Privacy Policy

1Who this policy covers

SessionProof is operated by Jake Giannopoulos, trading as SessionProof, an Australian sole trader. If you have any question about this policy or your data, contact sessionproof.app@gmail.com.

2What we collect

Everything below is collected directly inside the SessionProof app:

• Account details — the email address you sign up with.
• Client records you create — client names and any conditions or notes you choose to enter about them, so your session history stays accurate for liability purposes.
• Session records — the training sessions you log, including timestamps and the cryptographic hash chain data that makes each record tamper-evident.
• Subscription status — whether your subscription is active, trialing, or lapsed. Payment itself is handled entirely by Apple or Google; SessionProof never sees or stores your card details.

3Client health information

Any medical or health condition notes you record about a client are entered by you, for your own liability protection, and are visible only to your own account. SessionProof does not read, analyse, or share this information with anyone, including other trainers using the app.

4How your data is stored and protected

• Data is stored with Supabase, our database provider, and transmitted using encrypted (HTTPS) connections at all times.
• Row-level security ensures your account can only ever read or write your own clients and sessions, never another trainer's.
• Session records are hash-chained, meaning any attempt to alter a past record after the fact is detectable, protecting the integrity of your own proof.

5If you cancel your subscription

Cancelling never deletes your records. Every client and session you've already logged remains safely stored and fully viewable, so the proof you built stays available when you need it. A lapsed subscription only pauses your ability to log new sessions until you resubscribe.

6App Lock and lost passcodes

The app offers an optional App Lock, which encrypts your client names, conditions, and session notes with a key derived from a passcode you set, so that data cannot be read without it, even in our database. If you forget that passcode, you can reset it with your recovery key, if you created one. If you don't have it, you can start fresh. Your old records are kept in an archive, but they can only be opened again with your old passcode or recovery key. We cannot recover your passcode or read the encrypted data for you. Your login and trainer profile are never affected.

7No tracking

There's no analytics, no third-party trackers, and no advertising in SessionProof.

8Exports

When you export a backup or a PDF from inside the app, that file is created on your device and only goes wherever you choose to save or send it.

9Who we share data with

• Supabase — hosts the database that stores your account, client, and session data.
• Apple and Google — process subscription payments made through the App Store or Google Play, and share basic subscription status back to us.

We do not sell your data, and we do not share client information with any third party for marketing or advertising purposes.

10Deletion and your rights

Deleting a client inside the app removes it from your account immediately. You can also request a copy of your data, ask us to correct it, or ask for your entire account and every associated record to be permanently deleted at any time, by emailing sessionproof.app@gmail.com. We'll respond within a reasonable time.

11Children's privacy

SessionProof is intended for use by personal trainers who are adults, and is not directed at children. We do not knowingly collect information from anyone under 18.

12Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page. Continuing to use SessionProof after a change means you accept the updated policy.