Legal

Privacy policy

Last updated August 2026

Coaching means handling information about your body. This page sets out exactly what is collected, why, who can see it, and how to get it deleted.

What we collect

Account details: your name, email address and password. Passwords are stored as Argon2id hashes and are never readable, including by your coach.
Health and fitness data you enter: height, weight, tape measurements, training logs, meal adherence, sleep entries and cardio sessions.
Check-in photos, if you choose to upload them. Photos are optional; coaching works without them, though progress is harder to assess.
Technical data needed to run the service: IP address and browser type in server logs, kept for security and troubleshooting.

To write and adjust your training program and meal plan.
To show you your own progress over time in the client portal.
To let your coach review your check-ins and respond to your messages.
We do not sell your data, share it with advertisers, or use it to train machine-learning models.

You, and Coach Auto. Nobody else has access to your measurements, photos or logs.
Check-in photos are served only to your signed-in account through an authenticated request. They are not public URLs, are never indexed by search engines, and location metadata is stripped from every image on upload.
Testimonials on the public site are published only with the client's explicit written permission, using first name and last initial.

Your data is kept while your account is open, so your history stays intact between coaching blocks.
You can ask for your account and all associated data to be deleted at any time by emailing coachauto2026@gmail.com. Deletion is permanent and removes your logs, measurements and photos.

You can request a copy of everything held about you, ask for corrections, or ask for deletion.
Requests are answered within 30 days. Email coachauto2026@gmail.com to make one.

One essential cookie keeps you signed in. It is HttpOnly, meaning scripts cannot read it, and it exists solely to maintain your session.
The public website uses Google Analytics 4 to count page visits and enquiries, so we know which pages help people. It is configured to collect no advertising data, no Google signals and no personal details; page addresses are sent without their query strings.
Visitors in the European Economic Area, the United Kingdom and Switzerland are measured without analytics cookies (Google Consent Mode, analytics storage denied by default).
You can opt out everywhere with the Google Analytics opt-out browser add-on, or by blocking cookies from google-analytics.com.

Questions about this policy? Email coachauto2026@gmail.com.