Document date: 20 October 2026
Publisher: Laissaoui Mohammed Lotfi · Algeria Privacy contact: contact@raystate.com
1. What this policy covers
This policy explains information handling in the CoachIn Android application and its showcase website. CoachIn helps gyms, studios and coaches manage members, prepaid sessions, attendance, recorded payments and training activities. References to “we” mean the publisher above. The Terms of Use describe permitted use and purchases.
Core gym records are held locally on the device. Google advertising and store services, RevenueCat and any recipient you choose when sharing information have separate online processing. Offline operation does not mean that the entire application never connects to the internet. CoachIn does not provide a publisher-hosted gym account or cloud synchronization of the member database.
2. Who is responsible for member records
The gym or coach decides what member information to enter, why it is needed, who may use the device and how long to keep records. Where applicable privacy law uses the term, that organization is responsible as controller of those records. It must provide appropriate notices and obtain permissions or another lawful basis where required, especially for photos, health-related information and children's records.
The publisher handles the support and service-provider information described below. Normal app operation does not send the local gym database to us. Members should first contact their gym about its records; we cannot retrieve or remotely erase a database held only on its device.
3. Information handled by the application
Depending on what the gym enters, the local application may contain:
- Member identifiers, names, phone numbers, date of birth, address and profile photographs.
- Height, weight, resting heart rate, cardio activity, duration, distance, heart rate, calories and optional notes.
- NFC card identifiers and member assignments, attendance timestamps, check-in methods and walk-in notes.
- Packages, session balances, expiry dates, payment amounts, payment timestamps and notes. These are payment records, not payment-card processing.
- Gym and owner names, currency and display preferences, the coach PIN, local premium status, rewarded extra-card allowances and other app settings.
Enter only information necessary for your gym. Do not put medical diagnoses, payment-card credentials or unnecessary identity-document details in notes. An NFC identifier is not the contents of a national identity document. CoachIn does not implement facial recognition or continuous member location tracking.
4. Photos, passes, permissions and shared devices
Camera and photo-selection features support member photographs; camera access also supports QR scanning. NFC access reads supported card identifiers for association and attendance. Files and the operating-system share sheet support backup and pass exports. The interval timer may use the device's speech engine and screen-wake controls; those system services have their own settings and permissions.
Photos are saved as separate local files. We do not promise stripping of source image metadata. A shared kiosk can display names, photographs, session information and check-in results to nearby people. Position and supervise the device appropriately.
A digital pass contains a QR code with the member identifier, name, phone number, date of birth and address where entered. Its Base64 encoding is readable and is not encryption. Anyone receiving a pass or photograph of its code may be able to read or copy that information. Share it only with appropriate recipients. A static pass or NFC identifier is not proof of who is presenting it.
5. Advertising and online providers
The free app uses Google Mobile Ads for banners, interstitials and optional rewarded ads. Google may process IP addresses, device/app or advertising identifiers, ad interactions and diagnostic information for delivery, measurement, fraud prevention and other purposes described in its policies. Availability and personalization depend on provider settings, device settings and applicable requirements.
CoachIn's inspected integration does not supply member profile fields, photos, card identifiers or the gym database as ad-targeting attributes. This is not a claim that Google's SDK collects no technical information. The inspected app does not expose a dedicated in-app advertising privacy-options screen. Android's privacy and advertising controls may be available; contact us for questions about privacy choices. A website notice is not a substitute for any consent mechanism required in the app.
See Google Privacy Policy and Google advertising information.
6. Purchases and Premium
Optional Premium purchases use Google Play and RevenueCat. They may process app-user identifiers, product and purchase details, transaction/purchase-token information, entitlement status and relevant device/service information to validate access, manage subscriptions and restore eligible purchases. The publisher may access purchase-service records through its provider dashboard for administration and support.
The inspected integration does not configure gym member profiles as RevenueCat customer attributes. Google Play handles payment credentials; CoachIn is not a card-payment gateway. Local premium status and settings can be stored on the device. Restoring purchases requires the appropriate store account and network access and does not recover member records.
See RevenueCat privacy information and Google Play subscription management.
7. Storage, backups and security limits
Member records use a local SQLite database; photos are separate files. The current app does not provide application-level database or backup encryption. The four-digit coach PIN is stored in local settings and may be present in a database export; it is a convenience access control, not an encryption key or a guarantee against device access. Use the operating system's device lock and restrict access to the device and exported files.
Backup tools copy the database and retain a local rotating set. The automatic check runs when the app launches, rather than as a guaranteed daily operating-system service. Database exports do not package the separate photo files. A successful export is not a guarantee of recovery. Keep appropriate external copies, restrict their recipients and verify recovery before relying on them. No protection can guarantee safety on a compromised device.
When you export through email, messaging, a drive or another file provider, the information leaves the app under your control and the destination's practices apply. Exported passes, screenshots and database files are readable copies. Deleting a local record does not remotely delete copies already shared.
8. Retention and deletion
The gym determines a suitable retention policy subject to its obligations. Deleting a member in the interface can mark records inactive rather than physically erasing every associated row. Payment history, attendance, photographs and previously created backups or exports may remain. Restoring an older database can reintroduce old information.
Uninstalling or clearing application data generally removes app-managed local storage according to the operating system, but does not remove externally saved copies, provider-held purchase records or a subscription. Ask the gym about records it controls. Contact us about support or purchase-service information we actually hold. Do not send an unredacted database, PIN or pass as proof of identity.
Support messages are retained while needed to respond, handle follow-up, disputes or applicable obligations. We do not specify an invented retention period for independently managed Google, RevenueCat or hosting records.
9. Disclosures, rights and international processing
We receive information you voluntarily send for support, including your email address and attachments. We use it to answer requests and investigate issues. Redact member information before contacting us. Providers may process service information in other countries under their own policies and applicable arrangements. Lawful disclosure obligations may concern information actually held by us; they do not give us remote access to a local gym database.
Depending on applicable law, rights may include access, correction, deletion, portability, objection, restriction, withdrawal of consent or a complaint to a competent authority. Contact the gym for member records and contact@raystate.com for publisher-held information. We may request proportionate identity/authority verification and will handle requests under applicable requirements. Requests concerning Google's independently handled information may also require Google account/privacy controls.
Where required, the basis for publisher-side processing depends on the activity: providing requested purchases/support, applicable obligations, consent where required, or permitted interests in security and service administration. The gym must separately establish the basis for its own member processing.
10. Children and training information
CoachIn is intended for gym operators and coaches. A gym may serve younger members and must follow applicable guardian-permission, privacy, safeguarding and other requirements when entering their information. The app does not establish parental permission automatically. Training estimates are not medical diagnoses. Avoid unnecessary sensitive details and explain any health-related recordkeeping to members.
11. This website
The showcase provides product information and these documents. It does not offer a remote gym login, receive the member database, process checkout or include a contact form. Its fonts, images, QR code and scripts are hosted with the site; no publisher-added analytics or advertising scripts are included. An optional browser preference remembers the light/dark theme. Language is represented by the page URL. Blocking storage does not prevent reading the website.
GitHub Pages may process IP addresses and technical request information to operate and secure hosting under the GitHub Privacy Statement. We do not claim zero hosting logs or set GitHub's retention policy. Google Play links and email links open services governed by their respective providers. Revisit this section if hosting or website services change.
12. Updates and contact
Revisions will show a new document date. Material changes will be addressed with notices or agreement where applicable requirements call for them. Translations are intended to convey the same policy; contact us if wording differs. No language version removes mandatory rights.
Laissaoui Mohammed Lotfi · Algeria contact@raystate.com