Privacy Policy
Effective date: July 8, 2026
This Privacy Policy explains how Seven Portal (“Seven Portal,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects your personal information when you use the Seven Portal mobile application (the “App”), our websites at sevenportal.app and coach.sevenportal.app, and related services (together, the “Service”).
Seven Portal is the data controller responsible for your personal information. If you have any questions about this policy or how we handle your data, contact us at privacy@sevenportal.app.
By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy. Where we rely on your consent to process certain data (such as health data), we will ask for that consent separately and you may withdraw it at any time.
1. Who This Policy Applies To
This policy applies to all users of the Service, including members who use the App, coaches who use our coach app and web portal, and visitors to our websites. The Service is intended only for individuals aged 18 or older. We do not knowingly collect information from anyone under 18 — see “Children’s Privacy” below.
2. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- First and last name
- Date of birth
- Sex
- A password, which is stored only in hashed form by our authentication provider — we never see or store your plain password
If you sign in with Google or with Apple, we receive your name and email address from that provider to create or access your account. We do not receive your Google or Apple password. If you use Sign in with Apple’s “Hide My Email” feature, we receive only a relay email address.
Profile and Goals
During onboarding and in your profile you may provide: height, current weight, activity level, fitness goal, training experience, training preference, days available to train, injuries or limitations, and your calorie and macronutrient targets.
Health and Fitness Data (Sensitive Data)
To provide personalized coaching and track your progress, and only with your consent, we collect health and fitness information, which may include:
- Body metrics: weight, body fat percentage, muscle mass, and circumference measurements (waist, chest, arms, hips, thighs, calves)
- Fitness data: workout history, exercises, sets, reps, weights, workout duration, and program enrollment
- Nutrition data: food diary entries, calorie targets, and macronutrient targets
- Progress photos: photos you upload to track your physical progress
- Bloodwork: lab result files (PDF or image) you choose to upload for your coach to review
- Menstrual cycle data: if you opt in, your last period start date and cycle length
- Check-in data: subjective wellness ratings (such as energy, focus, stress, soreness, and hunger) you submit to your coach
This information is “special category” (sensitive) data under data-protection law. We process it only on the basis of your explicit consent and only to provide the Service — see “Legal Bases” and “Sensitive Health Data” below.
Data From Apple Health and Google Health Connect
If you connect Apple Health (iOS) or Google Health Connect (Android), and only after you grant permission on your device, the App reads selected data so it can be displayed and used to inform your coaching. This may include steps, active energy, resting heart rate, sleep, weight, and body-fat percentage. This integration is read-only. You can revoke access at any time in your device’s Health settings.
Communications
Messages you send to and receive from your coach, and messages exchanged with the Seven Portal team (“seven team” direct messages), are stored to maintain your conversation history. If you contact us by email or through our contact form, we keep that correspondence to respond to and manage your request.
Payment Information
App subscriptions are billed by the Apple App Store or Google Play. When you subscribe, you provide your payment details directly to Apple or Google — we do not receive or store your card number. We receive limited billing information from them, such as your subscription status, plan, and the result of the payment. Apple’s and Google’s handling of your data is governed by their own privacy policies.
Personalized (custom) programs are paid for directly to your coach, outside the app store. We do not process or store the payment details for a custom program.
Device, Technical, and Usage Data
We automatically collect:
- Device type, operating system, and version
- App version
- Crash reports and error logs (via Sentry) to diagnose problems and improve stability
- A push notification token (via OneSignal) if you enable notifications, so we can deliver them to your device
We do not collect your precise location, contacts, or call logs.
Website Data
When you visit our websites, our hosting and security providers may process technical data such as your IP address and browser type to deliver and protect the site. Our contact form collects the name, email, and message you submit, and uses Cloudflare Turnstile to help block automated abuse. We do not use advertising or cross-site tracking cookies.
3. How We Use Your Information
We use your information to:
- Create, authenticate, and manage your account
- Provide personalized coaching through our platform
- Enable your coach to build and adjust your training and nutrition programs
- Track your fitness progress over time
- Display your food diary and calorie/macro tracking
- Facilitate in-app messaging between you, your coach, and us
- Process your app subscription through the Apple App Store or Google Play (custom programs are paid directly to your coach)
- Send service-related and account notifications
- Provide customer support and respond to your requests and feedback
- Diagnose technical issues, monitor security, prevent fraud and abuse, and improve the Service
- Comply with legal obligations and enforce our Terms
4. Legal Bases for Processing
Where data-protection law (such as the EU/UK GDPR) applies, we rely on the following legal bases:
- Performance of a contract — to create your account and provide the Service you have signed up for, including coaching and payments.
- Consent — to process your health and fitness data, to connect Apple Health / Google Health Connect, to send push notifications, and for any optional features you opt into. You may withdraw consent at any time.
- Legitimate interests — to secure the Service, prevent fraud and abuse, diagnose crashes, and improve our product, where these interests are not overridden by your rights.
- Legal obligation — to keep records required by law (for example, tax and accounting records held through the app stores) and to respond to lawful requests.
5. Sensitive Health Data
Your health and fitness data (including body metrics, bloodwork, progress photos, menstrual cycle data, and wellness check-ins) is sensitive. We process it only:
- with your explicit consent;
- to provide the coaching and tracking features you have requested; and
- by sharing it only with the coach you are working with.
We do not use your health data for advertising or marketing, we do not sell it, and we do not use it to make automated decisions that produce legal or similarly significant effects about you. You can withdraw consent by stopping use of the relevant feature or deleting your account.
6. How We Share Your Information
With Your Coach
When you are enrolled with a coach (through a personalized program or a referral/invite code), that coach can see:
- Your profile information (such as name, age, goals, and experience level)
- Your body metrics, workout history, food diary, bloodwork, progress photos, and check-ins
- Messages you exchange with them
Coaches can only see data from members they are actively coaching. They cannot access data from members they do not coach. Coaches are independent providers and are contractually required to keep your data confidential and use it only to coach you.
With Service Providers (Sub-processors)
We share data with trusted providers who process it on our behalf to operate the Service:
- Supabase — database, authentication, and file storage (your account, app data, and uploaded files)
- Apple App Store / Google Play — subscription billing, tax, and fraud prevention (custom programs are paid directly to your coach, not through us)
- OneSignal — delivery of push notifications (device push tokens)
- Sentry — crash and error reporting (device and error details; configured to scrub personal data)
- Resend — sending transactional and account emails
- FatSecret — food and nutrition database lookups (your search query is sent through our server; no account or health data is shared)
- Cloudflare — DNS, website security, and bot protection (Turnstile)
- Vercel — hosting for our websites and coach portal
- Google and Apple — optional sign-in, and Apple Health / Google Health Connect integrations
These providers are permitted to use your data only to provide their services to us and are bound by confidentiality and data-protection obligations.
For Legal and Safety Reasons
We may disclose information if required by law, regulation, legal process, or governmental request, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Seven Portal, our users, or the public.
Business Transfers
If Seven Portal is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal data.
We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties for marketing or advertising, and we do not display ads in the App.
7. International Data Transfers
We and our service providers may process and store your information in countries other than the one in which you live, including the United States and the European Union. Where we transfer personal data across borders, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) or another lawful transfer mechanism. By using the Service, you understand that your information may be processed in these locations.
8. Apple Health and Google Health Connect
Where the App accesses data from Apple Health (HealthKit) or Google Health Connect:
- We access it only after you grant permission, and only the data types needed for the feature.
- We use this data solely to provide health and fitness features to you.
- We do not use Apple Health or Google Health Connect data for advertising, marketing, or data-mining, and we do not sell it.
- We do not share it with third parties except as needed to operate the Service (for example, secure storage), and never for their own purposes.
9. Data Storage and Security
We take reasonable technical and organizational measures to protect your information, including:
- Encryption of data in transit over HTTPS/TLS
- Storage of authentication tokens in your device’s secure keychain (iOS Keychain / Android encrypted storage)
- Row-level security policies so each user can access only their own data
- Private storage for uploaded files (photos, bloodwork), accessible only through short-lived signed URLs
- Access controls limiting who can reach production systems
No method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee absolute security. If we become aware of a personal-data breach that affects you, we will notify you and the relevant authorities as required by law.
10. Data Retention
We retain your personal data for as long as your account is active and as needed to provide the Service. When you delete your account:
- Your personal data is permanently deleted, including your profile, food diary, workout history, metrics, bloodwork, progress photos, check-ins, and messages
- Uploaded files are removed from storage
- This action is irreversible
Some records may be retained for longer where required by law — for example, transaction and tax records held through the app stores, and limited logs kept for security and fraud prevention. Backups are purged on a rolling schedule. You can delete your account at any time from the Profile section of the App.
11. Your Privacy Rights
Depending on where you live, you may have some or all of the following rights regarding your personal data:
- Access — view your data in the App, or request a copy
- Rectification — correct inaccurate data, editable in your Profile
- Erasure— delete your account and associated data from Profile > Account
- Portability— download a copy of your data using the “Download my data” option in Profile > Account
- Restriction and objection — ask us to limit or stop certain processing
- Withdraw consent — withdraw consent for health-data processing or other consent-based features at any time, without affecting processing already carried out
To exercise any of these rights, use the in-app tools above or contact us at privacy@sevenportal.app. We will respond within the timeframe required by applicable law. If you are in the EU/UK and believe we have not handled your data properly, you have the right to lodge a complaint with your local data-protection supervisory authority.
12. California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we collect, to access and delete it, to correct it, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law. To exercise your rights, contact us at privacy@sevenportal.app.
13. Children's Privacy
The Service is intended only for individuals aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from someone under 18, we will delete the account and associated data promptly. If you believe a minor has provided us with personal data, contact us at privacy@sevenportal.app.
14. Notifications and Communications
We send service-related messages (such as account, security, and coaching notifications) that are necessary to operate the Service. If you enable push notifications, you can turn them off at any time in your device settings. Where we send any optional or promotional email, you can opt out using the unsubscribe link or by contacting us.
15. Third-Party Links and Services
The Service may link to third-party websites or services (for example, the subscription checkout operated by the Apple App Store or Google Play). We are not responsible for the privacy practices of third parties. We encourage you to read their privacy policies before providing them with information.
16. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the “Effective date” at the top of this page, and for material changes we will provide additional notice where required. We encourage you to review this policy periodically.
17. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
Seven Portal