BENCH

Privacy Policy

Last updated: 26 August 2026

This policy explains what personal data the Bench mobile app collects, why, who it is shared with, and what rights you have over it.

Bench is in closed alpha. The app is under active development and is distributed to a small group of invited testers. Features, and the data they involve, change frequently. This policy is updated as they do.

Who we are

Bench (“we”, “us”) operates the Bench mobile app and this website. We are the data controller for the personal data described below.

Contact: support@benchfitness.app

What we collect

Account data

Your email address and a securely hashed password, held by our authentication provider. We never see or store your password in readable form.

Profile data you enter

Display name, height, weight, date of birth, sex, training goal, available equipment, training days per week, session length, training experience, preferred split, and any injuries or specific goals you choose to describe.

Training data

Workout sessions, exercises, sets, weights, repetitions, RPE and notes; bodyweight logs; check-ins; programs and program history; and messages you send to the in-app AI coach.

Media

If you use jump testing, the app records short videos using your camera. Photos you supply to import a training program or history are read for that purpose. Camera, microphone and photo library access are requested only when you use these features, and you can refuse.

Usage data

Product analytics — screens visited, features used, errors encountered, device type and app version — used to find bugs and understand which parts of the app work.

Health data. Injuries, weight, date of birth and sex are health-related and, where they reveal information about your health, are “special category” data under UK GDPR. We process them only to build and adapt your training program, and only because you have given explicit consent by entering them. You can leave any of these fields empty.

Why we use it

We do not sell your data. We do not use it for advertising, and we do not build advertising profiles.

AI processing

The Bench coaching features are powered by Claude, a large language model provided by Anthropic. When you request a program, a session review, a program adjustment, a history import, or send a coach message, the following is transmitted to Anthropic to produce that response:

These requests are made by our servers, not from your device, and are not sent with your email address or name attached. Anthropic processes the data to return a response to us and does not use it to train its models. If you would rather no training data reached a model provider, do not use the AI features — logging works entirely without them.

Who we share it with

We use a small number of processors who handle data on our behalf under contract:

ProviderPurposeData involved
SupabaseDatabase, authentication and server hostingAll account, profile and training data
AnthropicAI coaching, program generation and reviewsTraining and profile context sent with each AI request
PostHog (EU region)Product analytics and error reportingUsage events, device and app version
AppleApp distribution and TestFlight beta deliveryHandled by Apple under its own privacy policy

We may also disclose data where we are legally required to, or to establish or defend legal claims.

International transfers

Analytics are processed in the EU. Some processors, including Anthropic, process data in the United States. Where data leaves the UK or EEA, transfers rely on the UK International Data Transfer Addendum or Standard Contractual Clauses, together with the safeguards those require.

How long we keep it

Your account and training data are kept for as long as your account exists. Analytics events are retained for up to 12 months. If you delete your account, see below for what happens.

Your data, your control

In the app, under Settings → Your Data:

During the alpha, deletion is not yet complete. In-app account deletion removes the data listed above, but your authentication record — the email address you signed up with — is currently retained, and so are some ancillary records such as usage counters. To have everything erased, email support@benchfitness.app and we will remove it manually. We are closing this gap before public release.

Your rights

Under UK GDPR you have the right to access your data, correct it, have it erased, restrict or object to how we use it, receive it in a portable format, and withdraw consent at any time. Withdrawing consent for health data means you can no longer receive tailored programming, but your logs remain yours.

To exercise any of these, email support@benchfitness.app. If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk.

Security

Data is encrypted in transit. Database access is restricted per user by row-level security, so one account cannot read the data of another. AI provider keys are held server-side and never shipped in the app. No system is perfect, and during an alpha you should not store anything in Bench that you would be seriously harmed by losing.

Children

Bench is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

Changes

We will update this page when our processing changes and revise the date at the top. Material changes will be notified in the app.