Privacy Policy

1. Who we are

Vivamo is the platform PTs and their clients use to book, pay, train and track progress together. Vivamo is the data controller for platform data; your PT is a controller of the client records they keep about you (their roster, intake and private coaching notes). Contact: privacy@vivamo.fit [placeholder address — owner to confirm].

2. What we collect

• Account: email, name, mobile number, date of birth, optional postcode/town, optional profile photo.
• Bookings & money: sessions booked, prices, fees, payment status. Card numbers never touch Vivamo — they go directly to Stripe.
• Health & fitness data (special-category data, stored because you and your PT put it here): workout logs, body weight and measurements, progress photos, food diary, macro targets, meal plans, and intake notes such as goals or injuries you share with your PT.
• Messages between you and your PT.
• Consent & audit records: when you agreed to these policies; support/admin actions on your account.

3. How we use it

To run the service: taking bookings and payments, showing your training to you and your PT, sending transactional emails (sign-in links, booking confirmations and changes, subscription notices, message notifications). We don’t sell personal data or use it for third-party advertising.

4. Who processes it for us

• Stripe — payments, refunds and PT payouts.
• Resend — transactional email delivery.
• Vercel — application hosting and file storage (profile photos; progress photos are stored privately and only served to you and your PT).
• Neon — the database.
• Anthropic — optional AI drafting: when a PT asks for a draft programme or meal plan, the intake context they provide is sent to Anthropic’s API to generate it. Vivamo stores no prompt or response bodies.

5. Who can see what

Your PT sees the training data connected to your relationship: bookings, programmes, logs, measurements, progress photos, nutrition and your messages with them. Other clients never see your data. Vivamo staff access data only for support, and sensitive admin actions are audit-logged.

6. Retention & deletion

Data is kept while your account exists. You can download everything or delete your account from your profile. Deletion removes your profile, training and nutrition content, photos and messages; records of paid bookings and subscription invoices are retained for financial/audit obligations with your name replaced by “Deleted user”. Stripe retains its own transaction records under its policies.

7. Your rights

Access and portability (the download above), rectification (edit your profile), erasure (delete your account), and complaint to the ICO. For anything you can’t do in-app — including copies of your progress-photo files — email privacy@vivamo.fit [placeholder].

8. International transfers & security

Our processors may store data in the EU/US under standard contractual safeguards [legal to verify per processor]. Access is authenticated per-request; progress photos are never publicly listed and are proxied through authenticated routes.