Privacy Policy

FlexCoach (“Flex Coach,” “we,” “us,” or “our”) provides a platform that helps fitness coaches manage their clients, schedules, nutrition plans, workout programs, and more. This Privacy Policy explains how we collect, use, store, and share information when you use our services.

By using FlexCoach, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the platform.

FlexCoach integrates with Google Calendar to help coaches manage their availability and schedule sessions with clients. In order to provide these features, FlexCoach performs the following actions through the Google APIs:

• Stores encrypted Google OAuth credentials. When you connect your Google account, we securely store encrypted OAuth tokens on our servers. These tokens are encrypted at rest using industry-standard encryption and are only decrypted when needed to access your Google Calendar on your behalf.
• Creates a secondary calendar. FlexCoach may create a dedicated secondary calendar within your Google Calendar account to manage your coaching availability and session bookings separately from your personal calendar.
• Creates and removes availability events. FlexCoach automatically creates calendar events to reflect your availability windows and removes them when your availability changes or when sessions are booked, ensuring your schedule stays accurate.
• Generates Google Meet links. FlexCoach automatically generates Google Meet video conference links for coaching sessions, making it easy for you and your clients to connect virtually.

You can revoke FlexCoach’s access to your Google account at any time by visiting your Google Account permissions page. Revoking access will disable the calendar integration features.

As a coach using FlexCoach, you may input client data into the platform — including but not limited to client names, contact information, health and fitness metrics, workout progress, nutrition logs, and communication history.

• All client data is stored in FlexCoach’s database. Your clients’ information is securely stored on our servers and protected by encryption, access controls, and regular security audits.
• Client data may be used for AI training. FlexCoach uses aggregated and anonymized client data to train and improve our artificial intelligence models. These models help power features such as automated workout generation, nutrition planning, and client progress insights. No personally identifiable client information is used for AI training without anonymization.
• Data is not sold. FlexCoach does not sell, rent, or license your clients’ personal data to third parties.

As a coach, it is your responsibility to inform your clients about how their data is handled and to obtain any necessary consents required by applicable privacy laws in your jurisdiction.

FlexCoach collects the following categories of information:

• Account Information: Your name, email address, profile picture, and authentication credentials.
• Client Information: Names, contact details, health and fitness data, workout history, nutrition logs, progress photos, and communication records that you enter into the platform.
• Google Calendar Data: Calendar metadata, event details, and availability information accessed through the Google Calendar API (only after you grant explicit permission).
• Usage Data: Information about how you interact with the platform, including pages visited, features used, session duration, and technical diagnostic data.
• Device Data: Device type, operating system, browser type, IP address, and mobile network information.

FlexCoach uses the collected information to:

• Provide, maintain, and improve the platform and its features.
• Manage your coaching schedule, availability, and sessions via Google Calendar.
• Generate Google Meet links for virtual coaching sessions.
• Train and enhance our AI models to deliver smarter workout plans, nutrition recommendations, and client insights.
• Communicate with you about updates, security alerts, and support matters.
• Detect, prevent, and address technical issues and misuse.
• Comply with legal obligations.

We take the security of your data seriously. FlexCoach employs industry-standard security measures, including:

• Encryption at rest and in transit: All Google OAuth credentials and sensitive data are encrypted using AES-256 at rest. Data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security).
• Access controls: Only authorized personnel and systems have access to stored data, and access is logged and monitored.
• Regular audits: We conduct periodic security assessments to identify and remediate vulnerabilities.

While we strive to protect your information, no method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security.

We retain your data for as long as your account is active or as needed to provide the platform services. You may request deletion of your account and associated data at any time by contacting us. Upon receiving a verified deletion request:

• Your account and profile information will be permanently deleted.
• Client data you have entered will be removed from our active databases.
• Anonymized data that has already been used for AI training may be retained in our models.
• Google OAuth credentials will be revoked and deleted from our servers.

Certain information may be retained for legal, accounting, or legitimate business purposes as required by applicable law.

We may update this Privacy Policy from time to time. When we make changes, we will update the “Effective Date” at the top of this page and notify you through the platform or via email for material changes. Your continued use of FlexCoach after any changes constitutes acceptance of the updated policy.

This policy is effective as of January 1, 2025.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: etcch00@gmail.com

For requests to access, correct, or delete your personal data, please include sufficient detail in your email for us to verify your identity and process the request.