Privacy at Coachable.

This Privacy Policy explains how Coachable LLC (“Coachable,” “we,” “us,” or “our”) handles personal information when you use the Coachable mobile application, web application, websites, AI coaching, integrations, and related support and business services (collectively, the “Services”).

Coachable LLC is the developer and operator of the Coachable app. If your employer or another organization sponsors your access, that organization may separately handle eligibility, enrollment, and organization-level administration under its own privacy practices. Coachable LLC remains responsible for the personal information it handles through the member experience as described here.

Depending on the features you use, we collect:

• Account and contact information: name, display name, email address, authentication identifiers, account preferences, and communications with us.
• Profile, goals, and coaching information: fitness and nutrition goals, training experience, schedule, available equipment, injuries or limitations, coaching preferences, and answers you provide during onboarding and check-ins.
• Health, wellness, and activity information: workouts and exercise progress, meals, hydration, nutrition targets, body weight, recovery and breathwork activity, sleep, stress, energy, readiness, heart-rate variability, resting heart rate, and related trends. When you choose to provide them, this also includes biological sex, reproductive status, menstrual or cycle information, fertility-related status, biomarkers, and lab information.
• Connected health and wearable data: data you authorize Coachable to read from Apple Health, Health Connect, or a supported wearable or health service. The specific device data Coachable may read includes HRV, resting heart rate, sleep duration and stages, body weight, daily steps, respiratory rate, breathing and mindfulness sessions, menstrual flow and derived cycle context, and readiness information. Coachable requests only the data types needed for the features you enable and does not write data to Apple Health or Health Connect.
• Photos and files: profile photos, meal photos you take or select for nutrition analysis, and any lab report or related file you choose to upload. Coachable does not access your full photo library without the permission and selection controls provided by your device.
• Messages and generated content: messages you send to your coach, feedback, notes, plan requests, and the responses, plans, recommendations, and summaries generated for you.
• AI content reports: We collect the text you submit for review, your selected reason, any optional explanation, and account and submission details. Reports may contain health information if you include it.
• Billing information: If you purchase a plan, we receive transaction and subscription information needed to manage your access. For individual App Store and Google Play purchases, we store the applicable transaction identifier or purchase token, subscription status, and an opaque account identifier that does not contain your email or health information. For organization-sponsored plans, the organization or its payment processor handles the organization’s billing contact and payment details.
• Device, usage, and diagnostics: device and platform type, app version, time zone, push notification token, feature interactions, pages or screens viewed, referral source, approximate network information, logs, and performance or error data.
• Website and business information: work email, company, role, employee count, demo timing, pricing interest, survey responses, and messages submitted through our website.

We do not collect precise location, contacts, microphone recordings, or advertising identifiers through the current Coachable mobile app. We do not receive your full payment-card number or card security code.

The health-data and AI-processing choice in Coachable covers the health and wellness information you choose to share in your profile, check-ins, logs, photos, and coach messages. We use that information to respond to you and create or adjust your personalized coaching and plans. The choice does not grant access to Apple Health, Health Connect, a wearable, or a laboratory service. Connecting any of those sources is optional and requires a separate device or provider authorization.

We collect information:

• directly from you when you create an account or use a feature.
• from your device after you grant a system permission, such as camera, photo, notification, Apple Health, or Health Connect access.
• from a wearable, laboratory, or health service you choose to connect.
• automatically from your use of our websites and Services.
• from a sponsoring organization for account eligibility and administration, such as a work email or organization assignment.

We use personal information to:

• create and secure accounts, authenticate users, and provide support.
• generate and adapt coaching, training, nutrition, recovery, readiness, and accountability experiences.
• analyze meal photos, connected health signals, check-ins, and progress to provide the user-facing feature you requested.
• remember relevant coaching context and maintain your plans, logs, and history.
• send requested operational messages and optional push notifications.
• operate integrations, troubleshoot, secure, and improve the Services.
• review reported AI content, investigate safety concerns, and correct problems with the Services.
• respond to website inquiries, schedule demos, administer customer relationships, and send promotional email when you request it or applicable law permits it.
• comply with law, enforce our agreements, and protect users, Coachable, and others.

We do not use health data, Apple Health data, Health Connect data, meal photos, or private coaching content for advertising, marketing, data-broker products, credit decisions, or employment decisions.

We do not use private health data, meal photos, or coaching conversations to train generalized AI models. Staff do not routinely review private coaching content. Authorized staff may review content you deliberately submit in an AI report, privacy request, or support request. We may use deidentified technical patterns and aggregated product metrics to evaluate and improve the Services.

Coachable uses artificial intelligence to provide coaching conversations, plan generation and adjustment, suggestions, memory, and meal-photo analysis. To provide those features, Coachable may send the information needed for your request, such as your message, selected profile and plan context, relevant health or wellness signals, or a meal photo, to AI service providers acting for Coachable. We use Vercel AI Gateway to reach model providers, including providers of Google Gemini models.

We configure AI requests to require providers with zero data retention commitments through Vercel AI Gateway. Under those commitments, providers do not retain prompts or responses after processing or use them to train their models. Coachable separately stores your conversations and coaching memory to provide continuing coaching. The retention rules below explain those records.

The coach can update your saved plans and schedule through automated features and in response to your instructions. You can review and request changes to your plan in Coachable.

When you report AI content, authorized Coachable staff may review the text and explanation you submit. You can edit the text before sending a report. Automated report-notification emails contain a report reference, without the reported text, health details, or your email address. We keep the report itself in our database for safety review.

AI output can be incomplete or wrong and is not a diagnosis or a substitute for professional care. We require service providers that process personal information for us to protect it consistently with this policy and applicable law. We do not permit third-party AI providers to use Coachable health data or private coaching content for advertising or independent marketing.

We may disclose information to:

• Service providers that host our infrastructure and database, authenticate accounts, deliver app updates and push notifications, provide AI processing, monitor reliability, analyze website performance, and support communications. They may use information under our instructions and the applicable service agreement, subject to their legal obligations.
• Connected services at your direction, when you connect or interact with Apple Health, Health Connect, Oura, Garmin, WHOOP, Function Health, or another supported service. Those services handle information under their own terms and privacy policies.
• Your sponsoring organization only as described below.
• Other eligible challenge participants and organization administrators when you voluntarily join an organization challenge. A leaderboard may show your display name, team, rank, and count of qualifying completed workouts. It does not show the workout contents, coaching conversations, connected health data, or other individual health details.
• Authorities or other parties when reasonably necessary to comply with law, protect safety and rights, investigate abuse, or establish or defend legal claims.
• A transaction counterparty in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice where required.

Our providers include Vercel for hosting, website analytics and performance measurement, and AI Gateway, Neon for databases and authentication, and Resend for authentication and operational email. Expo supports app updates and push delivery, alongside Apple and Google notification infrastructure. We use Kit for website lead and marketing communications. These providers receive information needed for their respective functions.

Apple processes iOS subscription payments under its Privacy Policy. We send an account token that does not contain your email or health information. We store transaction identifiers and subscription status to verify purchases, restore access, and process billing updates.

Google Play processes Android subscription payments under its Privacy Policy. We send an account identifier that does not contain your email or health information. We store purchase tokens and subscription status to verify purchases, restore access, and process billing updates.

An organization may pay for sponsored access through a separate business agreement. Its payment processor receives only the billing information needed for that agreement. We do not send individual coaching conversations or connected health records as payment information.

Exercise, recipe, and recovery videos may load from YouTube or Vimeo. Coachable uses YouTube API Services for embedded YouTube playback. Loading a video thumbnail sends a request to its image provider before playback. When a thumbnail or player loads, the provider can receive your IP address and device or browser information. During playback, the video provider also receives playback activity and may use cookies or similar storage. YouTube playback uses its privacy-enhanced embed domain and may include ads served by YouTube. Google and Vimeo handle this information under their own Google privacy policy and Vimeo privacy policy.

We do not sell personal information or consumer health data. We also do not “share” personal information for cross-context behavioral advertising.

Coachable is designed so that an employer or People team does not receive individual coaching conversations, meal logs, workout details, connected health metrics, reproductive information, biomarkers, or other individual health details through ordinary employer reporting.

If your account is connected to a sponsoring organization, Coachable receives your name, email, eligibility, invitation status, enrollment status, team assignment, and membership status. The sponsoring organization and its authorized administrators can access these roster fields for eligibility and membership administration. The organization supplies eligibility, invitation, and team information. Coachable records enrollment and membership status. This roster does not include health or coaching information.

Coachable includes aggregated engagement in organization-level measures by default. These measures may include active days, sessions logged, participation, and utilization. You can opt out at any time through the “Share aggregate engagement” setting in the app. Reports suppress cohorts smaller than five people. We also use aggregation and access controls intended to prevent an employer from using those reports to identify an individual’s health or coaching activity. Separate customer agreements may further limit organization access.

Organization challenges are a separate, opt-in social feature. If you join one, the limited leaderboard information described under How we disclose information is visible for that challenge. Joining a challenge does not make your broader Coachable activity or health data available to your employer.

Our separate Consumer Health Data Privacy Policy describes the health data we collect, its sources and uses, who receives it, and how you can exercise your health-data rights. It applies alongside this Privacy Policy.

We keep account information, conversations, coaching memory, and other saved product data while your account is active to provide the Services. AI reports and internal review notes remain linked to your account and are removed when that account is deleted. Contact us if you want to request deletion of particular information while keeping your account.

We review accounts after 24 months without account or app activity. We delete or deidentify saved product data that we no longer need to support reactivation, meet a legal obligation, protect security, or resolve a dispute. You can request deletion sooner.

We retain technical AI diagnostic records for 30 days and run a daily cleanup of older records. Records can remain until the next successful cleanup. These records contain technical fields such as timing, token counts, error status, and an account identifier for deletion. They exclude prompt and response text, photos, tool payloads, and free-text health details. Our Vercel application runtime logs have a 30-day retention period.

Completed account deletion removes associated product records, coaching memory, AI reports, and linked AI diagnostics from active systems. Deletion can require reauthentication or an email verification step, and a failed request may need to be retried. We generally complete verified support-assisted deletion requests within 30 days, subject to applicable legal requirements.

Our production Neon database has a six-hour recovery-history window. A deleted database record may remain recoverable within that window. Runtime logs expire on their separate schedule. Service-provider backups and recovery copies remain until the provider overwrites or expires them under its retention schedule. Connected services and payment providers keep records under their own policies and legal obligations.

We keep an active profile photo until you replace it, remove it, or delete your account. Profile photos use private storage, and the app receives a temporary read URL after it authenticates your account. We keep app push tokens while they remain registered to your account. The app requests token removal when you sign out, account deletion removes stored tokens, and invalid tokens are disabled. Push providers may keep pending delivery records for up to 24 hours. We keep subscription status and transaction identifiers while needed to provide billing access and for legal, accounting, fraud-prevention, or dispute purposes.

We review website lead records after 24 months without a business or marketing interaction. We delete records that we no longer need for a requested conversation, customer relationship, legal obligation, or suppression list. You can unsubscribe from promotional email through the link in the message or email us. Unsubscribing stops future promotional email, although we may keep the address on a suppression list so we honor that choice.

We retain limited deletion records, including hashed account identifiers and deletion status, to prevent stale sessions or delayed requests from recreating deleted data and to document completion. These records can remain after account deletion and do not contain your coaching conversations or health records. We may also retain records needed for legal obligations, security investigations, billing, or disputes for as long as that purpose requires.

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption in transit using modern cryptography, and encryption or equivalent protections for sensitive stored credentials. No method of storage or transmission is completely secure.

You can:

• edit profile, notification, and aggregate-engagement settings in Coachable.
• disconnect a wearable or health service in Coachable and revoke Apple Health or Health Connect permissions in device settings.
• revoke camera, photo, or notification permission in device settings.
• choose not to submit optional sensitive profile information, meal photos, biomarkers, or free-text health details.
• request access, correction, deletion, portability, or restriction of personal information where applicable.
• withdraw consent for future processing, subject to processing needed to provide a feature you continue to request.
• unsubscribe from promotional email through the link in the message.

To delete your account and associated data, follow our account deletion instructions. For another privacy request, email hello@meetcoachable.com. We may verify your identity before completing a request. You may use an authorized agent where permitted by law, and we will not discriminate against you for exercising a privacy right.

The “Health data personalization” control in Coachable withdraws consent for future consumer-health-data processing used by personalized features. Withdrawing also disables AI data sharing and disconnects stored wearable and laboratory-service connections. It does not delete previously saved information. You can continue to view past activity and use account controls, and you can request deletion separately.

Coachable and its service providers may process information in the United States and other countries, which may have different data protection laws from your location. Where required, we use an approved transfer mechanism and apply contractual and technical protections.

Depending on where you live, our legal bases may include performing a contract with you, your consent, compliance with law, and legitimate interests such as securing and improving the Services, provided those interests are not overridden by your rights. You may have the right to complain to your local data protection authority.

You must be at least 18 years old to use Coachable. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided information to us, contact hello@meetcoachable.com so we can investigate and delete the information as appropriate.

We may update this policy as the Services or law changes. We will post the revised policy here, update the “Last updated” date, and send an email to the address associated with your account about material changes and when they take effect. We will obtain your consent when required before applying a change. We will honor the commitments that applied when we collected your information unless you authorize a change or applicable law permits it.

Coachable LLC is responsible for this policy. For privacy questions, requests, or appeals, email hello@meetcoachable.com. Please use the subject line “Privacy Request” and identify the email associated with your Coachable account. You can also visit our support page.

You can call us at 737-241-5541 or write to us at: