Privacy Policy
Last updated: June 11, 2026
This Privacy Policy explains how CoachEd ("we", "us") collects, uses, and protects your personal data when you use CoachEd (the "Service"). We act as the data controller for this data. If you have questions, contact [email protected].
1. Data we collect
- Account data — your name, email, and password (stored hashed), or the identifier from a social sign-in provider.
- Fitness data — workouts, nutrition logs, daily plans, calendar events, and progress you record.
- Content you submit — chat messages to the AI assistant and meal photos you upload.
- Technical data — basic usage and device information, and push-notification tokens if you enable notifications.
2. How we use your data
We use your data to provide and operate the Service: to authenticate you, generate AI coaching responses, store your logs and progress, send transactional emails (e.g. verification, password reset), deliver reminders and notifications, process subscriptions, and improve reliability and security. We do not sell your personal data.
3. Service providers (sub-processors)
We share data with trusted third-party providers only as needed to operate the Service, including:
- AI providers — to generate coaching responses from your messages.
- Voice processing — for speech-to-text and text-to-speech in voice features.
- Payment processing — to handle subscriptions and payments; your card details are handled by the payment provider, not stored by us.
- Cloud hosting and storage — to run the application, database, and store uploaded images.
- Email and notifications — to send account emails and deliver push notifications.
4. Cookies and local storage
We use cookies and browser local storage for essential functions only: keeping you signed in (authentication tokens), remembering your language and theme, and authorizing access to your uploaded images. We do not use third-party advertising cookies.
5. Data retention
We keep your data for as long as your account is active. When you delete your account, we delete or anonymize your personal data, except where we must retain certain records to comply with legal obligations.
6. Your rights
Depending on your location (including under the EU/UK GDPR), you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email [email protected]. You may also lodge a complaint with your local data-protection authority.
7. Security
We use industry-standard measures to protect your data, including encryption in transit, hashed passwords, and access controls. No system is perfectly secure, so we cannot guarantee absolute security.
8. Children
The Service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
9. Changes to this policy
We may update this Policy from time to time. Material changes will be communicated through the Service, and the "Last updated" date above will change.
10. Contact
For any privacy question or request, email [email protected].