Privacy policy

• Account: full name, email, password (stored only as a hash we cannot read), role (learner or trainer), profile photo if you upload one, referral code, and when and which version of the Terms/Policy you agreed to.
• Trainer profile: profile photo, up to 5 showcase photos, specialties, years of experience, gender, price, bio, certifications, training place (address and coordinates). Documents and certificates you submit are used only for review.
• Schedule: a learner's free time, a trainer's open slots, bookings and their status, reviews of trainers.
• Messages between learners and trainers.
• Health and training data: training goals, logged workouts (exercises, sets, weights), food diary and meal photos, body measurements (weight, body fat %, muscle mass, visceral fat, BMR, InBody score, waist…), workout and meal plans your trainer sends you.
• Location: only when you use “Near me” or search by distance, the app sends your current coordinates to work out the distance to trainers. We do not store learners' location.
• Device and technical data: push notification token (Firebase Cloud Messaging), sign-in sessions per device, IP address and failed sign-in attempts to prevent abuse.
• Payments: when you buy a plan through VNPay we keep the transaction reference, amount, plan and status. Card and bank details are handled by VNPay; we never receive or store them.

We do not collect learners' phone numbers, contacts or ID documents; we use no advertising SDKs or advertising cookies and do not track you across other apps or websites. Photos you upload have their location (GPS) and other metadata removed.

Under the law, the following is sensitive personal data and gets a higher level of protection:

• Health data: body measurements, InBody results, food diary, workouts, training goals.
• Location data from location services when you look for trainers near you.

We only process this data when you enter, capture or allow it yourself, and only for the purpose of that feature. Health data can be seen only by you, the trainers you book and administrators (when needed to handle your request); it is never public and never used for advertising.

• At sign-up: the box “I have read and agree to the Terms of Use and Privacy Policy” is never pre-ticked; you must tick it yourself to create an account. We keep when and which version you agreed to as proof.
• Location, camera, photo library and notifications: your phone asks for each permission the first time you use the feature; you can refuse and still use other features.
• AI features with photos: the app shows a notice before a photo is sent to the AI provider.
• Silence or no response is never treated as consent. You can withdraw consent at any time (section 12); this does not affect processing lawfully done before.

AI features (calorie estimates from a photo or a typed dish, InBody sheet reading, the AI assistant, the daily tip) send the data they need to an AI provider — Google (Gemini) or Anthropic (Claude), depending on server settings — for processing:

• Meal photos: sent for analysis. Afterwards we keep only a small copy (up to 800 px) in your food diary; when you add a meal photo on a new day, photos from earlier days are deleted (dish names and calories are kept).
• InBody sheet photos: sent only to read the values and never stored. Only the values you review and save are kept.
• AI assistant questions: conversations are not stored on our servers.
• We never send your name, email or location to the AI provider. The assistant only knows your role, plan and training goal.

AI only helps with estimates; results can be wrong and do not replace medical or professional nutrition advice. You can always review and edit results before saving. We do not use AI to make automated decisions with legal effects on you.

• To run the service: finding trainers, booking, chat, plans, logs and progress tracking.
• To recommend trainers based on your free time, training goal and distance.
• To review trainer profiles before learners can see them.
• To send in-app notifications, push notifications and emails (for example verification codes, booking updates, plan expiry).
• To manage Free / Pro / Premium plans, referral rewards and payments.
• For security, fraud and abuse prevention, handling complaints, support when you contact us, and legal obligations.

We do not buy or sell personal data and do not use your data for advertising. If we want to use it for a new purpose, we will ask for your consent again.

• Public in the app: approved trainer profiles (without email), trainers' showcase photos and reviews with the reviewer's name.
• Trainers you book: your name, profile photo, bookings, messages, food diary (with photos), progress values and logged workouts — so they can coach you. Trainers can keep private notes about a learner that only they can see.
• PTMatch administrators: trainer documents for review, and the data needed to handle complaints, support or your requests.
• Processors acting for us, with only the data they need and under contract: hosting and storage, email delivery, Google Firebase Cloud Messaging (push notifications), VNPay (payments), AI providers (section 5).
• Competent authorities when required by law.

Some of our processors run servers outside Vietnam, so data may be transferred abroad:

• Google LLC (Gemini, Firebase Cloud Messaging) and Anthropic PBC (Claude): meal photos, typed dishes, InBody sheet photos, AI assistant questions, push notification tokens.

We transfer only what each feature needs, without your name, email or location, and prepare the cross-border transfer impact assessment required by law. If you do not want data transferred abroad, you can avoid the AI features and turn off push notifications; everything else keeps working.

Data travels over HTTPS. Passwords are hashed with bcrypt; sign-in tokens are kept in the phone's Keychain / Keystore and each device has its own revocable session. Private photos and files open only through signed, time-limited links. Every access is checked on the server; only staff who need it can access data.

If we discover that personal data has been leaked, lost or accessed without authorisation, we will fix it and notify the personal data protection authority and you (if you are affected) within the time required by law.

No system is perfectly secure. Possible risks include unauthorised access through cyber attacks or a leaked password or phone, messages and photos being shared onward by the recipient, and inaccurate AI results. To reduce the risk, use a strong password you do not reuse, never share your account, sign out on devices that are not yours and share with your trainer only what is needed.

Processing starts when you create an account or use the related feature, and ends when you delete your account, withdraw consent or the purpose is fulfilled. Expired email verification codes and sign-in protection records are deleted regularly. Meal photos are deleted when you add a meal photo on a new day; replaced profile photos and removed trainer gallery photos are deleted at once. When you delete your account in the app, its personal data is deleted or anonymised at once (requests by email: within 30 days), except data we must keep by law (such as payment records).

Under personal data protection law you have the right to:

• Know how your data is processed (this policy).
• Give or refuse consent, and withdraw it.
• Access, view and correct your data — mostly right in the app (profile, photo, free time, goals, logs).
• Ask for your data or your account to be deleted (section 13).
• Ask us to restrict processing, or object to processing.
• Ask for a copy of your data.
• Complain, report and sue, and claim compensation as provided by law.
• Turn off location, camera, photo library or notification permissions in your phone settings at any time.

To use these rights, email the address in section 1 from the email you signed up with. We may verify your identity first and will reply within the time required by law. Withdrawing consent or restricting processing may stop some features from working.

In the app: Account → Delete account, then confirm with your password. The account is deleted at once: you are signed out on every device; your profile, photos, messages, reviews, workout and food logs and body measurements are deleted; upcoming sessions are cancelled; a trainer profile is removed from search. Payment records are kept anonymised (no name or email) as required by law.

If you cannot sign in, email the address in section 1 from the email you signed up with, subject “Delete my PTMatch account”; we handle it within 30 days. Paid plans are not refunded when an account is deleted unless the law requires otherwise.

PTMatch is for people aged 16 and over. We do not knowingly collect data from children under 16; if we find such an account, or a parent or guardian tells us, we delete it.

When we update this policy we change the effective date at the top. If a change affects the purpose or scope of processing, we will tell you in the app and ask for your consent again.