Privacy Policy

• Account data: email address and password (handled by our authentication provider, Supabase — we never see or store your raw password).
• Coach profile data: name, bio, city, specialties, session pricing, social links, and any photos, videos, or credential/certification details you choose to add.
• Customer data: the name shown on reviews you leave, and the programmes/coaches you've purchased from or reviewed.
• Payment data: we don't store your card details. Card payments are handled entirely by Stripe; we only receive confirmation that a payment succeeded, an amount, and a Stripe reference.
• Uploaded files: PDF programmes (stored privately, only accessible to you and paying customers) and any photos/videos a coach adds to their public profile (stored publicly, since they're shown on the profile by design).
• Technical data: standard server logs (IP address, timestamps, error logs) generated by our hosting and database providers for security and debugging.

We don't run third-party analytics or advertising trackers on the Site today, and we don't sell your data. If that changes, we'll update this policy and, where required by law, ask for your consent first.

• To create and run your account, and to show coach profiles and programmes to customers.
• To process payments and deliver purchased content (legitimate interest / performance of a contract).
• To verify coach credentials as part of our verification process.
• To respond to support requests and enforce our Terms of Service.
• Where required, to comply with our legal and tax obligations.

We share data with the following processors, only as needed to run the Site:

• Supabase — database, authentication, and file storage.
• Stripe — payment processing.
• A coach whose programme you buy or whose session you enquire about sees the details needed to fulfil that purchase or enquiry (e.g. your email address). A customer who buys from or reviews a coach's profile has their review name shown publicly.

We don't share your data with advertisers or data brokers. Some of our processors (Supabase, Stripe) may store or process data outside the UK/EEA; where they do, they provide appropriate safeguards (such as standard contractual clauses) as required by UK GDPR.

We keep account and transaction data for as long as your account is active, and for a reasonable period afterward to meet our legal, accounting, and dispute-resolution obligations. You can ask us to delete your account and associated personal data at any time (see below); we may need to retain records of completed transactions where the law requires it.

Under UK GDPR, you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that's inaccurate or incomplete;
• delete your data, where we're not required to keep it for a legal reason;
• restrict or object to certain processing;
• receive your data in a portable format.

To exercise any of these, email cameronheughan@icloud.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you think we've mishandled your data.

The Site uses only the strictly necessary cookies/local storage needed to keep you signed in (set by Supabase Auth). We don't currently use analytics or advertising cookies.

The Site itself is intended for users aged 18 and over. Some coaches offer coaching to under-18s (e.g. youth sport) — that relationship is between the coach and the parent or guardian, and is subject to the coach's own safeguarding obligations, not this policy.

We'll update the date at the top of this page whenever this policy changes, and post the new version here.

Questions or requests about your data: cameronheughan@icloud.com.