Privacy Policy

What we collect

• Account information — name, email, role (trainer or trainee).
• Profile information — for trainers: bio, specialties, photo, pricing. For trainees: fitness goals, experience level, injuries.
• Coaching content — intake answers, workout logs, messages, files uploaded by coaches.
• Payment metadata — Stripe customer and subscription IDs. Card data is held by Stripe, not us.
• Technical data — IP address, browser, device, basic usage logs.

How we use it

• To run the marketplace and route programs, payments, and messages between coaches and trainees.
• To send transactional emails (account, billing, notifications).
• To prevent fraud and abuse and to enforce our Terms of Service.
• To improve the product. We do not sell your personal information.

Who we share it with

• Your coach or your client — your intake answers and workout data are visible to the coach you signed up with, and vice versa.
• Stripe — for payment processing.
• Lovable Cloud (Supabase) — our hosting and database provider.
• Law enforcement — only when legally required.

Your rights

You can request access, correction, or deletion of your personal data by emailing andrew.flexcoach@gmail.com. EU/UK residents have GDPR rights; California residents have CCPA rights. We will respond within 30 days.

Data retention

We retain account data while your account is active and for up to 12 months after closure for legal and accounting purposes. Stripe retains payment records per its own retention policy.

Security

Data is stored encrypted at rest. Access is gated by row-level security policies. No system is 100% secure; report any suspected vulnerability to the email above.

Children

Flex Coach is not directed at users under 18 and we do not knowingly collect data from minors.

Changes

We may update this policy. The "Last updated" date above reflects the current version.