Privacy Policy
What we collect
Account data (email, name), profile data you provide during onboarding (body measurements, goals, activity level, equipment, injury notes), dietary data (allergies, preferences, favorite and disliked foods), your generated plans, chat messages with the coach, weight logs, and optional progress photos.
How we protect health data
Allergy data, health data, and photos are sensitive. They are stored with row-level security so only you can access them, photos live in a private storage bucket accessible only via short-lived signed links, and we run no third-party analytics on health fields. We use minimal, cookie-light analytics (Vercel Analytics) for aggregate page metrics only.
Processors
We rely on Supabase (database, authentication, storage), Vercel (hosting), Anthropic (AI plan generation and coach conversations), Stripe (payments — we never see your card number), and Resend (transactional emails).
Your rights (GDPR)
From Settings you can export all your data as JSON or delete your account entirely — deletion removes your profile, plans, messages, logs, and photos. You can also unsubscribe from lifecycle emails in one click from any email footer.
Contact
Privacy questions: privacy@coachryn.com.