Privacy policy

Last updated 11 November 2026

Who we are

Mason Fitness is an app and website for logging your training and working with fitness coaches in Malaysia. It is published by Tanuki Solutions Sdn Bhd (202101016081), a company registered in Malaysia ("we", "us"), and listed under that name on the App Store and Google Play. We are the data user responsible for your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA). This policy says what we hold about you, why, who sees it, and what you can do about it. It covers the Mason Fitness app on iPhone and Android, its Apple Watch and Wear OS watch apps, the coach dashboard, and this website.

What we hold

• Your account — email address, name, and phone number if you give one. Passwords are stored only as a one-way hash; nobody at Mason Fitness can read yours.
• Your devices — a random identifier generated when you install the app, and whether the device is an iPhone or Android phone. The identifier is not your phone's advertising or hardware ID: it cannot be used to recognise you in anybody else's app, and reinstalling produces a new one.
• Bookings — sessions you book or deliver, their times, their prices, and their cancellations.
• Training — workouts, sets, loads, reps, rest and personal records you log, routines you build or are given, and programmes you download from a coach.
• Reviews — if you review a programme you have trained, your rating and what you wrote. Reviews are public: other members see them with your first name only, and the coach can reply publicly.
• Reports — if you report a coach, who reported, what was reported and what you told us, for our staff to review.
• Nutrition — food and water you log, and any targets set for you.
• Body metrics — weight and measurements you record, each tagged with where it came from.
• Health screening — if you book with a coach, your answers to a pre-exercise questionnaire and your acceptance of their waiver.
• Coaches only — your public profile, services and prices, programmes you publish and your replies to reviews (all public), and credential documents you upload for verification, stored privately and reachable only through a short-lived signed link.
• Imported workout history — if you import an export file from Lyfta, Hevy or Strong, the workouts in it. The file itself is deleted once the import is finished or cancelled; what was imported becomes part of your training record.
• The waiting list — if you leave your email address on this website before the app opens, that address and when you left it, used only to tell you when Mason is available. Email us and we delete it.
• Messages to us — what you tell us when you email us.
• Server logs — your IP address, the request and the time, kept for security and to fix faults.

We do not collect your location, your contacts, or advertising identifiers, and the app contains no advertising or analytics tracking.

Why we use it

• To run your account, sign you in and keep it secure.
• To store and sync your training, nutrition and measurements, and show you your progress.
• To let you find a coach, book them, and share with them what you choose to share.
• To verify coaches before they can be listed or take bookings.
• To send you messages about your account and bookings, such as a password reset or a booking change. We do not send marketing email.
• To answer you when you contact us, and to keep records the law requires.
• To find and fix faults, and to stop misuse.

Your email address and a password are needed to have an account; without them we cannot provide one. Everything else - your phone number, what you log, the health and watch features, and sharing with a coach - is your choice, and the app works without it.

Photos

If you use the food diary or the body photo timeline, the photos you add are stored by us in private, encrypted storage, so they are there on any phone you sign in on. They are visible only to you. A coach sees them only while you share that category with them, and stops seeing them the moment you turn it off or leave that coach. Before a photo leaves your phone, the app removes the location it was taken at. Deleting a photo deletes the file, and erasing your account deletes all of them.

Separately, you can send one photo to one coach you have booked. That photo is visible only to that coach, until you take it back; taking it back deletes the file rather than only hiding it.

What your coach sees

Nothing, until you say so. Working with a coach does not by itself give them access to your training, your nutrition or your body metrics — each is a separate switch, each starts off, and each can be turned off again at any time from Data & privacy in the app. Turning one off takes effect immediately.

Your coach can always see the bookings you have with them. Those are as much their record as yours, and they are owed a record of work they delivered.

Apple Health and Health Connect

For heart rate, body weight and workouts, Mason does not connect to watch brands directly. If you switch it on in the app, Mason works with your phone's own health store - Apple Health on an iPhone, Health Connect on Android - and each switch starts off:

• Heart rate is read during and around a workout you run in Mason, to show your effort and estimate the energy you used. It is sent to us with that workout.
• Body weight is read from the health store so you do not have to type it, and sent to us as a body-metric entry.
• Finished workouts are written from Mason into the health store - the type, start and end, and our energy estimate.
• Other workouts' times are read, when you have allowed Mason to save workouts, only to avoid saving the same workout twice when another app has already recorded it. They stay on your phone and are not sent to us.

We never read anything else from the health store and never write anything but finished workouts. Health data is never used for advertising, never sold, never given to data brokers, and never shared with anyone you have not chosen. Turning a switch off stops it at once and keeps what already arrived; your phone's settings can also withdraw the permission at any time.

The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements. Information from Apple Health is used only to provide the features above, in line with Apple's HealthKit rules.

Counting reps with a watch

If you turn on "Count reps with my watch", the Mason app on your watch reads its motion sensors during a set to count your reps. The count goes to your phone and is saved with the set only after you confirm it; the watch sends nothing to us and writes nothing to Apple Health or Health Connect. Separately, and only if you also turn on "Help improve rep counting", the raw movement data from each counted set is uploaded from your phone, over Wi-Fi, with the number of reps you confirmed, to make counting more accurate. Coaches never see it. Turning either switch off deletes anything not yet uploaded; what was uploaded is kept while your account is open and deleted with it.

Who else sees it

• Coaches you have chosen to share with, in the categories you chose.
• Opalstack, our hosting provider, which runs the servers the data sits on.
• Cloudflare, which stores the photos you add to your food diary and body timeline, in a private, encrypted bucket that only our servers can read.
• Our email provider, which carries the messages we send you.
• Sentry, our error-reporting service, which receives a technical report when something breaks on our servers. It is set up never to receive the contents of what you sent, your cookies or who you are.
• ExerciseDB, which serves the exercise demonstration animations. Your phone or browser loads them from its servers, so it sees your device's IP address and which animation was shown - nothing about you or your training.
• Authorities, only where the law requires us to disclose something.

These providers act on our instructions and may not use your data for their own purposes. We do not sell your data, and we do not use it for advertising.

Where it is stored

Our servers, and some of the providers above, may be located outside Malaysia. When your data is transferred there, we take steps to make sure it is protected to the standard the PDPA requires.

How we protect it

Everything between the app or website and our servers is encrypted in transit. Passwords are hashed, sign-in tokens are kept in your phone's secure storage, coach documents are private files reached only through short-lived links, and staff access is limited to what the job needs. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

The website

This website uses only the cookies needed to sign coaches in to the dashboard and to keep forms secure. It uses no analytics or advertising cookies.

How long we keep it

Your account and its records stay while your account is open. Server logs are kept for a short period for security. Audit records of consequential actions — consents given and withdrawn, account changes — are kept after the underlying data is removed, because a record of who did what has to survive the deletion of what they did.

Deleting your account

You can delete your account yourself, at any time: in the app under Settings, Delete account, or for coaches in the dashboard's account menu. It closes immediately and you are signed out everywhere. Your personal data is erased 30 days later; until then you can email us to restore the account. Bookings a coach was part of, and the waiver you accepted before training, are kept with your name removed, because they are the coach's record too. Reviews you wrote are deleted. If you are a coach, your listings are taken down, and programmes clients already have stay with them under "Former coach", because they train from them. How to delete your account, even without the app.

Your rights

• Access — ask us for a copy of your data. If you work with a coach, you can also use Export my data on that coach's Data & privacy screen.
• Correction — change most of it yourself in the app, or ask us to correct anything that is wrong.
• Withdraw consent — turn off any sharing, health or watch switch at any time, or delete your account.
• Limit what we do — tell us if you want us to stop using your data for a particular purpose.

Email privacy@masonfitness.app from the address your account uses. We reply within 21 days, as the PDPA requires. If you are not satisfied with our answer, you can complain to Malaysia's Personal Data Protection Commissioner.

Children

Mason Fitness is not intended for anyone under 18, and we do not knowingly collect data from children. If you think a child has used Mason, email us and we will delete their data.

Changes

If this changes in a way that affects what we do with your data, we will tell you in the app or by email before it takes effect, rather than quietly update this page. The date at the top shows when it last changed.

Contact

Questions or requests about your data: privacy@masonfitness.app. Anything else: hello@masonfitness.app. Tanuki Solutions Sdn Bhd (202101016081), A-7-15 Business Suite, Arcoris Mont Kiara, Jalan Kiara, 50480 Kuala Lumpur, Malaysia.