Privacy Policy
What PlanFlow stores
PlanFlow Trainer stores the information a trainer enters to run their business: client names and optional contact details, goals, injury and restriction notes, training packages, scheduled sessions, and logged sets. Data is stored in a managed database with row-level isolation — each trainer can only ever read and write their own records.
How the AI advisor uses data
The AI advisor is powered by a third-party AI service. Before any request leaves PlanFlow:
- Client names are replaced with anonymous placeholder tokens.
- Phone numbers and email addresses are replaced with placeholder tokens.
- Exact dates are rewritten as relative time ("3 days ago").
- A final automated check inspects the outgoing request; if anything identifiable remains, the request is blocked rather than sent.
Placeholders are translated back only inside PlanFlow, for the trainer's own screen. The AI service never receives the key to reverse them, and the stored conversation log keeps only the anonymized form.
Client AI consent
Each client decides whether the AI may see their first name alongside their training data. Clients who decline — or who haven't been asked yet — appear to the AI only as an anonymous label (for example, "Client C-4"). The server independently enforces this boundary and blocks any request that would cross it. Every consent decision is recorded in an append-only log with a timestamp and the exact wording version shown; history is never edited or deleted.
Third parties
PlanFlow runs on managed hosting and database infrastructure, and the AI advisor uses a third-party AI model provider. Anonymized training context (as described above) is the only client-related data shared with the AI provider. PlanFlow does not sell data, and does not share it for advertising.
Your data, your export
Trainers can export their complete data as JSON from Settings at any time, and can archive or remove client records from within the app.
Contact
Questions about this policy: support@planflowai.com
This document is a working draft and is pending review by legal counsel. The structure of PlanFlow's privacy protections described here (anonymization before AI calls, consent-gated identity, append-only consent records) is implemented in the product today.