Your data, plainly.

Two More Mission is run by me, Charlie. I decide what’s collected and what it’s used for. For anything on this page, or to ask for your data, email twomoremission@gmail.com.

When you apply: your name, email, phone number if you give it, and your answers: age, height, weight, which days you can train, what kit you have, whether you are in a fight camp and the fight date if you give one, training history, goals, schedule, food, and anything you tell me about injuries or your health.

If you become a client: what you log in the app. Sessions (weights, reps, effort), morning check-ins (bodyweight, resting heart rate, sleep, water, steps, and whether you did your mobility), food, your goals, and the messages we send each other. On Elite, any bloodwork results you share with me. The soreness, energy and stress scores on the Recover tab stay on your phone and aren’t sent to me.

While you fill in the application: your answers are kept on your own device, so nothing is lost if you close the page. That copy is cleared when you send it. If you tick the box to be texted, I use your number only to text you about your application and the call; reply STOP to any text and they stop.

If a client sent you their share link: the short code in the link is kept on your device for 30 days and sent with your application, so I know who recommended you. That client sees a count of friends who applied and started, never your name or answers.

On this website: what you type into the form, and a count of visits. Cloudflare counts which pages are viewed, roughly where from, and on what kind of device, without cookies and without telling me who you are. No advertising.

To read your application and talk to you about coaching, because you asked me to. If you sign up, to write, check and change your training, because that’s what you’re paying for.

Health information gets extra protection in law. I only use it because you agree to it, with the box at the end of the application. You can take that back at any time by emailing me. Without it I can’t safely write a programme for you, so coaching would stop.

Only the services that run Two More Mission, and only to run it. Nothing is sold, and nothing is used for advertising.

Supabase stores the database, on servers in Ireland. Cloudflare hosts this website and the app. Google (Gmail) sends your sign-in links and carries any email between us. Resend sends the automatic emails: the one confirming your application arrived, reminders before a call you book, and, for clients, the welcome emails, payment receipts, check-in reminders and the end-of-block emails. It gets your first name, your email address and what that email says (such as your start date), nothing else. Calendly takes your booking if you book a call; it gets the name and email you give it, and I read the booking from it to send the reminders. Anthropic (Claude), OpenAI (ChatGPT) and xAI (Grok) make the AI assistants I use to help run the business; they can read applications and training logs when I ask them to check something. Claude also drafts my replies to your check-ins: it gets your first name and your check-in numbers (bodyweight, resting heart rate, sleep, water and steps), and I read and approve every reply before it reaches you. None of them make decisions about you on their own. Open Food Facts receives the words you type when you search for a food in the app, and nothing about you. If you use the camera to read a nutrition label, the photo of the label goes to Google (Gemini) to read the numbers off it, and nothing about you goes with it.

Your data is stored in Ireland (Supabase). Some of the services above are run by companies based in the United States (Google, Anthropic, OpenAI, xAI, Cloudflare, Resend and Calendly), so parts of it can be handled there or elsewhere in their networks. Each of them publishes how it protects personal data sent from the UK; ask me and I’ll point you to it.

The app and the database need you to sign in, and each client can only reach their own data. Only I can see every client’s. Everything travels over encrypted connections. No system is perfectly secure, so if something ever went wrong with your data, I’d tell you and, where the law requires it, the Information Commissioner’s Office.

If your application doesn’t lead to coaching, I delete it within twelve months. If you’re a client, I keep your data while you’re coached and for twelve months after, so you can come back and pick up where you left off. Then it’s deleted. Ask sooner and I’ll delete it sooner.

The app also keeps a copy of your logs on your phone, so it works without signal. Deleting the app removes that copy.

You can ask to see what I hold about you, get a copy (including one you can take elsewhere), have it corrected or deleted, ask me to limit how it’s used, or object to how it’s used, and you can take back your agreement to the use of your health information at any time. Email me and I’ll reply within a month. If you’re not happy with how I handle it, you can complain to the Information Commissioner’s Office at ico.org.uk.

If what I collect or who handles it changes, this page changes with it and the date at the top moves. If a change matters to clients, I’ll tell you directly rather than leave you to spot it.