Privacy policy
Recreate Holdings Ltd ("Recreate", "we", "us") runs the Recreate app and coach console at app.recreateteam.com. This policy explains what personal information we collect when you use them, why we collect it, and your rights.
1. What we collect
| What | Examples | Why |
|---|---|---|
| Account details | Name, email, phone, password (stored encrypted) | To create your account and sign you in |
| Health and fitness information | Health questionnaire (PAR-Q), injuries and medical notes you share, body scans (e.g. weight, body fat, muscle mass), body measurements, progress photos | To check training is safe for you and to plan and track your programme |
| Training and nutrition logs | Workouts, sessions, check-ins, food logs, food photos, macros | To coach you and show your progress |
| Messages | Messages between you and your coach | To support you |
| Bookings and payments | Classes, PT sessions, events, memberships, what you paid and when | To provide what you booked and keep financial records |
| Documents | Agreements and forms you sign or upload | For our records and your safety |
We do not see or store your full card details. Card payments are handled by Stripe.
2. Health information
Health and body data is "special category" data under UK GDPR. We only collect it with your explicit consent, which you give when you join and fill in your health questionnaire, and we only use it to coach you safely. Only your coaches and Recreate staff can see it. You can withdraw your consent at any time by deleting your account (see section 7). We may then be unable to keep training you.
3. Our legal reasons for using your information
- Contract: to provide the coaching, classes and events you sign up for.
- Consent: for health information and progress photos.
- Legal obligation: to keep payment and tax records.
- Legitimate interests: to run and improve our service, and to keep it secure.
- Marketing (e.g. newsletters): only if you've agreed, and you can unsubscribe at any time.
4. Who we share it with
We never sell your information. We use these trusted providers to run the app, and they only process your data on our instructions:
- Supabase: app database, sign-in and file storage
- Stripe: payments
- Resend: sending emails (e.g. tickets, password resets)
Where a provider is based outside the UK, we rely on approved safeguards such as the UK International Data Transfer Addendum or the UK–US Data Bridge.
5. How long we keep it
- Account and health data: for as long as you're a member. If you delete your account, it is erased straight away.
- Recovery health forms: each form is valid for 6 months. We keep forms for 3 years after they run out, in case we need to look into an incident, then delete them automatically.
- Payment records: 6 years, as UK tax law requires. After your account is deleted they are no longer linked to your name.
- Inactive accounts: deleted after 2 years of no activity.
6. Keeping it safe
Your data is encrypted in transit. Access is limited to signed-in coaches and staff, and each member can only see their own records.
7. Your rights
You can ask us to access, correct, delete or export your data, or object to how we use it.
You can delete your account at any time inside the app, under My profile → Delete my account. This permanently removes your profile, health data, photos, logs and messages, and cancels any active membership. You can also email admin@recreateteam.com.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
8. Children
The app is not for anyone under 18.
9. Changes
If we make important changes to this policy, we'll tell you in the app or by email.