Legal

Privacy Notice

Effective date: March 5, 2026

1. Who We Are

Coacheo ("we", "us", "our") is an AI-powered fitness coaching platform. We provide personalized workout strategy, fitness profiling, and recovery coaching services through our web and mobile applications.

For questions about this notice, contact us at privacy@coacheo.ai.

2. Information We Collect

Account Information

When you create an account or join our waitlist, we collect:

• Email address
• Name and display name (optional)
• Authentication credentials managed by AWS Cognito (we do not store your password)

Fitness & Performance Data

To provide coaching, we collect information you provide or authorize:

• Workout results and scores (including CrossFit Open results if you choose to link your account)
• Personal records and movement benchmarks (e.g. estimated 1-rep maxes, skill levels)
• Goals, fitness level, equipment availability, and injury history from onboarding
• Post-workout feedback including perceived exertion and heart rate

Health & Wellness Check-In Data

If you use our daily check-in features, we collect:

• Sleep duration and quality
• Stress level, mood, and energy level
• Heart rate variability (HRV) and recovery scores
• Free-text notes you choose to share

Wearable Device Data

If you connect a wearable device (Oura Ring, Whoop, Apple Watch), we receive the data you authorize through that device's platform, which may include sleep analysis, HRV, resting heart rate, and readiness scores. You can disconnect your wearable at any time from your account settings.

Conversation Data

When you interact with our AI coach, we process your messages to generate coaching responses. Conversation history is retained to provide continuity and improve response quality.

Usage & Technical Data

We automatically collect limited technical information when you use Coacheo:

• Device type, operating system, and app version
• Feature usage and session activity (to improve the product)
• Error and performance logs

We do not use third-party advertising trackers or sell usage data.

3. How We Use Your Information

We use your information solely to provide and improve Coacheo:

• Personalized coaching — generating workout strategies, fitness profiles, and recovery recommendations tailored to you
• AI context — your health and performance data is included in prompts sent to our AI provider (Anthropic Claude via Amazon Bedrock) to generate coaching responses
• Account management — authentication, support, and communication about your account
• Product improvement — understanding how features are used to make Coacheo better
• Safety and security — detecting and preventing abuse or unauthorized access
• Legal compliance — meeting obligations under applicable law

We do not use your health or fitness data for advertising purposes.

4. AI Processing

Coacheo uses Claude, an AI model developed by Anthropic, accessed through Amazon Bedrock. When you interact with the AI coach or request a workout strategy, relevant portions of your fitness profile, wellness check-in data, and conversation history are sent to this model to generate a response.

Anthropic's data handling is governed by their own privacy policy and our data processing agreement with them. Your data is not used to train Anthropic's models without your explicit consent.

5. Who We Share Your Information With

We do not sell your personal information. We share data only in limited circumstances:

• Service providers — AWS (infrastructure and AI), MongoDB (database), and other vendors we use to operate Coacheo, under data processing agreements
• Wearable platforms — OAuth-authorized data exchanges with Oura, Whoop, or Apple HealthKit as directed by you
• Legal requirements — when required by law, court order, or to protect the rights and safety of users
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may transfer to the acquiring entity, who will be bound by this notice

6. Data Security

We take security seriously. Key measures include:

• All data is encrypted in transit (TLS 1.2+) and at rest
• OAuth tokens from wearable devices are encrypted using AES-256 envelope encryption with AWS KMS — a database breach alone cannot expose your tokens
• Authentication is handled by AWS Cognito with industry-standard JWT tokens
• Access to production data is restricted to essential personnel only

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at privacy@coacheo.ai.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Account data — retained until you delete your account
• Fitness and health data — retained while your account is active; deleted within 30 days of account deletion
• Conversation history — retained for up to 12 months to provide coaching continuity
• Waitlist data — email addresses are retained until you unsubscribe or request deletion

8. Your Rights & Choices

You have the following rights regarding your personal information:

• Access — request a copy of the data we hold about you
• Correction — update inaccurate or incomplete information
• Deletion — request that we delete your account and associated data
• Portability — request your data in a machine-readable format
• Withdraw consent — disconnect wearables or disable check-in features at any time in your account settings
• Opt out of communications — unsubscribe from emails via the link in any email we send

To exercise any of these rights, email privacy@coacheo.ai. We will respond within 30 days.

9. Children's Privacy

Coacheo is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Changes to This Notice

We may update this privacy notice from time to time. If we make material changes, we will notify you by email or through the app before the changes take effect. The effective date at the top of this page will always reflect the most recent version.

11. Contact Us

For any questions, concerns, or requests related to your privacy:

• Email: privacy@coacheo.ai