Privacy policy

Last updated October 20, 2026

Short version: what you put in Turf is stored in your account, only your login can open it, and we never sell anyone's information.

Your Turf data

Everything you enter in the Turf app (clients, prospects, notes, tasks, plans and supplement programs) is stored in your account on Supabase, our database provider, on servers in the United States, and a copy is kept in your browser so Turf works offline. Database rules make sure only your login can read or change it; other Turf members can't see it, unless you join a gym and agree to let its managers see your numbers or your board (see Gyms and teams below). As the people who run Turf, we can technically access the database, and we only look at your data if you ask us to help with a problem or the law requires it. If you used Turf before accounts existed, the app asks before moving the data on your device into your account.

What we collect

• When you create an account: your email address and your password, stored scrambled (we can't see it). Handled by Supabase, which hosts Turf's accounts.
• When you join the waitlist: your name, email and the answers you choose to give. Saved in our database (Supabase).
• When you subscribe: your name, email and billing details, handled by Stripe. We see your name, email, subscription status and payment history, never your full card number.
• If you're on a gym's team: a monthly summary of your numbers (projected pay, sales, sessions, client and prospect counts, late follow-ups), which your gym's managers can see. It never includes client names or notes.
• When you email us: whatever you send.

How we use it

To run your subscription, send receipts and important account notices, answer your questions, and occasionally tell you about new features. You can ask us to stop product emails at any time.

Who we share it with

Only the services that run Turf: Supabase (accounts, app data and waitlist), Stripe (payments), Resend (sends Turf's emails, like password resets and invites), Cloudflare (website hosting) and Google Fonts (the site's typefaces, which receives your IP address when fonts load). We don't sell or rent personal information, and we don't use advertising trackers.

Gyms and teams

If you join a gym on Turf, you see the gym's settings before you agree. With "numbers only", managers see your monthly summary above and never your clients. With "whole board", managers can also open your clients, notes and plans to coach you, read-only, and only if you agreed to it. When you leave a gym, its managers stop seeing anything of yours. If the gym's setting is that it keeps the book and you agreed, your clients and their follow-up history move to another trainer at that gym.

Your choices

You can ask to see, correct or delete the information we hold about you by emailing . To erase your Turf data, use Settings → Danger zone → Erase everything; it's removed from your account and this device. To delete your account and everything in it, use Settings → Danger zone → Delete my account, which also cancels your subscription.

Children

Turf is for working fitness professionals and isn't meant for anyone under 18.

Changes

If we change this policy in a way that matters, we'll tell you before it takes effect. Turf is run by .