❯Privacy Policy

Last updated 18 October 2026.

OVERMAN Coaching is a training, nutrition and health tracker run by one operator from a single server in Adelaide, South Australia. This page says what it stores, where that lives, which other companies touch it and why, how long it is kept, and what you can do about it. It is written for the Australian Privacy Act 1988 and the Australian Privacy Principles, and for coaches and clients anywhere.

▍ what overman coaching stores

Your account: name, email, date of birth and 18+ confirmation, and a salted password hash (never the password itself). Coaches hold an account; a coached client usually has a profile under their coach's account, with an optional email and password login of their own.

What you or your coach log: workouts and programs, body measurements, progress photos, nutrition targets, meal plans and food logs, habits, weekly check-in answers, messages between you and your coach, supplements and stack inventory, bloodwork results, and cycle and injection records.

Apple Health and wearable data, if you turn it on in the phone app: daily steps, sleep, resting heart rate, heart rate variability, active energy, weight and body fat. The app sends daily summaries, never raw samples.

Imports: workout history you upload from Strong, Hevy or FitNotes, and bloodwork PDFs. A bloodwork PDF is read once for its results and is not kept; only the marker values, units, reference ranges and the collection date are stored.

Technical records: your sign-in sessions, a device token if you allow push notifications, your connection address for the duration of sign-in and form rate limits, and an action log (described below) that records what happened, by id, not who you are.

▍ sensitive health data

Much of what you log is sensitive personal health information, including anything you enter about medications, hormones and performance-enhancing substances. That is why OVERMAN Coaching is self-hosted on one server rather than a cloud platform, is scoped strictly to your account, and is never sold, shared for advertising, or used to profile you. You choose what to enter; you can delete any of it, or the whole account, at any time.

▍ where it lives

On one self-hosted server in Adelaide, in a local database and a photo folder on that server. There is no cloud analytics vendor and no third-party database. Traffic reaches the server through Cloudflare, which terminates the connection and passes it on; Cloudflare sees the connection in transit and keeps its own edge statistics, but stores none of your content. The web server itself keeps no access logs.

Every night the database and photos are backed up, encrypted on the server before anything leaves it, and kept for 14 days on the server and as an encrypted copy on an off-site storage account (Proton Drive) that cannot read it. Anything you delete is gone from the live system at once and from the last backup within 14 days.

▍ who else handles your data, and why

No company receives your data for its own purposes. The following act only on the operator's instructions, and only for the reason given.

Anthropic (AI features). OVERMAN Coaching has optional AI features: program generation, the weekly check-in analysis and recap, meal plan generation and adjustment, recipe parsing, bloodwork PDF import and marker descriptions. Each runs only when a coach presses that button; nothing runs in the background. The request carries the data the feature needs (training history, measurements, foods and targets, or the results portion of a lab report) and never your name, email, date of birth, address or any account or profile identifier. Before a lab report is sent, the patient details printed on it (name, date of birth, sex, Medicare and lab numbers, address, phone, referring doctor) are stripped out. Requests go to Anthropic's API under its commercial terms, which do not allow Anthropic to train on them. AI features are available to coaches, not to solo accounts, and are switched off for the demo.

Expo and Apple (push notifications). If you install the phone app and allow notifications, a message from your coach is delivered through Expo's push service and then Apple's or Google's notification service. The notification carries your device token and the first 140 characters of the coach's message, so that text passes through those services. Other pushes (rest timers, reminders) carry no personal content. You can switch notifications off on your phone at any time.

Resend (email). Password reset and email verification links are sent through the Resend mail relay. Resend receives your email address and the link; nothing else goes by email.

Stripe (coach billing). If paid coach plans are switched on, a coach who subscribes gets a Stripe customer record with their name and email. Card details go to Stripe directly and never reach the server. Clients' data is never sent to Stripe.

ntfy (coach reminders). A coach can have daily reminders pushed to a topic on ntfy.sh. Those pushes carry counts only (how many doses, how many items to reorder, how many clients are overdue), never a name, a compound or a client's detail; the detail is behind the login.

Platesmith (optional phone app). If a client links the Platesmith app with a code from their coach, Platesmith sends that client's workouts, weigh-ins and food entries into their coaching record, and the coach's program, meal plan and targets go back to the app. Platesmith has its own privacy policy for what it stores.

The operator's assistant. The operator uses a private phone assistant to run the server and their own training log. For coaching it reads one summary per client: last workout and weigh-in dates, days since activity, unread message count, check-in progress, a 7-day nutrition adherence percentage and billing status. It does not read your workouts, measurements, messages, bloodwork or any other record, and it cannot open the database. Those summaries pass through Anthropic as well. It can send a message to a client only when the operator writes it and confirms it.

▍ cookies

Functional only: a session cookie that keeps you signed in, a cookie remembering which profile is active, a language cookie if you choose a language other than English, and a marker cookie while you are in the public demo. No advertising or analytics cookies, no tracking pixels, no fingerprinting.

▍ who can see what

Your coach sees everything in your profile and can edit it; that is what coaching through OVERMAN Coaching means. Other accounts cannot see it.

A share link is your way into your own profile. Anyone holding that link can view the profile and, depending on what your coach has allowed, log workouts, submit check-ins, message the coach, edit the program and nutrition plan, import history, and change the login password. Keep the link private; your coach can revoke and reissue it.

The operator (the instance admin) can administer accounts, issue password reset links and mark emails verified, and runs the server the database sits on. They sign in like anyone else and open records only to support you or to keep the service running.

▍ the demo

The public demo creates a throwaway coach account with invented clients. It runs in a separate temporary database that is wiped when the server restarts, and every demo account is deleted 24 hours after it was created. In the demo, AI, email, push notifications, photo uploads and billing are switched off, so nothing you type there leaves the server.

▍ access requests

The "Request access" form stores what you type (name, email, phone, your note about your coaching and roster) and the connection address it came from, used only to limit abuse of the form. Requests are read by the operator, used to reply to you and set up your account, and are never sold or shared. Ask at any time and the request is deleted.

▍ the action log

The server keeps a log of actions (a sign-in, a saved workout, a deleted account) with a time, the kind of action and record ids. It holds no names or email addresses; an address that reaches it is replaced by a hash. The log is rotated by size, so it does not grow without limit, and it is used only to investigate problems and abuse.

▍ how long we keep it

Your data is kept while your account exists. Sign-in sessions expire and are removed; failed sign-in counters clear after 15 minutes; pending signups expire after 24 hours. Deleting a profile or an account removes every record, photo, session, push token and linked service connection immediately. Encrypted backups age out over 14 days.

▍ your controls

Export. A coach can export any profile from its profile page, as JSON or as a zip that includes the progress photos. A client or solo account can download the same zip from the Account page of their share link.

Delete. A coach deletes a client profile, or their whole account, from the app; both are immediate and permanent. A coached client asks their coach, who must act on the request; a solo account deletes itself from the phone app's settings.

Sessions. See your active sessions and sign out other devices from the account page. Notifications are per feature on the notifications page. AI never runs unless a coach presses the button.

You can ask to see or correct any personal information held about you, and complain to the operator and then to the Office of the Australian Information Commissioner (OAIC). If a data breach is likely to cause serious harm, affected people and the OAIC are notified as the Notifiable Data Breaches scheme requires.

▍ age

OVERMAN Coaching is for adults only. You must be 18 or older to hold an account; we record your date of birth and 18+ confirmation from signup, and do not knowingly collect data from anyone under 18.

▍ changes

This page changes when the product does, and the date at the top moves with it. Material changes are noted in the app.

▍ contact

Questions or requests: contact the instance operator. For the hosted instance at overmancoaching.com, that's the address on the account you were invited from, or the email your reset and verification mail comes from.