Consumer Health Data Privacy Policy

• Body measurements and composition, weight, circumference measurements, and other body metrics you or your coach record.
• Progress photos and form-check videos, images you upload to track physical change, including posing submissions where you use that feature, and videos of an exercise you record for your coach.
• Nutrition and dietary intake, food and meal logs, macro and calorie figures, nutrition targets, and dietary preferences, restrictions or reactions you record.
• Exercise and activity, workouts logged, sessions completed, personal records, assessments such as movement scores and fitness tests, goals you set, the monthly progress reports your coach sends, and gym arrivals where you enable location-based check-in.
• Measurements from connected devices and apps, steps, energy, distance, heart rate, heart rate variability, sleep, weight, readiness and recovery scores, blood oxygen, breathing rate, skin temperature changes, VO2 max, workouts and related metrics synced from Apple Health, Android Health Connect, Oura, Fitbit, WHOOP or Garmin when you connect them.
• Symptoms and health status, symptom trackers and severity ratings, answers you give in intake forms and check-ins, which may include conditions, diagnoses, medications and health history, and the reason your coach records for putting your coaching on hold, such as an injury.
• Supplements and medications, products you record taking, their doses and timing, and your adherence to a protocol your coach has assigned.
• Laboratory results, lab panels, marker values and reference ranges that you or your coach enter or upload.
• Communications about your health, messages between you and your coach, and coach notes about you, to the extent they discuss any of the above.

We collect consumer health data to deliver the service you asked for, and for no other purpose. Specifically:

• To make your data visible to the coach you have chosen to work with, so they can program, advise and track your progress.
• To display your own history back to you, charts, streaks, adherence and progress over time.
• To operate features you actively use, such as nutrition targets, protocol checklists, check-ins and reminders.
• To generate automated estimates and summaries when you or your coach use an AI feature, such as estimating the nutrition content of a meal photo, or summarizing your recent logging and check-in answers so your coach can write to you. These are processed by our AI provider and are not used to train their models. Data from a connected device or app, body measurements and photos are never sent to an AI model.
• If your coach connects an AI assistant such as Claude or ChatGPT, and only if you allow it in your app, to let that assistant read what you log (workouts, typed weigh-ins, food and check-in answers) when your coach asks it a question. Data from a connected device or app is never shared this way.
• To write your finished workouts and daily nutrition to Apple Health, only on an iPhone and only if you turn that on.
• To keep the service secure, prevent abuse, and meet legal and tax obligations.

We do not sell consumer health data, and we do not use it for advertising or targeted advertising. We do not use it to build advertising profiles, we do not share it with data brokers, and we do not operate geofences around any health facility. Data obtained from Apple Health is additionally never used for advertising or shared with data brokers, as Apple requires.

We collect and share consumer health data only as necessary to provide the service you requested, or with your consent. If we ever want to collect or use it for any other purpose, or share it beyond what this policy describes, we will ask for your consent first, separately for collecting and for sharing, telling you what data, why, and with whom, and you may decline without losing access to the service. You can withdraw a consent at any time.

Your consent, asked separately. When you create an account we ask, in its own unticked box apart from the Terms, for your consent to collect and use your health and fitness information as this policy describes. If you leave it unticked, or had an account before we asked, we ask once more when you next open CoachVana. You can withdraw it at any time in Settings. If you decline or withdraw, your account keeps working for messages, your program and everything you logged before, and logging new health information (workouts, food, weigh-ins, photos, check-in answers and device data) pauses until you consent again. We keep a record of each answer you give (what you agreed to, which version of this policy, when and how). That record is in your data export, and it is erased with your account.

Devices and your coach.Before you connect a ring, watch, scale or health app (Oura, WHOOP, Fitbit or Google Health, Garmin, Apple Health or Health Connect), we ask whether your coach may see what it syncs: your sleep, recovery, activity and workouts. You can connect and keep it private. Until you say yes, your coach does not see that device's data, and disconnecting it, or turning sharing off on Connected apps, hides it again. Data from a device is never sent to an AI model.

• Directly from you, what you type, log, upload or answer in the app.
• From your coach, measurements, notes, lab results, protocols and assessments they record about you as part of coaching you.
• From your device, health and activity data from Apple Health or Android Health Connect, only after you grant permission on the device.
• From third-party services you connect, Oura, Fitbit (through Google Health), WHOOP or Garmin, only after you authorize the connection, and only until you disconnect it.
• From a coach importing their existing records, where a coach moves their practice to CoachVana, they may import records they already held about you, such as your supplement list or starting measurements.

We share consumer health data only with the following categories of recipient, and only as needed to run the service:

• Your coach, and where your coach works within a gym or company organization, the administrators of that organization. This is the point of the product. Progress photos are subject to a privacy switch you control, when it is off, your coach cannot see them.
• Other members of a group you join, who see your group level and points, which reflect the days you trained, unless you hide them.
• Infrastructure and processing providers acting on our instructions under contract: Supabase (database, storage and authentication), Vercel (the website), Expo (mobile app delivery and push notifications), Resend (email delivery), and Anthropic (AI processing for features you or your coach invoke; not used to train models).
• The provider of an AI assistant your coach connects, Anthropic for Claude or OpenAI for ChatGPT, only if you have allowed it in your app, and only what the assistant reads to answer your coach. Data from a connected device or app is never shared with them. You can withdraw this at any time in your settings.
• Apple Health, on an iPhone, when you turn on saving your finished workouts and daily nutrition there.
• Tools your coach connects, if your coach connects Zapier: the fact that you sent a check-in or finished a workout can be sent to the coach's own Zapier account, on the coach's instruction.
• Payment processors, Stripe, and Apple for a purchase in the iPhone app. These receive payment and account information, not your health data.
• Legal recipients, where we are required by law, or to protect someone's safety or our legal rights.

We have no affiliates with which consumer health data is shared. We do not share it with advertisers, data brokers, or any third party for their own purposes.

You have the right to:

• Access the consumer health data we hold about you, and a list of all the third parties and affiliates it has been shared with or sold to (we sell none), with their contact information.
• Deleteyour consumer health data. You can delete your account at any time from Settings in the app or on the web, which deletes everything you logged immediately and permanently, including workouts on your coach's program, the check-ins and answers you sent them, and the files of your photos, or remove part of it and keep your account. Documents you signed and what your coach wrote themselves stay with your coach without your name. You can also ask us to do any of this. Deleted data leaves our database backups within seven days, and we tell the processors and third parties that received it to delete it too.
• Withdraw consent to our collection and sharing of it. Disconnecting a health integration stops further collection from that source; deleting your account stops all of it.

To make a request, email support@coachvana.com. We respond within 45 days, and may extend once by a further 45 days where reasonably necessary, in which case we will tell you why within the first 45. Requests are free. We verify a request before acting on it, and will not discriminate against you for exercising any of these rights.

If we deny a request you may appeal by replying to our decision, and we answer an appeal within 45 days. If your appeal is denied, you may contact the attorney general of your state, such as the Washington State Attorney General at atg.wa.gov/file-complaint.

If we change this policy we will post the updated version here with a new “last updated” date. Where a change materially affects how we collect, use or share consumer health data, we will notify you in the app or by email before it takes effect, and where the change requires your consent, we will ask for it rather than assume it. We will not apply a material change retroactively to data already collected without your consent.

Questions about this policy: support@coachvana.com.

The company responsible for the consumer health data described here, and the address for any written request or complaint: