Privacy Notice

Who we are

PatientandkindLLC, trading as The Love Gym, is the data controller for the personal data described here. That means we decide why and how your data is used. Contact: support@thelovegym.com.

What we collect and why

• Account data — name, email address, login credentials. Used to create and secure your account and provide the service. Legal basis: performance of a contract.
• Training content — what you write in Recovery Training, Strength Training logs, and notes you flag for a Spotter call, plus the AI-generated plans and coaching notes produced from them. Used to deliver your training and progress. Legal basis: performance of a contract.
• Membership status — whether your membership is active, and scholarship requests. Used to give you access. Legal basis: contract.
• Support and email data — messages you send us and email delivery events (sent, bounced, complaints). Used for support and to keep email working. Legal basis: legitimate interests.
• Usage and device data — IP address, browser and device identifiers, pages viewed, error logs. Used for security, fraud prevention, and improving the product. Legal basis: legitimate interests.
• Marketing emails — if you ask for a Recovery Plan by email or opt in to updates. Legal basis: consent; you can withdraw at any time.

Your Strength Training logs and trainer dashboard are private to your account. Payment card details are collected and handled by Paddle, not by us.

Who we share it with

• Service providers / subprocessors — hosting, database and authentication, email delivery, and AI model providers that generate your plans and coaching notes. They process data only on our instructions.
• Paddle.com, our Merchant of Record, for the sale of the membership, subscription management, payments, tax compliance, invoicing, and refunds.
• Professional advisers — legal and accounting, where needed.
• Authorities — where required by law.

We do not sell your personal data. Data may be processed in the United States; where data leaves the UK/EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

How long we keep it

We keep account and training data while your account is open and for up to 12 months after you close it, so you can come back. Email and security logs are kept up to 24 months. Records required for tax and accounting are kept as long as the law requires. After that, data is deleted or anonymised.

Your rights

Depending on where you live, you can request access to your data, correction, deletion, restriction or objection to processing, portability, and withdrawal of consent at any time. Email support@thelovegym.com and we will respond within one month. If you are in the UK or EEA, you also have the right to complain to your local supervisory authority.

Security

We use appropriate technical and organisational measures — encryption in transit, access controls, and row-level database rules so members can only read their own records. No system is perfectly secure, but we treat what you write here as private.

Cookies

We use essential cookies and local storage to keep you signed in and to run checkout. We do not use advertising cookies. You can clear or block cookies in your browser, but signing in will stop working.

Changes

We will update this notice when our practices change and revise the date at the top.