allow notifications | The address your browser gives us to deliver a notification to. Removed the moment you turn notifications off. |
Members of your club can see your name, your picture, and whether you completed each day. They can see your away notes and the proposals you make.
They cannot see your email address or your password. Weekly standings deliberately show other members' positions without their names — the app is built so that falling behind is never put on public display.
On a private virtual machine rented from Oracle Cloud, running software we maintain ourselves.
Pictures are held in Oracle object storage. The database is backed up nightly, and backups are
encrypted in transit. Everything travels over HTTPS; myfitclub.app is on the browser
HSTS preload list, so a plain HTTP connection to it is refused before a request is even made.
Your account and your training history are kept while your account exists. If you leave a club, your membership is closed rather than erased, because the club's past days genuinely did count you and deleting that would silently rewrite their record. Your name stays attached to your own history and to the cards you earned.
Ask us to delete your account and we will remove your account, your email address, your picture and your logs.
Under UK GDPR you can ask for a copy of your data, ask for it to be corrected, ask for it to be deleted, or object to how it is used. Ask, and we will do it — there is no form and no fee.
Email privacy@myfitclub.co.uk.