Your data. Your rules.

Reform Method is operated by Tom Betts trading as Reform Method ("we", "us", "our"). For privacy questions, contact us at methodreform@gmail.com.

This policy explains how we collect, use, store, and protect your personal data when you use our website, mobile applications, and coaching services (the "Service"). It is written in line with the UK Data Protection Act 2018 and the UK GDPR.

Account data: name, email address, password (stored hashed), profile photo (optional), coaching role (athlete or coach).

Onboarding & health data (ParQ): date of birth, training history, injuries, medical conditions, medications, allergies, lifestyle, sleep, stress, goals. This is special-category health data — see Section 4.

Performance data: workouts completed, exercises logged, RPE, sets/reps/loads, calories, macros, body measurements, weight, progress photos.

Mindset & wellbeing data: reflections, journal entries, stage-of-change responses, mood logs.

Device & technical data: IP address, browser/device type, time zone, app version, push-notification subscription tokens.

Payment data: when you purchase coaching or PT sessions, payments are processed by Square. We never see or store your full card number.

Deliver the coaching service: personalise your programmes, track adherence, communicate with you.

Allow your assigned coach (and only your coach) to view your performance and onboarding data so they can train you safely and effectively.

Operate the app: authenticate you, send push notifications you've opted into, prevent fraud and abuse.

Comply with our legal obligations (e.g. tax, accounting, lawful requests from regulators).

Contract — we process most of your data to deliver the coaching service you've signed up for.

Consent — we process special-category health data (your ParQ answers, medical history, body measurements, progress photos) on the basis of your explicit consent at sign-up. You can withdraw consent any time.

Legitimate interests — for analytics, security, and product improvement, where this does not override your rights.

Legal obligation — for tax, accounting and regulatory compliance.

Your coach. Only the coach assigned to you sees your roster data. Teammate coaches under the same owner may have full client access.

Service providers (processors): MongoDB Atlas (database hosting), Resend (transactional email), Twilio (SMS, if enabled), Square (payments), Emergent Labs (hosting + AI), OpenAI / Anthropic / Google (AI features — only the strings you submit are processed; no PII is shared beyond that string).

We do not sell your data. We do not share your data with advertisers.

Some of our processors operate outside the UK/EEA (e.g. the United States). Where transfers occur, we rely on the UK Addendum to the EU Standard Contractual Clauses or equivalent approved safeguards.

While your account is active, we keep all of your data.

If you close your account, we delete your personal data within 30 days, except: (a) data required for tax/accounting (kept 7 years), (b) anonymised analytics (kept indefinitely).

Progress photos are deleted immediately on account closure.

You have the right to access, correct, delete, export, or restrict processing of your data, and to object to processing. To exercise any of these, email methodreform@gmail.com. We aim to respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) — ico.org.uk.

Your password is stored hashed using bcrypt. Tokens are JWT, served only over HTTPS. Database access is restricted by IP and credentials. Progress photos are stored in object storage behind authenticated URLs.

No system is 100% secure. If we learn of a breach affecting your data, we will notify you and the ICO as required by law.

We use localStorage to keep you signed in (auth token). We use service workers to enable offline mode and push notifications. We do not use third-party advertising cookies.

Reform Method is intended for adults 18+. We do not knowingly process data from anyone under 16. If a coach onboards a minor (16–17), the parent or guardian must provide consent.

We may update this policy. We will note the new effective date below and, for material changes, notify you by email or in-app banner.