Can you put client data in ChatGPT? A GDPR guide for coaches: what you can paste, what you cannot, and how to anonymise the rest.
Coaches already type client conditions into assistants ("my client with SI joint dysfunction should not be doing single-leg RDLs") and use them to research conditions their clients have. Every prompt guide on this site opens with "never paste client health data", and until now nothing explained the why or the how. This page does: a yes, no or only-if verdict for 14 kinds of client data, the anonymisation template with a before-and-after, the three settings to change before you paste anything, a plain-English GDPR summary for a solo coach, and the disclosure line and AI use policy your clients should be able to read. General information, not legal advice; check your regulator's guidance.
By Markus Evers · Updated September 2026
the short version
You can paste anonymised, non-health information into ChatGPT: an age band, a goal, the week's numbers and your question. You should not paste identifiable health data such as injuries, medication or mental health notes tied to a name; under GDPR that is special category data and a consumer AI account is not a processor you have a contract with.
What does GDPR say about client data and AI tools?
GDPR says you are the controller of your clients' data, that you need a lawful basis to process it, that health data is a special category needing explicit consent and extra care, that anyone processing it for you needs a contract, and that you keep it only as long as needed and tell clients what you do with it. An AI vendor's consumer account meets none of those duties for you; a coaching platform with a data processing agreement meets the processor one. UK GDPR is the same in substance; US coaches have state laws and their contracts rather than one federal rule. Six terms cover what a solo coach needs.
| Term | What it means for a coach using AI |
|---|---|
| Controller | You. You decide why and how client data is handled, so the duties are yours, not the AI vendor's. |
| Lawful basis | Why you are allowed to process the data at all: the coaching contract for the ordinary data, and explicit consent for health data. |
| Special category (Article 9) | Health data, including injuries, medication, diagnoses, pregnancy and mental health. Needs explicit consent and extra care; do not put it in a consumer AI tool. |
| Processor and DPA | Anyone handling data for you needs a contract (a data processing agreement). Your coaching platform has one; a consumer chat account does not. |
| Retention | Keep data only as long as you need it, say how long in your policy, and delete it after. |
| Transparency | Tell clients what you do with their data, including which tools touch it. The disclosure line below does this in one paragraph. |
The parent guide to all of this, controller duties, consent, storage and retention without the AI angle, is client data privacy for online coaches.
Which client data is fine to paste, and which is not?
Of 14 kinds of client data a coach holds, three are fine to paste (your own programs, anonymised numbers, anonymised check-in text with the identifiers gone), four are fine only in general terms or once anonymised, and seven should never go into a consumer AI tool: names, contact details, photos, medication, diagnoses, pregnancy, mental health notes and payment details. The verdict column is the rule; the last column is how to do it.
| Data | Paste it? | Why | How |
|---|---|---|---|
| Client name | No | Identifies the person; nothing about it helps the answer. | Use "Client A" or a letter. |
| Email, phone, address | No | Contact details, no coaching value. | Never needed in a prompt. |
| Check-in text (their own words) | Only if anonymised | Often contains employer, city, family names, health. | Quote lightly edited, identifiers removed. |
| Weight trend, sessions done, steps, sleep hours | Yes, anonymised | Numbers with no identity are not personal data. | Paste as "trend slightly down, 3 of 4 sessions". |
| Progress photos | No | Identifiable body data; special category by inference. | Keep in the platform. Describe movement in words if needed. |
| Injuries | Only in general terms | Health data when tied to a person. | "Knee discomfort on deep squats", no diagnosis, no name. |
| Medication | No | Health data; the model should not reason about it anyway. | Leave out. Refer questions to a professional. |
| Diagnosis or condition | No, as personal data | Special category. General research about a condition with no client attached is fine. | Ask "what does a coach need to know about X in general", never "my client with X". |
| Pregnancy | No, as personal data | Health data; also a refer-out trigger for programming. | General questions only, no client attached. |
| Mental health notes | No | Special category and the most sensitive thing a client tells you. | Never. Write that reply yourself. |
| Payment details | No | Financial data, no coaching value. | Stays in Stripe and your platform. |
| DMs and messages | Only if anonymised | Contain names, places, third parties. | Summarise the situation; do not paste the thread. |
| Voice notes and transcripts | Only if anonymised | Voice is identifiable; transcripts carry names. | Strip the transcript before pasting; never upload audio. |
| Your own programs and templates | Yes | Your material, no client inside it. | Upload freely; remove any client-specific loads or names first. |
How do I anonymise a check-in before I paste it?
Anonymise a check-in by rewriting it into five lines: a letter and an age band instead of a name, the goal and training age, the week in general terms with no places or employers, the limitation as "discomfort" without the diagnosis or medication, and the client's words with identifiers removed, then your question. The worked example shows a realistic check-in before and after; the names in it are invented.
Anonymisation template
When to use it: Every time, before anything about a client goes into an assistant.
What to paste in: Five lines. If a detail does not help the answer, it does not go in.
Client [LETTER], [AGE BAND, e.g. 30s], [SEX IF RELEVANT], goal [GOAL], training age [X], [N] sessions per week. This week: [WHAT HAPPENED, no names, no places, no employer]. Limitation in general terms: [e.g. "knee discomfort on deep squats", not the diagnosis]. Their own words, lightly edited: "[QUOTE WITH IDENTIFIERS REMOVED]". My question: [WHAT YOU WANT HELP WITH].
Worked example: before (do not paste this)
When to use it: Read it to see how much identifies a person without the name.
What to paste in: Nothing. This is the version that must never leave your platform.
EXAMPLE CHECK-IN, BEFORE (illustrative, not a real client) Anna Lindqvist, 34, Malmö, nurse at Skåne University Hospital. Trained 3 of 4. Weight 71.2 (down 0.3). Sleep bad all week because of night shifts. Left knee has been aching again since the physio said it is patellofemoral pain; taking ibuprofen most days. Sertraline dose went up last month so appetite is odd. "Honestly I nearly skipped the whole week, the ward was hell."
Worked example: after (this is what the assistant sees)
When to use it: The same week, anonymised with the template.
What to paste in: Nothing. Pattern yours on it.
EXAMPLE CHECK-IN, AFTER (what goes into the assistant) Client A, 30s, female, goal fat loss, training age 1 year, 4 sessions per week. This week: trained 3 of 4, weight trend slightly down, sleep poor because of shift work. Limitation in general terms: knee discomfort on deep knee bends, cleared for training by a professional. Their own words, lightly edited: "I nearly skipped the whole week, work was brutal." My question: draft a four-part check-in reply that acknowledges the week, keeps the plan, and asks one question about sleep.
Which settings should I change first, and is a business plan different?
Change three settings before you paste anything: the control that decides whether your conversations may be used to improve the models, the unsaved or temporary chat mode for anything close to client detail, and saved memory, which you should clear of anything mentioning a client. Business and team plans generally exclude training by default and offer a data processing agreement, which is the thing a consumer account lacks; read the vendor's agreement rather than a summary, including this one. In your settings, look for data controls, chat history and memory; the exact menus move. The full 6-setting checklist, the same settings in Claude and Gemini, and the monthly review are in ChatGPT memory and privacy settings for coaches.
01
Model-training control
Find it, decide, and remember it is a second lock: the first is what you paste.
02
Unsaved chats
Use them for the anonymised check-in, not as permission to paste the real one.
03
Memory
Delete any saved memory that mentions a client. Never let the assistant "remember" a person.
The full standing setup, both instruction boxes with the confidentiality rule written in, is in ChatGPT custom instructions for fitness coaches; how the three assistants compare on privacy controls is in ChatGPT vs Claude vs Gemini for fitness coaches.
What should I tell clients about my AI use?
Tell clients three things in one paragraph: what you use AI tools for, what you never enter into them, and where their data actually lives. The disclosure line below fits the coaching agreement; the ten-line AI use policy fits the welcome packet and answers the questions a careful client would ask, including retention, automated decisions and how to ask what you hold. The canonical 12-clause version, with the 40-word disclaimer, the AI-assisted label and an adaptation prompt, is the AI use policy template for coaches.
Disclosure line for the coaching agreement
When to use it: Once, in the agreement or the welcome packet.
What to paste in: Your platform name.
I use AI writing tools to draft some of my own admin, content and message drafts. I do not enter your name, contact details, photos or health information into those tools. Your check-ins, progress data and messages are stored in [PLATFORM] under its data processing agreement, and you can ask me at any time what tools I use.
AI use policy (10 lines)
When to use it: Once, in the welcome packet. Review the date yearly.
What to paste in: Your platform name, your retention period, today's date.
AI USE POLICY (for the welcome packet) 1. What I use AI for: drafting my own admin, content ideas, and first drafts of some messages that I then rewrite. 2. What I never paste into an AI tool: your name, contact details, photos, injuries, conditions, medication, or anything that identifies you. 3. Anonymisation rule: if I ask an AI tool about a coaching situation, it gets an age band, a goal and the question, never the person. 4. Settings I keep on: my chats are not used to train the models, I use unsaved chats for anything close to client detail, and I delete saved memories that mention a client. 5. Where your data lives: your check-ins, progress data and messages are stored in [PLATFORM] under its data processing agreement, not in an AI tool. 6. Retention: I keep your data for as long as you are a client and for [PERIOD] afterwards, then delete it, unless the law requires longer. 7. How to ask: message me at any time to ask what tools I use or to see what I hold about you. 8. No automated decisions: no plan, price or message about your coaching is decided by a machine. I read and decide. 9. I read and edit everything: nothing drafted by a tool reaches you without me rewriting it. 10. Reviewed: [DATE]. I will tell you if this policy changes.
Where client data actually lives. Check-ins, photos, notes and messages stay inside your coaching platform under its data processing agreement; the assistant only ever sees the anonymised question. In Coachway that is the client's screen, with payments through your own Stripe, and no client data is sent to any AI tool by the platform. The template, the disclosure line and the policy are in the free AI prompt pack for online coaches. Both prompt libraries that carry the "never paste health data" rule, the coaching prompts and the nutrition prompts, assume you have read this page.
Frequently asked questions about client data and ChatGPT.
Is it safe to put client information into ChatGPT?
Anonymised, non-health information, yes: an age band, a goal, the week's numbers and the coaching question. Identifiable health information, no: a name with an injury, a diagnosis, medication or mental health notes is special category data under GDPR, and a consumer AI account is not a processor you have a contract with. The rule that keeps it safe is to strip identity, strip health, keep the question.
Is ChatGPT GDPR compliant for a personal trainer?
That is the wrong question, and no vendor can answer it for you. GDPR compliance is about what you, the controller, do: your lawful basis, what you paste, whether you have a processing agreement, how long you keep data. A consumer chat account with no data processing agreement is not a place for identifiable client data, whatever the vendor's own compliance. Business plans generally offer a processing agreement; read it before relying on it.
Can I paste a client's check-in into ChatGPT if I remove their name?
Removing the name is the start, not the end. A check-in with the employer, the city, a rare condition and the medication can identify someone without a name. Use the template: letter, age band, goal, the week in general terms, the limitation as "discomfort", the quote with identifiers removed, your question. The worked example on this page shows the before and after.
Is injury or medication information "health data" under GDPR?
Yes. Data concerning health is a special category under Article 9, and that covers injuries, diagnoses, medication, pregnancy, mental health and anything from which health can be inferred, when it relates to an identifiable person. Health information with no way back to a person ("a client in their 30s with knee discomfort") is not personal data, which is why anonymisation is the workable path.
Does ChatGPT use what I paste to train its models?
It depends on your plan and a setting you control, and both change, so check the current data controls in your account rather than trusting a summary. Consumer accounts typically have a setting for whether conversations may be used to improve the models and an unsaved chat mode; business plans typically exclude training by default. Whatever the setting, treat it as a second lock, not the first: the first lock is never pasting identifiable health data.
Do I need a data processing agreement with OpenAI or Anthropic?
If you paste personal data of clients, the vendor is processing it on your behalf and GDPR expects a processor contract; consumer accounts do not offer one, business or API plans generally do. If you only ever paste anonymised information, there is no personal data being processed and no agreement is needed, which is the simpler position for a solo coach. This is general information, not legal advice; check your regulator's guidance.
Do I have to tell clients I use AI?
Transparency is a GDPR principle, and a short honest line costs nothing: what you use it for, what you never paste, where their data actually lives. The disclosure paragraph and the ten-line AI use policy on this page are written for the coaching agreement and the welcome packet. Clients object to being deceived, not to a coach who drafts admin with a tool and says so.
What about UK and US coaches?
UK GDPR is the same in substance: controller, lawful basis, special category health data, processors, retention. In the US there is no single federal rule for trainers; HIPAA does not apply to most coaches, but state privacy laws, your contract and your professional body's code do, and the anonymisation rule is good practice everywhere. Wherever you are, the one line that never changes is: strip identity and health before anything goes into a consumer AI tool.
Can I upload progress photos to an AI tool?
No. A progress photo is identifiable by definition and it is body data given for coaching, not for analysis by a third party. Keep photos inside your coaching platform under its processing agreement, and if you want a second opinion on a movement pattern, describe it in words with no identifying details.
Strip identity, strip health, keep the question. The assistant gets a sketch; the person stays in your platform. This page is general information, not legal advice. Coachway costs EUR 69 per month for up to 5 clients plus EUR 9 per additional client, every feature included, with a 14-day free trial; the numbers are on pricing, and the AI tools worth a coach's time lists what sits around it.
Keep reading
all guidesClient data privacy for online coaches: GDPR, consent, and storing progress photos safely (2026)
Online coaches hold sensitive health data and progress photos. A plain-language guide to consent, GDPR basics, secure storage, and what to do when a client asks for their data. General information, not legal advice.
Read the guideChatGPT Custom Instructions for Fitness Coaches (2026 Setup)
The complete copy-paste ChatGPT setup for an online fitness coach: the "about you" and "how to respond" boxes at about 1,400 characters each, four Project instruction blocks (content, client comms, programming assistant, business admin), what to upload and never upload, the same setup in Claude and Gemini, memory and privacy hygiene, and a five-minute test.
Read the guideChatGPT Prompts for Client Check-In Replies: 10 Prompts + Tone Training
Ten ChatGPT prompts that turn a stripped check-in form into a reply in your voice, each locked to the acknowledge, assess, one adjustment, one ask structure, plus a tone-training prompt that builds a style card from five of your own replies, the paste-in and keep-out rules, and a slipping-client prompt that gives bullet points instead of a message.
Read the guideFree tools for this: Client Capacity Calculator · Coaching Profit Calculator · Coaching Rate Calculator
Ready-made templates: AI Prompt Pack for Online Coaches · AI Use Policy Template for Coaches
Where client data stays under one agreement
Check-ins, photos, notes, messages and payments through your own Stripe on one client screen, under one data processing agreement. Start the 14-day free trial and move one client over: cancel any time under Billing.
