Privacy Policy

This policy covers visitors to our public pages and clients using the coaching portal. The portal has two roles: a single trainer/admin account, and clients — clients can only ever access their own data.

• Account data — name, email, password (hashed, never visible to us in plain text).
• Intake information — date of birth, gender, height, starting weight, activity level, goals, training days per week, available equipment, dietary notes, sleep and stress levels, and any medical conditions you choose to share.
• Check-ins — weight, energy level, sleep quality, workout completion, and free-text notes you submit.
• Progress photos — optional photos you upload, stored in a private, access-controlled bucket.
• Programme and session data — workouts your coach assigns, session logs, allocated session times, and reschedule requests.
• Payment-related records — programme status and assessment payment records. We do not currently process card payments in-app; payments are arranged directly with your coach and recorded manually.
• Consultation enquiries — name, email and any message you submit on our public consultation form, if you're not yet a client.
• Call bookings — your name, email address, phone number if you give one, and your answers to the three questions on the booking page. We store these and email them to your coach so the call starts from where you actually are.
• Google Calendar (optional) — if you connect your calendar, we create or update a single event per coaching session on your behalf. We only request the access needed for that.

To run the coaching relationship: to let your coach write and adjust your programme, track your progress over time, schedule and log sessions, and communicate with you about your training. If you book a call, we use your name, email and phone number to reach you about it, and your answers to the three questions to prepare for it. We do not use your health data for advertising, and we do not sell personal data to anyone.

Only you and your coach. The system enforces this at the database level (row-level security), not just in the app's screens — a client account cannot read another client's check-ins, photos, programme, intake answers, or private coach notes. Progress photos are served through short-lived signed links rather than public URLs.

Data is stored with our infrastructure provider (a managed Postgres database, authentication service, and private file storage). If you connect Google Calendar, Google processes the calendar events we create on your behalf under its own privacy terms.

If you book a call, Calendly (United States) handles the scheduling. It receives your name, your email address and your answers to the booking questions. We don't share your data with any other third party.

We retain client data for as long as your portal account is active, plus a reasonable period afterward for record-keeping. If you'd like your data deleted sooner, contact us using the details below and we'll action it, subject to any legal or accounting retention requirements.

You can ask to see a copy of the data we hold on you, ask us to correct it, or ask us to delete your account and associated data. Some intake fields are editable by your coach as part of ongoing coaching (e.g. updating your goals); you can always ask what's on file.

We use only the essential cookies/local storage needed to keep you signed in. We don't run third-party advertising or tracking scripts on the portal.

If this policy changes materially, we'll update the date at the top of this page and, where appropriate, let existing clients know directly.

Questions about this policy or your data — email privacy@atelierhealth.in.