Hello, thank you for your interest in the Good Coach applications, which include the mobile applications for Android, iOS (hereinafter referred to as "Mobile Applications") and the application available through your browser (hereinafter referred to as "Web Application"). The Mobile Apps and the Web Application are hereinafter collectively referred to as the "Good Coach Service" or simply the "Service". This privacy policy also applies to our website available at https://www.goodcoach.app (hereinafter referred to as the "Good Coach Website"). This privacy policy also applies to all related websites, software that we have made available for download (if this would indeed be the case) and other services made available by us that link to this Privacy Policy, as well as all communications with users by written or verbal means, email or telephone (hereinafter referred to as the "Services").
The Good Coach Service is provided and operated by Biokod Lab Sp. z o.o., with its registered seat at Stawy 5, Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000442955, NIP 5213640849, REGON 146429106 (hereinafter "Biokod Lab", "Good Coach", "Supplier", "we" or "us"). You can reach us regarding privacy matters at [email protected].
This Privacy Policy ("Policy") describes the information we collect on or through the Good Coach Site, how we use and disclose such information, and the steps we take to protect such information. By visiting the Good Coach Site, installing and logging into the Mobile Application, or logging into the Web Application, you agree to the privacy practices described in this Policy.
This Policy is a component of and subject to the Good Coach Terms of Service. Capitalized terms not defined in this Policy shall have the meaning given to them in the Good Coach Terms of Service.
"Personal Data" - means any information linked or linkable to a specific individual.
"Service" - means the Good Coach Services.
"Visitor" - means an individual other than a User that uses the Public Part, but does not have access to the part of the Good Coach Service that require a login.
"Public Part" - means that part of the Good Coach Service and the Good Coach Website that can be visited by both Users and Visitors without logging in.
"Restricted Part" - means that part of the Good Coach Service and the Good Coach Site that can only be visited by Users using their Login Credentials.
We collect various types of information by or through the Good Coach Service. We process personal data through the Good Coach Service because (1) it is necessary to provide the Good Coach Services in accordance with the Terms and (2) it may be necessary for the legitimate interests of the Good Coach Services, as further explained in the "How We Use the Information We Collect" section of this Policy. We may also process data with your consent by asking for it when necessary.
2.1 Information Provided by You. When you use the Good Coach Services, as a User or Visitor, you may provide, and we may collect, Personal Data. Examples of Personal Data include your name, email address or cell phone number. They also include information about workouts performed, such as time, distance, workout location as a list of coordinates, heart rate during the workout, among others. Personal Data also includes other information such as geographic area or preferences when such information is linked to personally identifiable information. You may provide Personal Data to us in various ways as part of the Good Coach Services. For example, during:
- registration for Good Coach Services,
- posting of workout plans by Coaches for Athletes,
- posting of workout plans to the Athlete's Garmin account after the Athlete has given permission for integration,
- the posting by Athletes of information related to their workouts,
- after the Athlete has given permission for integration with COROS, Garmin Connect, Polar Flow, Suunto or Strava, in the form of "fit" training files that these services send to the Good Coach Services after the Athlete performs a workout (hereinafter "Workout Files"),
- posting notes or health information,
- interact with other Users through communication features or messages or send customer service requests.
2.2 Information Collected Automatically. When a User or Visitor uses the Good Coach Service or the Good Coach Website, our servers automatically record certain technical information as part of operating and securing the Service. This information may include the IP address or other network or device identifier, the type of Internet browser and device, and the dates and times of requests to the Service. This is server-side logging carried out for security, diagnostics and the operation of the Service, not for analytics, and we do not use it to build profiles of Users. Some of this information, such as an IP address or a device or client identifier, may on its own or in combination constitute personal data under applicable law (including the GDPR), and we treat it accordingly.
We use the information we collect in a variety of ways to provide the Good Coach Services and conduct related Supplier business, including but not limited to the following:
3.1 Operational Objectives. We use the information we collect to make it available to connected Coach and Athlete users which is the essence of the Good Coach Services. In addition, it is necessary to operate and maintain the features of the Good Coach Services, as well as respond to comments and questions and provide support to Users.
3.2 Improvements. We use this information to understand and analyze usage trends and preferences of our Users and Visitors, to improve the Good Coach Services and the Good Coach Website, and to develop new products, services, features and functionality. If this purpose requires the Supplier to process data related to a Coach or Athlete, then this data will only be used in aggregated form.
3.3 Communications. We may use a Visitor's or User's email address to contact the Visitor or User (i) for administrative purposes, such as customer service, to address intellectual property infringement, privacy or defamation issues related to Personal Data posted on the Service or (ii) to update the Visitor or User on promotions and events related to products and services offered by us and third parties working with us. You have the opportunity to opt-out of receiving any promotional communications as described below under "Your Choices."
3.4 Information Stored on Your Device. We do not use cookies. We store information on Your device using browser storage technologies only where necessary to operate the Good Coach Services – to keep You signed in, to enable the Web Application to function, and to remember choices You have made Yourself, such as Your language, selected filters and view configurations. We do not use these technologies for analytics, advertising or profiling. You can read more in Section 10.
3.5 Analytics. We do not use Google Analytics, Firebase Analytics or any comparable third-party analytics service, on the Good Coach Website, in the Web Application, or in the Mobile Applications. We measure how the Good Coach Service is used on the basis of data already held in our own systems – for example the number of registered accounts, how many accounts become active, and aggregate usage of individual features. This analysis is carried out on our own infrastructure (see Section 13), does not involve transmitting data to a third-party analytics provider, and does not require storing any additional information on Your device.
Except as described in this Policy, we do not intentionally disclose Personal Data that we collect or store on the Good Coach Services to third parties without the consent of the applicable Visitor, User or Customer. We may disclose information to third parties if the Visitor, User or Customer consents, and in the following circumstances:
4.1 Information Made Available Without Limitation. Any information that a User voluntarily chooses to post in the Public Part, such as information available on a coach's business card, will be available to any Visitor or User who has access to that content.
4.2 Non-Personally Identifiable Information. We may share certain automatically collected, aggregated or otherwise non-personally identifiable information with third parties for a variety of purposes, including (i) to comply with various reporting obligations; (ii) for business or marketing purposes; or (iii) to help such parties understand the interests, habits and usage patterns of our Customers, Users and Visitors with respect to certain content, services or features available through the Good Coach Service. In addition, some features of the Good Coach Service use an external artificial-intelligence service (currently OpenAI) to generate training suggestions and analyses. Before a request is sent, we remove direct identifiers such as name, email address and account identifier, so that the data transmitted consists of training information not accompanied by identifying details. The provider does not use this data to train its models. In line with the provider's published data-handling terms, request and response data may be retained by the provider for up to 30 days for the purpose of detecting abuse of its service, after which it is deleted unless the provider is legally required to retain it. This service is listed in Section 4.6.
4.3 Law Enforcement, Legal Processes and Compliance. Supplier may disclose Personal Data or other information if required to do so by law or in the good faith belief that such action is necessary to comply with applicable law, in response to a valid court order, or to cooperate with law enforcement or other government agencies.
Supplier also reserves the right to disclose Personal Data or other information as he, in good faith, deems appropriate or necessary to (i) take steps to protect him from liability, (ii) protect him or others from unfair, improper or unlawful use or activity, (iii) defend against any third party claims or allegations, (iv) protect the security or integrity of the Good Coach Services and the Good Coach Site and any facilities or equipment used to make them available, or (v) protect Supplier's property or other rights and the property or safety of others.
4.4 Change of Ownership. Information about Users and Visitors, including Personal Data, may be disclosed and otherwise transferred to an acquirer, successor or assignee as part of an acquisition, conversion, debt financing, asset sale or similar transaction, as well as in the event of insolvency, bankruptcy or receivership, in which information is transferred to one or more third parties as one of our business assets. In such event, Users will be notified of such change.
4.5 Competition Participant Lists and Shared Race Events. The Good Coach Service allows Coaches and Athletes to create and join shared race events (competitions), which may include participants from different clubs. By default, an Athlete's identity in these shared race events is disclosed only to Users who belong to the same club as that Athlete: those Users see the Athlete's full name and profile photo. To Users outside the Athlete's club, the Athlete's identity is not disclosed at all – their name and profile photo are not shown, and their participation is filtered on our servers so that it is not made available to Users of other clubs. An Athlete may choose to give consent, as described in Section 5.3, to display their full name and profile photo to all other Users of the Good Coach Service, including Athletes and Coaches from other clubs. Providing this consent is voluntary and is not required to use the Good Coach Service. This limitation does not apply to Coaches: because Coaches act in a professional capacity when organizing and managing training and competitions, a Coach's identity remains visible to other Users of the Good Coach Service.
4.6 Service Providers (Sub-processors). To provide and operate the Good Coach Service, we rely on a limited number of third-party service providers that process data on our behalf (as sub-processors) or, for some services, as independent controllers. The main ones are:
- DigitalOcean, LLC (United States, hosting from a data center in Frankfurt, Germany) – hosting of the application servers, databases and backups;
- Google Ireland Limited (European Union), with Google LLC (United States) – delivery of push notifications to the Android application via Firebase Cloud Messaging, which processes a device registration token and the content of the notification in order to deliver notifications You have enabled;
- Apple Distribution International Limited (Ireland), with Apple Inc. (United States) – delivery of push notifications to the iOS application via the Apple Push Notification service, which processes a device token and the content of the notification in order to deliver notifications You have enabled;
- SmartBear Software (Bugsnag) (United States) – application error and performance monitoring, which may process a User's identifier and email address to attribute diagnostic events;
- Mapbox, Inc. (United States) – display of maps showing workout routes. Mapbox does not receive route coordinates: the route is drawn in Your browser from data supplied by the Good Coach Service and the coordinates are not transmitted to Mapbox. However, when a map is displayed, Your browser connects directly to Mapbox's servers to retrieve map tiles, styles, fonts and icons. Through that connection Mapbox receives Your IP address and browser and device information, and the geographic area shown on the map. Mapbox also stores an identifier on Your device and transmits it to its servers in order to count map usage for billing purposes. In respect of that data Mapbox acts as an independent controller under its own privacy policy, and not as our sub-processor. Maps can be switched off in the settings of the Good Coach Service, by an Athlete for their own account or by a Coach; where maps are disabled, no connection to Mapbox is made and no identifier is stored;
- Stripe Payments Europe, Ltd. (Ireland), with Stripe, Inc. (United States) – processing of payments and billing for Coach and Customer accounts. Stripe acts as an independent controller in respect of payment data for its own compliance, fraud-prevention and regulatory purposes, and retains transaction records for the periods its own legal obligations require, independently of the deletion of a Good Coach account;
- Smartsupp.com, s.r.o. (Czech Republic, European Union) – live chat customer support, which processes the name, email and phone number You provide when contacting support;
- Brevo (Sendinblue SAS) (France, European Union) – sending newsletters and marketing emails based on consent, which stores Your full name and email address;
- OpenAI (United States) – generation of training suggestions and analyses. Before a request is sent, direct identifiers (such as name, email address and account identifier) are removed; the provider does not use the data to train its models and may retain request and response data for up to 30 days for abuse detection (see Section 4.2).
Where a service provider is located outside the European Economic Area (currently in the United States), any transfer of personal data is carried out under appropriate safeguards pursuant to Chapter V of the GDPR, in particular the European Commission's Standard Contractual Clauses and, where available, the EU–U.S. Data Privacy Framework. We keep this list up to date and can provide further details, including each provider's transfer mechanism, on request at [email protected].
4.7 Embedded Third-Party Content. Certain parts of the Good Coach Service display map content supplied by a third-party provider (see Section 4.6). Displaying such content requires Your browser to connect directly to that provider's servers, which transmits Your IP address to that provider in the same way as if You had visited the provider's own website, and results in that provider storing an identifier on Your device as described in Section 10.2. This occurs only where map content is actually displayed, and can be prevented by disabling maps in Your account settings.
5.1 Access, Correction, Deletion. We respect your privacy rights and provide you with reasonable access to Personal Data that you may have provided in the course of using the Good Coach Services. If you wish to access or correct your Personal Data or request deletion of your information, you may contact us as described in the "How to Contact Us" section. Upon your request, we will delete or block any reference to you in our database.
You may update, correct or delete your Account information and preferences at any time by accessing the Account Settings page on the Good Coach Service. Please note that while any changes you make will be reflected in the active user databases immediately or within a reasonable time, we may retain any information you submit for backup, archiving, fraud and abuse prevention, analysis, to comply with legal obligations, or where we otherwise believe we have a legitimate reason to do so.
A User or Visitor may object to the processing of their Personal Data at any time for legitimate reasons, except where applicable law provides otherwise. If a User, Visitor or Customer believes that their privacy rights granted by applicable data protection laws have been violated, please contact our privacy contact at [email protected]. You also have the right to lodge a complaint with the competent data protection supervisory authority (in Poland, the President of the Personal Data Protection Office, UODO).
5.2 Opting Out of Email Communications. If you receive email communications from us, you may unsubscribe at any time by following the instructions in the email or by sending an email to the address provided in the "How to Contact Us" section.
Users can review and modify their settings regarding the nature and frequency of promotional communications they receive from us by accessing their Account settings on the Good Coach Service.
Please note that if you opt out of receiving communications from us or otherwise change the nature or frequency of promotional communications you receive from us, it may take up to three business days to process your request.
In addition, even after you opt out of receiving commercial messages from us, you will continue to receive administrative messages from us regarding the Good Coach Services.
5.3 Visibility in Shared Race Events. As described in Section 4.5, an Athlete's participation, full name and profile photo in shared race events (competitions) are by default disclosed only to Users who belong to the Athlete's own club, and are not made visible to Users of other clubs. If You are an Athlete, You may give consent, through Your Account settings on the Good Coach Service, to display Your full name and profile photo to all other Users of the Good Coach Service, including Athletes and Coaches from other clubs. This is a voluntary choice, and providing it is not required to use the Good Coach Services. You may withdraw this consent at any time by changing the same setting, after which Your identity will again be visible only to Users of Your own club, other than in any race events already recorded before withdrawal. Please note that this choice does not apply to Coaches, whose identity remains visible to other Users as described in Section 4.5.
The Good Coach Services may contain features or links to websites and services provided by third parties. Any information you provide to third-party sites or services is provided directly to the operators of such services and is subject to the policies of those operators, if any, governing privacy and security, even if accessed through the Good Coach Service or the Good Coach Site. We are not responsible for the content or the privacy and security policies of any third party sites or services to which links or access are provided through the Good Coach Service or the Good Coach Site. We encourage you to review the privacy and security policies of third parties before providing any information to them.
We will not share any Personal Data with third parties for their direct marketing purposes to the extent prohibited by California law. If our practices change, we will do so in accordance with applicable law and will notify you in advance.
We do not engage in interest-based advertising, which involves collecting data from various sources and platforms to predict an individual's preferences or interests and delivering to that individual, his or her computer, smartphone or tablet, advertising based on his or her assumed preferences or interests inferred from the collection of data about that individual or other individuals who may have a similar profile or similar interests.
California law requires operators of websites and online services to disclose how they respond to "Do Not Track" signals. Some browsers have built-in "Do Not Track" features. Most of these features, when enabled, send a signal or preference to the website or online service the user is visiting, indicating that the user does not want to be tracked. Because there is not yet a common understanding of how to interpret Do Not Track signals, we do not currently respond to Do Not Track signals.
We do not use cookies. The Good Coach Service stores information on Your device using browser storage technologies – local storage and, where applicable, an in-browser database – for operational purposes only.
10.1 What we store. The information we store on Your device falls into two categories:
Strictly necessary (operational) information – required to enable You to navigate the Web Application and use its functions correctly, including access to secure areas. Without it the Good Coach Services cannot be provided.
Preferences and interface configuration – information that remembers choices You have made, so that You do not have to make them again. This includes Your selected language, Your email address where You have chosen to save it, and settings You configure yourself such as selected filters and view configurations. This information is stored because You set it, is used only to present the Service the way You configured it, and cannot be used to track Your activity on other websites.
We do not store analytics, advertising or profiling information on Your device, and we do not use any third-party analytics service. Because everything we store is either strictly necessary to provide the Service or a preference You have set Yourself, we do not ask You for consent to store it.
10.2 Storage by third parties. We do not permit third parties to store information on Your device, or to access information stored on Your device, for their own advertising or profiling purposes, and we do not sell Your Personal Data. Where a third-party service provider processes technical or account identifiers in order to provide a service to us – for example application error monitoring – that provider and the purpose are identified in Section 4.6.
Where map content is displayed, the map provider identified in Sections 4.6 and 4.7 stores an identifier on Your device and transmits it to its own servers in order to count map usage for billing purposes. This is the only information stored on Your device by a third party. It is stored only when a map is actually displayed, and not at all if You disable maps in Your account settings.
10.3 Retention and deletion. Information stored using browser storage remains until deleted by You. You can delete all of it by clearing Your browser's site data or history. Please note that doing so may remove information You have saved, such as saved login details and interface preferences.
We follow generally accepted industry standards to protect the information provided to us, both during transmission and after receipt. Supplier maintains appropriate administrative, technical and physical safeguards to protect Personal Data from accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful forms of processing of Personal Data in Supplier's possession.
This includes, for example, firewalls, password protection, encryption and other access control and authentication measures. We use TLS encryption to encrypt data during transmission over the public Internet, and we use application-layer encryption to protect Personal Data.
In particular, we do not store or transmit user passwords in plain text, they are stored in the database as double hashed and salted keys. Sensitive data such as messages sent by users, training plan content, notes and health descriptions are additionally encrypted before being stored in the database. Workout files uploaded by external services are stored in a way that makes it impossible to easy associate them with a particular User.
While we make every effort to store your information securely, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee the security of information transmitted to us or stored on the Service, and you do so at your own risk. Supplier also cannot guarantee that Personal Data will not be accessed, disclosed, altered or destroyed as a result of a breach of any of our physical, technical or managerial safeguards. If you believe that your Personal Data has been compromised, you should contact us as described in the "How to Contact Us" section.
If we become aware of a personal data breach, we will act in accordance with applicable law and with our role in respect of the affected data. Where we process data as a processor on behalf of a Coach or other Customer, we will notify that Customer (the controller) without undue delay and in any event within 48 hours of becoming aware of the breach, so that the controller can meet its own notification obligations. Where we act as a controller (for example, in respect of account, billing or marketing data), we will notify the competent supervisory authority and, where required, affected individuals in accordance with applicable law.
We will retain Personal Data collected from you for as long as your account has not been deleted or as long as we need it to fulfill the purposes for which we originally collected it, unless otherwise required by law. We will retain and use information as necessary to fulfill our legal obligations, resolve disputes, and enforce our agreements as follows:
- The contents of deleted accounts are deleted at the time of deletion,
- Backups are retained for a maximum of 3 months, and data from deleted accounts is purged from backups within that period,
- Billing information is stored for a period of 6 years after it is transferred to the Supplier in accordance with Polish law.
- Server access and diagnostic logs are retained for 14 days and are then deleted.
The Good Coach Service is hosted on infrastructure provided by DigitalOcean, LLC, in a data center located in Frankfurt, Germany (European Union). Both the application servers and the databases are located in this German data center, and backups are stored within the same region.
Supplier does not own any Customer Data submitted by a Customer or User through the Good Coach Service. Only the Customer or User is authorized to access, retrieve, and direct the use of such Customer Data, except when, due to the nature of the Good Coach Service, the Customer shares such data via the Service with another person (e.g., an Athlete shares data with a Coach). Supplier is largely unaware of what Customer Data is actually stored or shared by a Customer or User on the Service and does not have direct access to such Customer Data except with Customer's consent or to the extent necessary to provide Services to Customer and its Users.
Our role under the European Union's General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter "GDPR") depends on the data in question. In relation to the training data that a Coach directs through the Service – such as workout plans, workout files, notes and health descriptions concerning Athletes – the Supplier acts as a data processor, processing that data on the documented instructions of the Coach (or other Customer), who is the controller. In that role the Supplier has, and complies with, its own direct obligations under the GDPR, including those under Article 28 (processing under a contract and engaging sub-processors), Article 29 (processing only on instruction), Article 30(2) (maintaining a record of processing activities), Article 32 (security of processing), Article 33(2) (notifying the controller of personal data breaches) and Chapter V (international transfers). At the same time, the Supplier acts as a data controller for the data whose purposes and means of processing it determines itself – in particular the account relationship, authentication, billing and payments, marketing and newsletters, customer support, application monitoring, delivery of push notifications, and the default visibility rules for shared race events described in Sections 4.5 and 5.3. Except as provided in this Privacy Policy, the Supplier shall not transfer or otherwise make available to third parties any Customer Personal Data held in connection with the provision of the Good Coach Services.
Good Coach is not responsible for the content of Personal Data contained in Customer Data or other information stored on its servers at the discretion of Customer or User, nor is Good Coach responsible for the manner in which Customer or User collects, shares, distributes or otherwise processes such information.
If You require a signed Data Processing Addendum (Auftragsverarbeitungsvertrag) under Article 28 GDPR in addition to the Terms and this Privacy Policy, our standard Data Processing Addendum, signed on behalf of Biokod Lab Sp. z o.o., is available on request at [email protected], together with the current list of sub-processors.
Protecting the privacy of children is especially important to us. An individual must be at least 16 years old to register their own account on the Good Coach Services. Where a Coach adds an Athlete under the age of 16 to the Good Coach Services, the Coach acts as the controller in respect of that Athlete's data and is responsible for obtaining any authorisation required from the holder of parental responsibility under Article 8 GDPR before doing so. If we learn that an individual under 16 has registered their own account without such authorisation, we will take reasonable steps to delete the account and the associated Personal Data. If You are a parent or guardian and become aware that Your child has an account on the Good Coach Services, You may contact us at [email protected] to request its deletion.
Content that Users post in the Public Part is not intended for sharing publicly or with friends by minors. To the extent that a minor has posted such content on the Good Coach Services, the minor has the right to remove that content using the removal options detailed in this Privacy Policy. If you have any questions regarding this topic, please contact us as indicated in the "How to Contact Us" section. Please note that while we offer the ability to remove content, removal of content may not ensure complete or comprehensive removal of that content or information.
Please visit this page periodically to be aware of any changes to this Policy, which we may update from time to time. If we modify the Privacy Policy, we will make it available through the Service and indicate the date of the most recent change, and we will comply with applicable law. Your continued use of the Good Coach Services after the effective date of the revised Policy indicates that you have read, understand and agree to the current version of the Privacy Policy.
If you have any questions or comments about this Privacy and Personal Data Policy, our practices regarding the use and disclosure of Personal Data, or your consent election, please email us at [email protected].
If you have any concerns or complaints regarding this Privacy Policy or your Personal Data, you may contact our privacy contact via email at [email protected]. The controller responsible for the Good Coach Service is Biokod Lab Sp. z o.o., Stawy 5, Warsaw, Poland (KRS 0000442955, NIP 5213640849, REGON 146429106). You also have the right to lodge a complaint with the competent supervisory authority; in Poland this is the President of the Personal Data Protection Office (UODO).
Last updated: August 14, 2026.