Privacy policy
Last updated 25 September 2026
NorCoach is an app for coaching: your coach plans your training, nutrition and check-ins in it, and you log what you do. NorCoach is run by Arvio Enterprises LLC, a company registered in the United States (“we”). This policy explains what we store, why, who else handles it, and what you can do about it.
Who sees your data
Your coach is an independent professional who uses NorCoach to coach you. Everything you enter in the app is shared with your coach, because that is what it is for. Your coach decides how to coach you with it; we provide the app and keep the data safe. Nobody else can see your data, apart from the service providers listed below, who handle it only to run the app.
What we store
- Your account: your name, email address and password (stored only in hashed form, never readable), and a profile picture if you add one.
- Health and fitness data: the check-ins you fill in (for example body weight, sleep, steps, how you’re feeling, body measurements), the training you log (sets, weights, reps, notes), your food diary and calories, and progress pictures.
- Messages: your chat with your coach, including photos, videos, voice messages and files you send, and videos of exercises your coach asks for.
- What your coach writes about you: your programme and plan, notes, goals, meeting recaps and progress reports.
- Devices: if you turn on notifications, an address for your device that lets us send them. We also keep a sign-in cookie so you stay logged in.
- Technical data: when something goes wrong, an error report (what failed, the browser or device type, and roughly when) so we can fix it.
We don’t collect your location, your contacts, or advertising identifiers.
Why we use it, and on what basis
- To provide the app and the coaching you signed up for (performance of a contract).
- Health and fitness data is a special kind of personal data. We process it only because you choose to enter it for your coaching, with your explicit consent, which you can withdraw at any time by deleting it or your account.
- To keep the app working and secure, and to fix errors (our legitimate interest).
- To send you notifications you turned on, such as a message from your coach or a reminder before a call. You can turn them off in the app or on your phone.
Service providers
These companies handle data for us, only to run the app, under contracts that require them to protect it:
- Railway: hosting, database, file storage and backups (servers in the United States and the European Union).
- Sentry: error reports.
- Apple and Google push services: delivering notifications to your device.
- Anthropic: when your coach creates a written progress report with AI, the figures for that period are sent to Anthropic’s AI model to draft it. Anthropic doesn’t use this data to train its models.
- Open Food Facts: when you search for a food or scan a barcode, the search term or barcode is looked up in this public food database. No personal data is sent.
- An email delivery service: to send account emails such as an invitation or a password reset.
International transfers
Arvio Enterprises LLC and some of our providers are in the United States. If you are in the European Union or the United Kingdom, your data is transferred there under safeguards recognised by EU law, such as the European Commission’s Standard Contractual Clauses.
How long we keep it
- For as long as you have an account.
- When you delete your account in the app, your data is deleted straight away. Copies in our nightly backups are gone within 30 days.
- Invoices your coach issued you are business records your coach must keep by law, so they stay (up to 7 years) after your account is deleted, with only your name on them.
Your rights
You can ask to see the data we hold about you, correct it, get a copy of it, have it deleted, or object to or restrict how it is used. You can delete your account and all your data yourself in the app, under Account. For anything else, write to [contact email to be added]. If you are in the EU or UK and aren’t happy with how we handle your data, you can also complain to your data protection authority (in the Netherlands, the Autoriteit Persoonsgegevens).
Security
Data is sent over encrypted connections, passwords are stored hashed, and access to your data is limited to you and your coach. No system is perfectly secure, but we work to keep yours safe and will tell you if something goes wrong.
Children
NorCoach is not meant for anyone under 16, and we don’t knowingly store data about children.
Changes
If we change this policy, we’ll update the date at the top, and tell you in the app if the change matters.
Contact
Arvio Enterprises LLC. Questions about your data: [contact email to be added].