Privacy Policy

1. Who this covers

This policy covers operationalstrength.net and the Operational Strength client and coach application (currently hosted at operational-strength-app.netlify.app). It applies to anyone who submits the consult form, creates an account, or uses the app — I'll call all of that "the Service."

Operational Strength is a sole proprietorship — I'm the only coach, and I'm the one responsible for how your information is handled.

2. Information I collect

Depending on how you use the Service, I collect:

• —Contact info — name, email, and phone number, whether from the consult form or your account
• —Account info — your login email and password (handled by my authentication provider, Supabase; I never see your password in plain text)
• —Health and fitness info — training goals, experience level, date of birth, food and nutrition logs, daily habits (like sleep, steps, and water), check-in responses, and any medical conditions or limitations you choose to tell me about
• —Emergency contact info — a name, phone number, and relationship, collected during onboarding
• —Payment info — handled directly by Stripe, my payment processor. I only ever see the last 4 digits and card brand, plus your billing history — never your full card number
• —Communications — messages you send me through the app, and any info you give me on a consult call
• —Basic technical info — standard web server logs (like IP address and browser type) generated automatically when you visit the site

3. How I use it

I use your information to:

• —Provide coaching — build and adjust your training program, track your progress, and respond to your check-ins and messages
• —Run your account — authenticate your login and keep your data tied to you, not anyone else
• —Bill you — charge the plan you agreed to and keep a record of that billing
• —Follow up with leads — if you submit the consult form, I use your info to call or text you about scheduling
• —Keep the Service working and secure

4. Who I share it with

I don't sell your information, and I don't share it for advertising. I do share it with a small number of service providers who help run the Service, only as needed for them to do their job:

• —Supabase — hosts the database, authentication, and backend for the app
• —Stripe — processes payments and stores your payment method securely
• —JotForm — hosts the intake form some leads are invited to fill out before their consult
• —ntfy.sh — sends me a push notification when a new lead comes in, so I can follow up quickly

5. How long I keep it

I keep account and coaching data for as long as your account is active, plus a reasonable period after in case you return or for recordkeeping. If you ask me to delete your data (see "Your rights" below), I will, except where I'm required to keep records — for example, billing history I'm legally obligated to retain.

6. Your rights

Regardless of where you live, you can ask me at any time to:

• —See what personal information I have about you
• —Correct information that's wrong or out of date
• —Delete your information, subject to the recordkeeping exception above
• —Get a copy of your data in a portable format

7. California residents (CCPA)

If you're a California resident, the rights above are also protected under the California Consumer Privacy Act (CCPA). To exercise any of them, just email me — contact info is at the bottom of this page. I won't discriminate against you (charge you more, provide worse service) for exercising these rights.

8. Children's privacy

The Service is not intended for anyone under 18. I don't knowingly collect information from minors. If you believe a minor has given me information, contact me and I'll delete it.

9. Security

I take reasonable steps to protect your information — encrypted connections (HTTPS), access controls on the database so your data is only visible to you and me, and payment handling through a PCI-compliant processor (Stripe) rather than my own systems. No system is perfectly secure, but I don't treat this casually.

10. Changes to this policy

If I make material changes to this policy, I'll update the date at the top of this page. Continued use of the Service after a change means you accept the updated policy.

11. Contact

Questions about this policy or your data? Reach out through the consult form or contact me directly at operationalstrength@outlook.com.