Club Coach builds you a running plan. To do that we keep a small amount of information about you. This page explains exactly what, why, and how to get rid of it.
Club Coach (clubcoach.co.uk) is the data controller for the information described here. If you have any question about your data, email us at hello@clubcoach.co.uk.
| Data | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Username | To identify your account. We don't ask for your real name or email address. | Contract: needed to provide the service you signed up for. |
| Password (hashed) | To let you sign in. We store only a salted, one-way hash (PBKDF2-SHA256), never the password itself, so we can't read it. | Contract. |
| Training answers: races, goal, schedule, experience | To build and adjust your plan. | Contract. |
| Injury information you choose to give | This is health data (special category data). It includes past injuries you mention when you sign up and, if you use injury mode, each injury you report: the area, how bad it is, and the dates you stopped and started running again. We use it only to shape your plan and rehab suggestions, for example to swap runs for cross-training or ease you back in. It is optional. | Your explicit consent. If you tell us about an injury, the app asks you to tick a box agreeing that we can store your injury details to shape your plan, and we record the date you agreed. The first time you use injury mode, you tick a box again and we record that date too. If you don't tick it, we don't save your injury details and your plan doesn't allow for them. You can withdraw consent at any time by editing your answers (untick the box or choose "None"), removing a reported injury, or deleting your account. |
| Completed sessions | To track your progress and keep the plan in step with what you've actually done. | Contract. |
| Security records: IP address and failed sign-in counts | To stop people guessing passwords. They only count for a short window and old records are cleared out automatically. Our hosting provider also keeps short-lived technical request logs. | Legitimate interests: keeping accounts secure. |
We set one cookie, cc_session. It is strictly necessary: it keeps you signed in. It contains a random token (not your username or password), can't be read by scripts on the page, and expires after 60 days without use. Because it is essential, it doesn't need a consent banner. Signing out deletes it.
The site loads fonts from Google Fonts, so your browser connects to Google's servers to fetch them, which shares your IP address with Google. No Google cookies are set by us.
The app and its database run on Cloudflare (Cloudflare Workers and D1), which acts as our data processor. Cloudflare operates data centres in the UK, the EU and the US, and your data may be stored or processed in any of them. Where data leaves the UK, Cloudflare relies on recognised safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses and the UK Extension to the EU-US Data Privacy Framework.
Data is encrypted in transit (HTTPS) and access to the database is restricted to the app.
We plan to let you connect a Garmin account. If and when that happens:
We keep your account data for as long as you have an account. When you delete your account, your username, password hash, answers, completed sessions and sign-in sessions are deleted from our live database straight away. Security records (IP addresses and failed sign-in counts) only count for 15 minutes (an hour for sign-up limits), and old records are cleared out automatically. Copies may remain in our hosting provider's encrypted backups for a short period before they are overwritten.
You can delete your account yourself at any time in the app (settings, then Delete account), confirming with your password. If you can't sign in, email hello@clubcoach.co.uk and we'll help.
Under UK data protection law you have the right to:
To use any of these rights, email hello@clubcoach.co.uk. We'll reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to sort it out first.
Club Coach is not designed for children under 13, and we don't knowingly hold accounts for them. If you think a child under 13 has an account, contact us and we'll delete it.
If we change how we use your data, we'll update this page and the date at the top. For significant changes we'll tell you in the app.
Club Coach gives general training guidance, not medical advice. If you have an injury or health condition, speak to a qualified professional.