Privacy Policy
Last updated: May 22, 2025
CoachOS ("we", "our", or "us") is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how it is used.
1. Data we collect
- Account information — your name and email address, obtained via Google Sign-In.
- Fitness profile — age, weight, height, fitness level, injuries, and workout goals that you enter during onboarding.
- Workout history — completed and skipped workouts, sets, reps, and exercise data generated from your training plan.
- Chat messages — conversations with your AI coach, including any feedback or adjustments you request.
- Device & notification data — push subscription tokens (stored locally on your device and in our database) used to deliver workout reminders. We do not collect device identifiers beyond what is required for push delivery.
- Payment information — processed entirely by LemonSqueezy. We never see or store full card numbers.
2. How we collect it
- Google Sign-In — when you create an account or log in.
- Onboarding forms — fitness profile data you enter during setup.
- App usage — workout completions, skips, and chat interactions recorded while you use the app.
3. Why we collect it
- Personalised training plans — your fitness profile and history are used to generate and adapt your monthly workout plan.
- AI coaching — chat history is sent to our AI providers to generate coach responses.
- Notifications — to send workout reminders and coach check-ins at the times you choose.
- App improvement — aggregated, anonymised usage data helps us improve features and performance.
- Billing — to process Pro subscription payments via LemonSqueezy.
4. Third-party services
We share data only with the following third parties, and only to the extent necessary to operate the service:
- Anthropic (Claude API) — your fitness profile and chat history are sent to Anthropic to generate training plans and coach responses.Privacy policy →
- Google (Gemini API & Authentication) — used for sign-in and AI-assisted plan analysis.Privacy policy →
- Supabase— our database and authentication provider. All data is stored in Supabase's infrastructure.Privacy policy →
- LemonSqueezy — handles all payment processing for Pro subscriptions. We pass only the minimum required billing information.Privacy policy →
- Vercel — hosts the CoachOS application and processes web traffic.Privacy policy →
We do not sell your data to any third party.
5. Data retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g. payment records).
6. Your rights
You have the right to:
- Access your personal data — email us and we will provide a copy within 30 days.
- Delete your account and all associated data — email us or use the delete option in your profile settings.
- Export your workout history and chat data — email us with your request.
- Correct inaccurate data — update your profile in the app or contact us.
- Withdraw consent— you can disable push notifications at any time in your device settings or the app's notification settings page.
7. Security
All data is transmitted over HTTPS. Database access is protected by row-level security policies. Payments are handled entirely by LemonSqueezy and we never store card details.
8. Children
CoachOS is not intended for users under 16 years of age. We do not knowingly collect personal data from children.
9. Changes to this policy
We may update this policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
10. Contact
For any privacy-related questions or requests, contact us at: support@coachos.dev