← Back to Soloffort

Privacy Policy

Last updated 31 October 2026

This Privacy Policy explains what data Soloffort ("we", "us") collects when you use soloffort.com (the "Service"), and how we use it. We are Anthony Markson, trading as Soloffort, and act as the data controller for the personal data described below.

1. What we collect

Account data. If you create an account, we (via our authentication provider, Supabase) store your email address, a securely hashed version of your password — we never see or store your password in plain text — and the language you were using the site in (English, French or Spanish), so account emails can be sent in that language.

Subscription data. If you subscribe to Premium or Coaching, we store whether your subscription is active, and your Stripe customer and subscription reference IDs, so we can keep your access in sync with your billing status. We do not collect or store your card number or other payment details — Stripe handles payment processing directly and is PCI-DSS compliant.

Workout and diet data. Your goal, level, program, any edits or swaps you make, and the sets you log (weights, reps, times and dates) are stored in your browser's local storage. If you're signed in to an account (including a free account), your program and logged sets also sync to our servers, so they follow you across devices, and we can access them in that case. When you sign out, your history is kept on the device but set aside for your account, so it isn't shown to whoever uses the device next; it comes back when you sign in again. If you never sign in, your program and logged sets stay on your device, except that we record which goal and level you picked and when you log a set (see "Usage analytics" below), and your program is sent to us if you ask us to email it to you.

Plan emails you request. If you use "Email me my plan", we receive your email address and the program on screen (days, exercises and targets), and send that program to you once through our email provider, Resend. We keep your email address, the date we last sent you a plan, and your anonymous visitor ID (see below) so we don't send the same address more than one plan email in 24 hours. This does not add you to a mailing list, and we don't send you marketing emails. The form is protected by Cloudflare Turnstile, a bot check that processes technical information about your browser and connection.

Shop launch notifications. If you tick the box on our Shop page asking to be emailed when the shop launches, we keep your email address, the exact wording you agreed to and when, the page language, and your anonymous visitor ID (see below). We use it only to send you one email when the rebuilt shop launches — not for marketing or anything else — and it is not shared with anyone except our email provider, Resend, to send that one email. The form is protected by Cloudflare Turnstile, a bot check that processes technical information about your browser and connection. You can ask us to remove you at any time before then using the contact details below; we then keep only your address, marked as removed, so it can't be signed up again, and delete it with the rest of the list after the launch.

Guide notifications (earlier form). If you used the earlier "Get the next guide first" form on our Shop page, we keep the name and email address you entered so we can tell you when the next guide is available. That form has been replaced.

Coaching check-in data. If you're a Coaching customer, the post-workout check-ins you submit (effort level, enjoyment, and any pain or comment notes you choose to add) are stored so your coach can review them. That check-in text may also be sent to our AI provider, Anthropic, which produces a short summary and flags anything that may need your coach's prompt attention — this is an assistive step only, to help your coach prioritise reviews; it never generates feedback that's sent to you directly and never changes your programme. Anthropic receives only the check-in text itself, never your name, email, or payment details. All actual coaching feedback and decisions come from your human coach.

Ask Coach messages. If you're a Premium or Coaching customer and use Ask Coach, we store the questions you send (the text and the topic you pick), your coach's replies, when each message was sent, and whether you've opened a reply, so your conversation is saved to your account. Your messages are read by your coach, Anthony Markson ("Ant"), and are not sent to any AI provider. When you send a question, we email your coach a short notice that a question is waiting (with its topic only, never your message or who you are); when your coach replies, we email you a notice to read it in the app (without the reply itself). Your conversation stays readable in your account after a subscription ends, and is deleted when you delete your account. The question box and your messages are hidden from our session recordings.

Usage analytics. To understand how people use the Service, your browser stores a random anonymous visitor ID in local storage, together with the campaign tags (such as utm_source) of the link that first brought you here. We record events against that ID on our own servers: when you visit (including whether you've visited before, which site referred you, and whether your browser identifies itself as an automated tool), generate a program, log a set (that you did, never the values), start creating an account, open the Premium or Coaching offer, start checkout, complete a purchase, or ask us to email your plan. We also record when one of these doesn't work (a sign-up, the bot check, a plan email or opening checkout) with a short reason code only, never what you typed; when the "Email me my plan" box was shown on your screen; the language the site opened in and any language you pick; and visits to the shop page. When you create an account, your anonymous visitor ID is stored with it, so we can count sign-ups against visits. When you're signed in and your workout history has synced, we also record that against your account, which links your anonymous visitor ID to your account. When you start checkout, your anonymous visitor ID, campaign tags, IP address, browser details and the Meta/TikTok cookie IDs are also stored with your checkout session at Stripe.

Your cookie choice. When you first visit, we ask whether you accept cookies for advertising measurement (Meta, TikTok) and session recordings (Microsoft Clarity). None of these load, and none of the server-side advertising events below are sent, unless you choose Accept. If you choose Reject, the Service works the same. We store your choice on your device, and you can change it at any time from "Cookie settings" at the bottom of any page; withdrawing it stops these tools from that point and clears their cookies on our site. The anonymous visitor ID used for our own usage analytics (below) is not covered by this choice.

Advertising measurement. Only if you accept cookies (see above): our app and pricing pages load the Meta (Facebook) Pixel and the TikTok Pixel, which set their own cookies and tell Meta and TikTok about page visits and actions such as generating a program or starting checkout. When you create an account, we also send that sign-up to Meta from our servers with a hashed (not readable) copy of your email address; when you complete a purchase, we send it to Meta and TikTok from our servers with a hashed copy of your email address and, where available, your IP address, browser details and their cookie IDs. This lets them measure our ads.

Session recordings. Only if you accept cookies: we use Microsoft Clarity to see how pages are used (clicks, scrolling and session recordings), which sets its own cookies. The email field in our "Email me my plan" form is masked from these recordings.

Storage on your device. Besides the analytics and advertising cookies above (only with your consent), we store your cookie choice, and use a session token (set by Supabase) that keeps you signed in, and local storage for your workout/diet data, language and the anonymous visitor ID. You can clear or block cookies and local storage in your browser settings; the free program still works without them, but it won't be remembered on your device.

Error monitoring. If the app crashes or hits an unexpected error, technical details (what went wrong, the browser/device involved) are sent to our error monitoring provider, Sentry, so we can fix bugs. If you're signed in, that report is tagged with your account email and user ID so we can investigate account-specific issues.

2. How we use your data

3. Legal basis for processing (UK GDPR)

We process account and subscription data because it's necessary to perform our contract with you (providing the Service you signed up for), and to comply with legal obligations such as tax and accounting records. We process the email address you give us for a plan email in order to send you the email you asked for. We do not use your data for marketing without your separate consent.

4. Who we share data with

We use the following processors to run the Service. Each only receives the data it needs to perform its function, and may process data outside the UK/EEA under their own standard contractual safeguards:

We do not sell your data, and do not share it with third parties for their own marketing purposes.

5. Data retention

Shop launch notification records are deleted within 30 days after the launch email has been sent. Plan-email and guide-notification records (your email address and related details above) and usage analytics records are not currently deleted automatically. You can ask us to delete any of them at any time using the contact details below.

We keep your account and subscription data, including workout history synced to your account, for as long as your account is active. You can delete your account yourself at any time from Account in the app — this cancels any active subscription and erases your account data, except where we're required to retain records (e.g. billing records) for legal or accounting purposes. You can also contact us and we'll delete it for you.

6. Your rights

Under UK GDPR, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You can access and download the data we hold about you, or delete your account entirely, yourself at any time from Account in the app — no need to wait on a request. For anything else (corrections, restricting processing, or if you'd rather we handled it), contact us at the email below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled.

7. Children

The Service is not directed at, and we do not knowingly collect data from, anyone under 16.

8. Security

We rely on our processors' security measures (including encryption in transit and access controls) to protect your data, and restrict access to what's operationally necessary. No method of storage or transmission is 100% secure, and we can't guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last updated" date above.

10. Contact

For any privacy questions or to exercise your rights, contact [email protected].