Privacy Policy

Overview

This policy explains how we collect, use, and protect personal data when you use the Right Direction mobile application (the "App"), available on the Apple App Store and Google Play.

The App is provided by Avantra Services Ltd, a company registered in England and Wales with company number 14871429. Our registered office is Suite 1-2 Brookfield Court, Selby Road, Leeds, United Kingdom, LS25 1NB.

This policy is written to support compliance with the UK GDPR, the Data Protection Act 2018, and the privacy requirements of Apple and Google.

1. Who we are and our role

Avantra Services Ltd is the data controller responsible for the personal data described in this policy. The App is developed and operated by us for the Right Direction client and trainer experience.

If you have any questions about this policy or your data, contact us at hello@avantraservices.co.uk.

2. Data we collect

We collect and use the minimum personal data needed to provide the App, maintain account access, support trainer-client workflows, and keep fitness and nutrition records available to the correct user.

TODO: confirm the exact data categories the App collects before publishing. The list below is a starting point based on typical fitness-coaching app features and must be reviewed against what the App actually does.

• Account and contact data, including display name, email address, authentication provider IDs, role, optional avatar URL, and account timestamps.
• Profile and settings data, including measurement units, fitness goal, optional body weight, and app settings.
• Trainer-client relationship data, including active trainer-client links, display names, and client goals where needed for the trainer experience.
• Fitness activity data, including workout templates, workout assignments, completed workout logs, sets, reps, weights, duration, and progress summaries.
• Nutrition data, where the App supports food or macro logging, including entries, targets, and trainer visibility where a trainer-client link exists.
• Crash and diagnostic data, including crash reports, device and app information, and diagnostic logs, used to maintain app reliability.
• Device and app identifiers needed for authentication, app security, and normal app operation.

3. Tracking, advertising, and data we do not collect

• We do not collect payment card details.
• We do not sell personal data.
• We do not use third-party advertising.
• We do not use collected data for cross-app tracking or targeted advertising.
• We do not use IDFA-based advertising tracking.
• We do not knowingly collect personal data from children under 13.

4. Third-party services we use

TODO: list the specific third-party services the App actually relies on (for example, authentication, hosting, analytics, crash reporting, or video providers) before publishing. Do not publish this policy with services the App does not use.

• Authentication provider used for account sign-in and authentication state.
• Cloud database and storage provider used for secure app data storage.
• Crash reporting and diagnostics provider used for app reliability and troubleshooting.
• Apple App Store and Google Play as app distribution platforms.

5. Why we use your data and our legal basis

Under the UK GDPR we rely on the following legal bases:

• Performance of a contract: to create and maintain your account, authenticate you, provide the App's core functionality, and make your fitness, nutrition, and trainer-client data available to you.
• Legitimate interests: to keep the App secure, maintain app reliability, diagnose crashes, reduce failures, support trainer-client workflows, and improve the service in a way that is balanced against your rights.
• Consent: where required, for example where your device asks you to allow camera, photo library, or another permission.
• Legal obligation: where we are required by law to retain, disclose, or otherwise process data.

6. How we share data

We share personal data only where needed to provide the App, comply with law, or protect our rights and users.

• With the service providers listed in this policy where they process data for app operation.
• With Apple and Google as app platform operators and authentication or distribution providers.
• With an actively linked trainer or client where the App feature requires that visibility.
• With authorities, regulators, legal advisers, or professional advisers where required by law or necessary to protect legal rights.

7. International transfers

Some providers may process data outside the UK. Where this happens, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, standard contractual clauses, or an adequacy decision.

8. Data retention

We keep account and app data for as long as your account is active and for a reasonable period afterwards, then delete or anonymise it unless we need to keep limited information for legal, accounting, security, or dispute-resolution reasons.

You can delete your account from within the App, or contact us about access, correction, or deletion. Some records may remain in backups for a limited period before routine deletion.

9. Your rights

Under UK data protection law you have the right to access, correct, delete, restrict, or object to our processing of your data, the right to data portability, and the right to withdraw consent where processing is based on consent. You can delete your account from within the App, or contact hello@avantraservices.co.uk about access, correction, or deletion.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and secure authentication flows, to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and the regulator of any breach where legally required.

11. Health, fitness, and nutrition data

The App supports fitness, workout, and progress tracking. This information can be sensitive. The App is intended to support coaching and personal tracking and is not a medical device or a substitute for medical advice.

12. Children

The App is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it where required.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version with a revised last updated date and, where changes are significant, notify users within the App or by another appropriate method.

14. Contact

Avantra Services Ltd

Suite 1-2 Brookfield Court, Selby Road, Leeds, United Kingdom, LS25 1NB

Company number 14871429 (England and Wales)

Email: hello@avantraservices.co.uk