OSMCoach Mohamed Osama
Privacy Policy
OSM is a personal coaching service run by Mohamed Osama. You give us information so that a coach can write you a training and nutrition plan and follow your progress. That is the only reason we hold it.
The short version. We collect what your coach needs to program for you and nothing else. We do not advertise, we do not track you across other apps or websites, we do not use analytics or advertising SDKs, and we never sell or share your data with data brokers. Your photos and measurements are visible to you and your coach — not to other clients.
Who we are
The data controller is Mohamed Osama, trading as OSM. You can reach us at axissolutions001@gmail.com. We operate from Egypt and our business timezone is Africa/Cairo.
What we collect
Information you give us
- Account details — first and last name, email address, and optionally a phone number. Your password is never stored; only a cryptographic hash of it is.
- Health and fitness information — sex, age or date of birth, height, weight, waist measurement, your training goal, where and how often you can train, equipment you have, injuries or medical considerations you choose to tell us about, food allergies and dislikes, and your training history. From height and weight we calculate your BMI and BMR.
- Ongoing training data — your rep numbers, weekly check-in answers, workout and meal completion, and free-text notes to your coach.
- Photos and videos — a profile picture, optional starting and progress photos, and any video you submit for a challenge or competition.
Information created by using the service
- Account identifiers — an internal account ID that links your records together.
- A device notification token — if you allow notifications, so we can send reminders to that device. It identifies the device, not you personally, and is used for nothing else.
- Activity records — sign-in times and a log of significant actions on your account, kept for security and support.
- Points, badges, levels and streaks — derived from what you report.
Payment information
When you pay for a membership, you upload a screenshot or receipt as proof, which your coach reviews to activate your membership. We never see or store your card number, bank credentials, or wallet PIN — only the proof image you choose to upload. If that image happens to show an account number, it is stored privately and visible only to your coach.
How your information is used
| What | Why |
|---|---|
| Health & fitness data | So your coach can write and adjust your training and nutrition plan, and so the app can place you at the right level. |
| Photos & videos | So your coach can assess form and progress, and so you can see your own change over time. |
| Name & email | To identify your account, sign you in, and contact you about your membership. |
| Phone number | Optional. So your coach can reach you if email fails. |
| Device token | To deliver reminders and notifications you have opted into. |
| Activity records | Security, fraud prevention, and answering your support requests. |
We do not use any of this for advertising, profiling for marketing, or automated decisions with legal effects. Where the law requires a legal basis, ours is the performance of our coaching agreement with you, and your explicit consent for health data and photographs — which you can withdraw at any time.
Who can see your data
Your coach can see everything you submit. Other clients cannot. Progress photos, check-in answers, measurements and competition videos are private to you and your coach. The only thing other clients can see is your display name and profile picture on the challenge leaderboard — and only if you take part.
Service providers
We use a small number of providers who process data strictly on our instructions and are not permitted to use it for their own purposes:
- Cloudflare R2 — stores photos and videos in a private bucket. Files are not publicly accessible; the app fetches them through short-lived signed links.
- Google Firebase Cloud Messaging — delivers push notifications to your device. It receives the device token and the notification text, not your health data.
- Our hosting provider — runs the servers and database in Europe.
We will also disclose information if we are legally required to. We do not sell your data, we do not share it with advertisers or data brokers, and there is no tracking as Apple defines it — so the apps do not ask for tracking permission.
Where data is stored and for how long
Data is held on servers in Europe and on Cloudflare's storage network. We keep your information while your account is open. If you close your account or ask us to delete it, we remove your personal data and media within 30 days, apart from the minimum records we must keep for accounting and tax, which are retained separately and not used for any other purpose.
Security
- All traffic between the apps and our servers is encrypted with TLS.
- Passwords are stored only as salted hashes, never in readable form.
- Media lives in a private bucket and is reachable only through expiring signed links.
- Repeated failed sign-in attempts temporarily lock an account.
No system is perfectly secure, but if a breach ever affected your data we would tell you and the relevant authority without undue delay.
Your rights
You can ask us to:
- Give you a copy of the data we hold about you;
- Correct anything inaccurate;
- Delete your account and everything in it;
- Stop sending you notifications, which you can also do in your device settings;
- Withdraw your consent to us holding your health data and photographs — note that we cannot continue coaching you without it.
To delete your account, email axissolutions001@gmail.com from the address on your account with the subject "Delete my account". We will confirm and complete it within 30 days. You do not need to give a reason.
You can also delete individual progress photos yourself, at any time, from the progress screen in the app.
Children
OSM is for adults. You must confirm you are 18 or over to create an account, and we do not knowingly collect data from anyone younger. If you believe a minor has an account, contact us and we will remove it.
Changes to this policy
If we change how we handle your data in any way that matters, we will update this page and ask you to accept the new version the next time you sign in. The date at the top always reflects the current version.
Contact
Questions, requests, or complaints: axissolutions001@gmail.com. We aim to reply within two business days.