Privacy Policy
Last updated: 5 November 2026
Who we are
This policy is published by Session OS ("we", "us"), the developer of the SessionOS website (session-os.uk) and the SessionOS client mobile app for Android and iOS. SessionOS is coaching software that coaches and gyms use to programme training for their clients. We are based in the United Kingdom and handle personal data under the UK GDPR and the Data Protection Act 2018.
Contact: support@session-os.uk
What we collect
- Account details: name, email address and profile information given by you or your coach.
- Training data: sessions, programmes, logged sets, check-ins, health questionnaire answers, nutrition entries, progress photos and messages between you and your coach.
- Health data from your phone (optional): only if you turn on syncing in the app and grant permission. See the Apple Health and Health Connect section below for exactly what is read.
- Strava data (optional): if you connect Strava, the activities you record there (type, date, duration, distance and similar summary data).
- Photos and camera (optional): only the photos you choose to upload as progress photos or message attachments. The app uses the system photo picker and does not read the rest of your photo library.
- Payment data: payments are processed by Stripe. We never see or store your full card details.
- Technical data: sign-in tokens and basic server logs needed to keep the service secure. The app contains no advertising or analytics SDKs.
Apple Health and Health Connect
The SessionOS app can read health data from Apple Health (iPhone) or Health Connect (Android) so your coach can see your training, recovery and nutrition alongside the programme they write for you. Syncing is optional, off until you start it, and only happens with your permission.
Health Connect data we read (Android)
| Data type | Why we read it |
|---|---|
| Exercise sessions | Show the workouts you record on your watch or other apps in your training history, so your coach sees all of your training load. |
| Steps | Daily step totals, so your coach can see your everyday activity. |
| Active calories burned | Daily active energy, used with your nutrition targets. |
| Nutrition | Daily calorie, protein, carbohydrate and fat totals written by food trackers such as MyFitnessPal, so your coach can compare them with your targets. |
On iPhone the app reads the equivalent Apple Health data (workouts, steps, heart rate, active energy, walking and running distance, and dietary energy, protein, carbohydrate and fat).
Apple Watch
The optional SessionOS Apple Watch app reads your heart rate and active calories during a workout to show them on the watch, and saves the strength workout to Apple Health when you finish. Heart rate from the watch stays on your devices. The sets you log on the watch are sent to SessionOS in the same way as sets logged on your phone.
How health data is used and shared
- It is read only, apart from the Apple Watch workout described above. We never write to Health Connect.
- It is sent securely to our servers and shown only to you and the coach (or coaching team) you train with.
- Resting heart rate (where your phone shares it) can slightly slow the muscle recovery estimate in the app when it is above your usual level. That estimate is worked out on our own servers and is never sent to an AI provider.
- It is used only to provide coaching features in SessionOS. It is never used for advertising, never sold, never used for credit or insurance decisions, and never shared with data brokers.
- It is not used to train AI models and is not sent to AI providers.
- People can only read it when needed to run the service for you (for example your coach), with your consent, or where the law requires it.
Use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements. Use of HealthKit data follows Apple's HealthKit guidelines.
Turning it off
You can stop syncing at any time. On Android open Health Connect, choose App permissions, then SessionOS, and turn access off. On iPhone open Settings, Health, Data Access & Devices, then SessionOS. Syncing stops straight away. To delete health data already synced, email us (see Deleting your data).
Legal basis
We use account and training data to provide the coaching service you signed up for (contract). Health data is special category data, and we only process it with your explicit consent, which you give in the app and can withdraw at any time as described above.
Service providers
We use a small number of providers to run SessionOS, each bound by data protection terms: Replit (hosting and database), Clerk (sign-in), Stripe (payments), our email provider (account and coaching emails), and OpenAI (helping coaches draft sessions and programmes from the training details the coach enters). Some providers may process data outside the UK; where they do, transfers are protected by UK-approved safeguards such as the International Data Transfer Agreement or adequacy regulations.
How long we keep data
- Account, training and synced health data are kept while your account is active so your coach can track progress over time.
- When you or your coach close your account, or you ask us to delete it, we delete your personal data, including synced health data, within 30 days.
- Payment records are kept for as long as UK tax law requires.
Deleting your data
You can ask for your account and all your data to be deleted at session-os.uk/delete-account, by asking your coach, or by emailing support@session-os.uk. You can also ask us to delete only your synced health data and keep the rest of your account.
Security
Data is encrypted in transit (HTTPS), stored on access-controlled servers and visible only to you and your coach. Sign-in sessions use secure tokens that expire automatically.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and withdraw consent for health data at any time. Email support@session-os.uk and we will reply within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.
Children
SessionOS is not directed at children under 13. Clients under 18 should only use it with a parent or guardian's agreement and through their coach.
Changes
If we change this policy we will update the date above, and tell you in the app or by email if the change is significant.
Contact
Session OS, support@session-os.uk