Privacy Policy

This site and member app are operated by Brad Hills, a NASM certified personal trainer based in Oceanside, California, trading as Brad Hills Training.

[NEEDS BRAD: the exact legal entity behind Brad Hills Training (sole proprietor, DBA, or LLC) and its registered business address, both of which have to appear here]

For anything in this policy, including a request to see or delete your data, contact us at [NEEDS BRAD: the email address that should receive privacy and deletion requests].

We only collect what you give us, plus a small amount of technical information that arrives with every web request. There are no third-party advertising or analytics trackers on this site.

a. If you submit a coaching application

The application form on the home page asks for, and we store: your first and last name, your age, your city and state, your phone number, your email address, whether you can commit to 90 days of training and dieting, whether you want to increase lean muscle while losing fat, whether you are prepared to make a financial investment in your health, which description best fits your current training, your profession and how long you have done it, how important your fitness goals are to you on a 1 to 5 scale, why that matters to you, and why Brad should take you on as a client. Brad also records an internal status and private notes against your application.

Where the form supplies them, the referring page and campaign parameters from the link you arrived on (for example utm_source) are included in the notification email sent to Brad. They are not stored in the application record.

b. If you create an account

• Account credentials: your email address and password, handled by our authentication provider. We never see or store your password.
• Profile and body data: display name, profile photo if you set one, age, sex, height, weight, and body fat percentage.
• Training profile: activity level, fitness goal, training experience, preferred training days per week, and preferred program split.
• Nutrition preferences: dietary restrictions, dietary preferences, meals per day, and meal variety.
• App settings: unit system, time zone, and whether you have finished onboarding.
• Body assessment photographs. See section 3, which covers these separately because they are the most sensitive thing here.

c. What you generate by using the app

• Your workout programs, the training days and exercises in them, your logged sessions, and every set, rep and weight you record.
• Your meal plans and grocery lists.
• Messages between you and your coach, and any file attachments sent with them. Anything you choose to write in a message is stored, including health details, pain or injury history, or medication if you mention it. Please only share what you are comfortable having on file.

d. Billing

If you are set up to pay online, we store your plan, its status, when the current period ends, and the customer and subscription identifiers issued by our payment processor. Card numbers are entered on the payment processor's own checkout page. We never receive or store your full card number.

e. Technical

• Your IP address is read on form submissions and other write requests to apply rate limits. It is held in server memory for a short window and is not written to our database.
• Our hosting and infrastructure providers keep their own standard request logs, which can include IP address, user agent and the URL requested.

During onboarding you are asked to upload front, side and back photographs of your body, and to tick a consent box before you can continue. That consent covers assessment and personalized program design. It is your choice to upload them, and you can ask us to delete them at any time.

• They are stored in a private file bucket. The bucket is not public, and access rules restrict each stored file to you and to Brad as administrator.
• They are used to assess your body composition and posture and to shape your training and nutrition plan.
• They are sent to an automated vision tool that produces a draft assessment. See section 5, which explains exactly how that works and who reviews it.
• We do not publish your photographs, and we do not use them in marketing. If that ever changed we would ask you first, separately.
• Under California law these photographs, and the health-related details in your profile and messages, are sensitive personal information. See section 11.

• To review your coaching application and contact you about it, by email and by phone, using the details you provided.
• To create and run your account, and to keep you signed in between visits.
• To build your training program, meal plan and grocery lists, and to calculate your calorie and macronutrient targets from your stats.
• To let your coach see your progress and answer your messages.
• To take and manage payment where a package is billed online.
• To send you service email about your account, your plans, and your messages.
• To keep the service working and to defend it from abuse, spam and automated attacks.

[NEEDS BRAD: whether the phone number and email from an application are also used for marketing (SMS campaigns, newsletters), or only for the coaching conversation. What is written above assumes coaching contact only]

We use automated tools to prepare drafts. Every draft is reviewed by a human coach before it reaches you. Concretely:

• When you message your coach, your message, your recent conversation, and a summary of your profile (which can include age, sex, height, weight, body fat percentage, activity level, goal, experience, dietary restrictions, and your current program and meal plan) are sent to our AI provider so an assistant can prepare a suggested reply. That suggestion is emailed to Brad. Brad approves it, edits it, or writes something else. Nothing is delivered to you automatically.
• Your body assessment photographs are sent to the same provider, through short-lived private links, to produce a draft assessment (estimated body fat range, posture notes, strengths, areas to improve, recommendations). The draft is stored for Brad to review and edit, and is marked finalized only when he says so.
• Draft meal plans, workout programs and grocery lists are produced the same way. They are held in a pending review state and are not visible to you until Brad approves them.

No decision that produces a legal or similarly significant effect on you is made by an automated system. The output is a draft for your coach, not a decision about you.

We use a small number of service providers. They process your data on our instructions, for the purposes above, and nothing else.

• Supabase hosts the database, the authentication system and the private file storage where your photographs and attachments live.
• Vercel hosts and serves the website and application.
• Stripe processes payments and holds card details. We receive only the identifiers and plan status described in section 2(d).
• Resend delivers transactional email, such as your application confirmation and coach notifications.
• Anthropic provides the AI models used for the drafting described in section 5, including the analysis of your body assessment photographs.

We may also disclose information where the law requires it, to enforce our Terms of Service, to protect someone's safety, or as part of a sale or transfer of the business, in which case this policy travels with the data.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. There are no advertising networks, data brokers or third-party analytics scripts in this application.

The only cookies this application sets are the session cookies from our authentication provider. They are what keeps you signed in and what stops one member from reading another member's data. They are strictly necessary. If you block them, you cannot sign in.

The application code sets no advertising cookies, no analytics cookies, and loads no third-party tracking scripts. Our hosting provider may set cookies of its own for platform functions such as security and load balancing.

Your browser also holds a small amount of local state so the app can restore your session. Clearing your browser storage signs you out.

Today, in practice:

• Account data, profile data, programs, meal plans, logged workouts and messages are kept for as long as your account exists. Deleting the account removes these database records.
• Photographs and file attachments live in file storage, which is not cleared automatically when the account record is deleted. They are deleted separately, by us, when you ask or when your account is closed.
• Coaching applications are kept in Brad's pipeline whether or not you become a client, until you ask for the record to be removed.
• Billing records are kept for as long as tax and accounting law requires.

[NEEDS BRAD: the actual retention periods you want to commit to, in particular for body photographs and for applications from people who never become clients. No fixed period has been set, so none is claimed here]

You can, at any time:

• See and correct most of your profile data yourself in the app settings.
• Remove a body photograph, or decline to upload one at all.
• Ask for a copy of everything we hold about you, or ask us to delete it. We will confirm your identity against the email address on the account before acting.
• Unsubscribe from any non-essential email. Service email about your account and your plans is part of the service and cannot be turned off while your account is open.

Send deletion and access requests to [NEEDS BRAD: the email address for privacy and deletion requests]. We aim to respond within 45 days, the period California law allows.

There is no self-serve delete button in the app today, so account deletion is done by us when you ask. Closing an account removes your profile, subscription record, programs, sessions, logs, meal plans and messages. As section 9 explains, your stored photographs and attachments are not removed by that same step: they are deleted from file storage separately, by hand, as part of the same request. Some records may survive in backups for a period, and in our payment processor's records where the law requires them to be kept.

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the following rights.

• Right to know. The categories and specific pieces of personal information we have collected about you, where it came from, why we collected it, and who we disclosed it to. Section 2 lists this in full.
• Right to delete. Ask us to delete what we hold, subject to the exceptions the statute allows, such as records we must keep for tax or legal reasons.
• Right to correct. Ask us to fix inaccurate personal information.
• Right to opt out of sale or sharing. We do not sell your personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. If that ever changes, a “Do Not Sell or Share My Personal Information” link will appear on this site.
• Right to limit use of sensitive personal information. We collect sensitive personal information: your body assessment photographs, and health-related details in your profile and messages. We use it only to perform the coaching service you asked for and for the purposes in section 4. We do not use or disclose it to infer characteristics about you for any other purpose.
• Right to non-discrimination. Exercising any of these rights will not get you worse service or a worse price.

Categories collected in the last 12 months, in the statute's terms: identifiers (name, email, phone, IP address); customer records (phone number, billing identifiers); protected classification characteristics (age, sex); commercial information (plan and subscription history); internet activity (requests to our service); geolocation only at the city and state level you type into the application form; and sensitive personal information (photographs of your body, and health information you provide). We collect all of it directly from you.

An authorized agent may make a request on your behalf with written proof of authorization.

California law requires us to say how we respond to Do Not Track signals. This application does not currently detect or respond to Do Not Track browser signals. That is because it does not track you across other websites in the first place, so there is nothing for the signal to change. We do not permit third parties to collect personally identifiable information about your activity across other sites through our service.

This service is for adults and is not directed to children. The coaching application will not accept an age below 16, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

[NEEDS BRAD: the minimum age for a member account and for a paid coaching agreement, and whether a parent or guardian may enrol a 16 or 17 year old]

Every table in our database has row level security enabled, so each member can read only their own records, and administrator access is explicit rather than assumed. Photographs and attachments sit in private buckets that are not publicly readable, and are served through short-lived signed links. Privileged database keys are used only on the server and never reach your browser. Traffic is served over HTTPS.

No system is perfectly secure. Use a strong, unique password, and tell us straight away if you think your account has been accessed by someone else.

If we change how we handle your data we will update this page and move the last updated date at the top. If the change is significant, for example a new category of processing or a new provider handling your photographs, we will tell you by email before it takes effect.

Questions, access requests and deletion requests go to [NEEDS BRAD: the privacy contact email address], or by post to [NEEDS BRAD: the business mailing address].