Privacy policy

Last updated 7 October 2026. This explains what we collect when you use Sofa to Six Pack (the app and sofatosixpack.com), why, where it's kept and what you can do about it. Short version: we only collect what the app needs to work for you, we never sell your data, and we never use it for advertising.

Who we are

Sofa to Six Pack is a UK fitness app. We are the "controller" of your personal data, which means we decide how it's used and we're responsible for it. Questions, requests or worries: email hello@sofatosixpack.com.

What we collect

• Your account: your email address, if you sign in to back up and sync your progress.
• Your profile: first name, goal, fitness level, equipment, training days, and, if you choose to give them, sex, age, height, weight and your reason for starting.
• Health and safety answers: your answers to the health check before training, and to the optional check on your relationship with food. We store the outcome (for example, "see your GP before training") so the app can keep you safe.
• Your training and progress: workouts, how they felt, the weights and reps you log, your streak, daily ticks (steps, protein), weight, waist and how you're feeling today.
• Feel checks (only if you switch them on): a one-tap rating of how you feel before and after workouts.
• Feel Good tools: how many cravings you rode out with the "Ride the craving" tool, your feel-good menu and your favourite breathing pattern.
• Food: the meals, foods and recipes you log or save. If you use the meal photo feature, the photo is sent to our AI provider to estimate what's on the plate. We don't keep the photo, and the provider is told not to store it.
• Reminders, buddies and rewards: your reminder settings and a push notification address if you turn reminders on, buddy connections you create, and rewards you redeem.
• Technical data: basic information needed to run the service securely, such as limited request logs and rate limits to prevent abuse.

Health data

Some of this is health data, which UK law treats as "special category" data needing extra protection: health check answers, weight and waist, food and eating information, and feel checks. We only process it with your explicit consent, which you give when you set up the app and, for feel checks, separately when you switch them on. You can withdraw consent at any time. Turning feel checks off in Settings deletes the ones already saved.

Why we use it, and our legal basis

• To run the app for you, such as building and adapting your plan, tracking progress and syncing devices (performing our contract with you, and your explicit consent for health data).
• To keep you safe, such as pausing training until GP clearance, or pointing you to support if check-ins stay low (your explicit consent).
• To keep the service secure and working, such as preventing abuse and fixing problems (our legitimate interests).

We don't use your data for advertising, we don't sell it, and we don't make decisions about you that have legal or similarly significant effects by automated means. The app adapts your workouts automatically, but you can always change your plan.

Where it's kept

If you don't sign in, your progress stays on your device in your browser's storage. If you sign in, it's also stored in our cloud database so it's backed up and synced across your devices.

Who we share it with

Only the service providers we need to run the app, who process data on our instructions:

• Vercel: hosts the website and app.
• Supabase: our database and sign-in provider.
• OpenAI: estimates meals from photos and suggests recipes when you use those features.
• Your browser's push service (for example Apple or Google): delivers reminders if you turn them on.
• Stripe: will handle payments when paid plans launch. We never see your full card details.

Some of these providers process data outside the UK, including in the United States. Where they do, we rely on the legal safeguards UK law requires, such as the UK International Data Transfer Addendum or the UK-US data bridge. We'd only share data otherwise if the law requires it.

How long we keep it

We keep your data while you have an account. If you ask us to delete your account, we delete your cloud data within one month, apart from anything we must keep by law. Data stored only on your device stays there until you reset the app or clear your browser storage.

Your rights

Under UK data protection law you can ask to see, correct, delete or move your data, and to restrict or object to how we use it. You can download your data any time from Settings, and withdraw consent any time. To use any other right, email hello@sofatosixpack.com. We'll reply within one month.

If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies and storage

We don't use advertising or tracking cookies. The app uses your browser's storage to save your progress and settings, and to keep you signed in. That storage is essential for the app to work.

Age

Sofa to Six Pack is for adults aged 18 and over. We don't knowingly collect data from anyone younger.

Not medical advice

Sofa to Six Pack offers general fitness and wellbeing guidance. It doesn't diagnose or treat any condition. If you're struggling, Samaritans are free on 116 123, any time.

Changes

If we change how we use your data, we'll update this page and its date, and tell you in the app if the change matters.