Effective date: October 10, 2026

Who we are

Ultimate You Fitness is a personal training business owned and operated by Grant Denney, serving Carmel, Indianapolis, Westfield, Fishers and Noblesville, Indiana. Our website is https://ultimateyoufitness.com. You can reach us at [email protected] or 765-571-1514.

Information we collect

Contact form. When you submit our contact form we collect your name, email address, phone number (optional), and the message you write, including any fitness goals you share. This information is emailed to us and stored securely on our website so we can respond to you. We use it only to reply to your inquiry and schedule your consultation. We never sell or share it with third parties for marketing.

Analytics. We use Google Analytics to understand how visitors use our site (pages visited, approximate location, device type). This data is aggregated and does not personally identify you. Google Analytics sets cookies in your browser. You can opt out with the Google Analytics opt-out browser add-on.

Security services. Our site is protected by Cloudflare (content delivery and security) and Cloudflare Turnstile (spam protection on forms). These services may process your IP address and set functional cookies to keep the site secure.

Client photos and testimonials

Client photos, videos, and testimonials are published under the photo and media release each client signs. That permission is permanent: published content is not removed when coaching ends or if a client cancels. We do not publish a client’s last name, phone number, or address.

How long we keep your information

Contact form submissions are kept only as long as needed to respond to you and manage our client relationship. You may request a copy of the information you sent us through this website, or ask us to delete it, by emailing [email protected]. Information in the coaching app is covered in the app section below.

Our mobile app

This section covers the Ultimate You Fitness app (iOS and Android) and the coaching server behind it. The app is for our coaching clients, and your coach, Grant Denney, uses the information below to coach you. We do not sell your information, and we do not show ads or use advertising or analytics trackers in the app.

Information we collect

Account and profile — your name, username, email, password (stored hashed, never in plain text), birthday, preferred language, and profile photo if you add one.

Onboarding and safety forms — fitness goals, training history, injuries and limitations, health-readiness (PAR-Q) answers, an emergency contact (name and phone number), and your signed liability waiver, including the typed name, date/time, and IP address recorded when you signed.

Training data — workouts, sets, reps, weights, notes, session feedback, weekly check-ins, habits, schedule and appointments, and your strength, readiness and consistency scores calculated from them.

Nutrition data — foods you log, meals, water, nutrition goals, custom foods and recipes, and any meal or nutrition-label photos you submit.

Body and progress data — body weight, measurements, and progress photos or form-check videos you choose to upload.

Health data from your phone (only if you allow it) — through Apple Health (HealthKit) or Android Health Connect, the app can read data such as steps, heart rate, resting heart rate, heart-rate variability, sleep, workouts, active energy, weight/body measurements, and, where you grant permission, walking and cycling/swimming distance, flights climbed, respiratory rate, calories and nutrients logged in other apps, blood pressure, blood oxygen, wrist temperature, and menstrual-cycle information. You choose each category in your phone’s permission screen and can change it at any time in your phone’s Settings. The phone app only reads health data. If you record a strength workout with the Ultimate You Apple Watch app, that workout is saved to Apple Health; nothing else is written to Apple Health or Health Connect.

Messages and calls — messages, photos and videos you send your coach in the app. Voice/video calls use our own call server (LiveKit). Calls are not currently recorded. If we add call recording, we will update this policy and tell you before any call is recorded.

Device and technical data — push-notification tokens (Apple/Google), device type and OS version, app version, your IP address in server logs, and error/diagnostic logs from the app that help us fix problems. Bluetooth is used only to connect heart-rate straps, watches, or punch-trackers you choose to pair. The camera and microphone are used only when you take a photo/video, scan a barcode, or make a call.

Location — client accounts do not use your location. Location is used only by the trainer’s own work-mileage feature on the trainer’s account.

How we use it

To build, adjust and deliver your coaching program and see your progress.
To calculate scores (readiness, strength, consistency) and show your stats.
To message and call you, send reminders and notifications.
To keep you safe (injury and health-readiness information, emergency contact).
To generate your weekly coaching insights and AI meal/label logging (see “Who we share it with” below).
To keep the service secure, fix bugs, and meet legal obligations.

We do not use your data to advertise, and we do not sell or rent it.

Who we share it with

Your coach. Grant Denney is the only person who can see your data, in the app and the coach console. Access to client records is logged. If staff are added in the future, we will update this policy first.
AI provider — Anthropic (Claude). Two features send data to Anthropic from our server:
- *Weekly coaching insights:* a summary containing your first name, goals, injuries, current program, workouts, weekly check-ins, body weight, and health stats; coach notes and forms and, where cycle tracking is enabled, cycle phase may also be included.
- *AI meal logging / nutrition-label reading:* the photo you submit.

Anthropic processes this to return the result. Anthropic is an independent company with its own policies, and it may keep this information for a period of time under those policies; we do not control how long. We send only what each feature needs. You can choose not to use AI meal logging, and you can ask your coach to turn off weekly insights.

Push notifications — Apple (APNs) and Google (Firebase Cloud Messaging) receive your device token and the notification content to deliver alerts.
Food databases — when you search foods or scan barcodes, the search term/barcode is sent to USDA FoodData Central or Open Food Facts (no account information).
Our messaging mirror — your coach messages are copied to Grant’s private, self-hosted messaging server (Matrix) so he can reply from his own devices. It is run by us, not a third party. Those mirrored copies are not currently deleted when you delete a message in the app, and are not end-to-end encrypted.
Hosting and network — the server runs on equipment we own and operate; traffic passes through Cloudflare (security/proxy) with TLS encryption.
Google Calendar — only if a trainer connects their own calendar; not used for client accounts.
Legal and safety — if required by law, or to protect someone’s safety.
We may transfer data in a sale of the business, with the same protections.

Storage, security and retention

Stored on our self-hosted servers in the United States. Private photos, videos and documents are served through short-lived signed links, not public URLs. Health forms are viewable only inside the app.
Backups are kept on our own equipment so your data can be restored if something fails.
We keep your records while you are a client and after your coaching ends, so your history is there if you return and as a record of the coaching we provided. When you stop coaching, your account is deactivated (you can no longer sign in). You can ask us to delete your account at any time — see “Account deletion and record retention” below.
You can ask us to delete your account and data; see “Account deletion and record retention” below for how deletion works and what we keep.
Detailed app diagnostic logs are deleted automatically after 48 hours. Error reports (what went wrong, app version, device type) are kept so we can fix problems.
No system is perfectly secure; we use encryption in transit, hashed passwords, access controls and audit logging, but cannot guarantee absolute security.

Account deletion and record retention

You can request account deletion in the Ultimate You Fitness app (Settings → Privacy & data) or by emailing us at [email protected]. We normally complete requests within 30 days and will confirm when deletion is complete. If additional time is necessary, we will explain why and provide an expected completion date.

We delete your app account and associated personal information, except for limited records retained where applicable law permits or requires retention, including records needed to comply with legal obligations or establish, exercise, or defend legal claims.

These records may include signed liability waivers, PAR-Q and health-readiness forms, signing evidence, and relevant training or incident records necessary to document the services provided and address injury claims.

Our standard retention period for these records is five years after your last coaching session or service. Records subject to a legal preservation obligation may be retained longer, until that obligation ends.

Retained records are stored securely with restricted access. They are not used for ongoing coaching, marketing, or AI processing and are securely deleted when the applicable retention period and preservation obligations end.

When completing your deletion request, we will explain which categories of records remain, why they are retained, and their applicable retention period.

Your choices and rights

Change or revoke Health, camera, microphone, photo, Bluetooth and notification permissions in your phone’s Settings at any time.
Ask us to access, correct, or get a copy of your data, or to delete it (see “Account deletion and record retention” above): email [email protected]. We will respond within 30 days.
You can stop using AI-processed features (meal photos) at any time, and you can ask your coach to turn off weekly insights.
Depending on where you live (for example California, Washington, the EU/UK, Brazil), you may have additional rights such as access, deletion, portability, and objection. We will honor the rights the law where you live gives you.

Health information

Health, cycle, and body data are sensitive. We use it only to coach you, never for advertising, and share it only as described in “Who we share it with” above. The app is a coaching tool, not medical care, and is not a medical device.

Children

The app is intended for adults (18 and over). Clients under 18 may use the app only with the consent of a parent or legal guardian, who may review, correct, or ask about the minor’s information by contacting us. We do not coach or knowingly collect information from children under 13; if we learn we have, we will delete it.

International users

Our servers are in the United States. By using the app you understand your information will be processed there. The app is available in English, Spanish, Portuguese, Russian (and Filipino in progress); this English version controls if translations differ.

Changes to this policy

If we change this policy we will update this page and the effective date above. For material changes to how the app handles your information, we will also tell you in the app or by email.