Privacy Policy

Website analytics choices

Website analytics is optional and separate from submitting an access request. Google Analytics loads only after you accept analytics. It uses first-party cookies to recognize a browser and measure visits, limited traffic sources, and newly accepted access requests. Google also receives network information such as your IP address when your browser connects to its service. This is not anonymous processing.

• The page and campaign details we supply are limited to fixed public page addresses, a fixed site label, approved campaign labels, and recognized referring-site origins. We exclude form fields, names, email addresses, URL queries and fragments, arbitrary page paths, and full referring URLs. No account user ID is supplied.
• Duplicate or unconfirmed access requests are not counted as new leads. Rejecting analytics does not prevent an access request or contact submission.
• Advertising consent is denied, and Google signals and advertising personalization are disabled in the website tag. Analytics cookies are configured to expire after 30 days without renewal. Your analytics choice is stored in this browser for up to 180 days.
• Use Analytics settings at the bottom of any page to change your choice. Revoking stops collection, removes this site's accessible analytics cookies, and reloads the page when the choice is saved. Withdrawal does not delete data already received by Google.

1. Information we collect

We collect information you provide directly, information generated through your use of Coach Vellum, and information from third-party services you connect.

1.1 Information you provide

• Account information: email address, name, username
• Profile information: display name, avatar image (if you upload one)
• Life Model data: your primary goal, behavioral patterns, career context, mantra, recent wins, and other Oracle onboarding responses. Stored privately and never shared with other services.
• Fitness onboarding data: fitness level, goals, physical baseline (height, weight, age)
• Nutrition onboarding data: dietary preferences, allergies, cooking level, unit preferences
• Content you create: workout logs, meal logs, journal entries, feed posts, comments, messages to Coach Vellum

1.2 Information generated through use

• Conversation history with The Oracle and Coach Vellum
• Voice session recordings (processed in real-time, transcripts retained for session memory)
• Usage analytics: features used, screens viewed, session duration
• Device information: iOS version, device model, app version
• Performance data: crash reports, performance metrics (via Firebase Crashlytics and Performance Monitoring)

1.3 Information from third-party services

• Apple HealthKit (read-only): workout data, steps, heart rate, sleep, VO2 max, activity metrics. Only accessed if you grant permission. Used by Coach Vellum for recovery-aware coaching.
• Apple Sign In: email and name when you sign in with your Apple ID
• Google Sign In: email, profile picture, and basic profile when you sign in with your Google account
• Firebase Authentication: manages your login sessions

2. How we use your information

• To provide Coach Vellum's coaching, fitness, and nutrition features
• To personalize The Oracle's responses using your Life Model
• To generate AI responses via Google Gemini (Vertex AI)
• To send you notifications (only with your permission)
• To improve the app through analytics and crash reports
• To communicate with you about your account or support requests
• To enforce our Terms of Service and prevent abuse

3. The Oracle's Life Model — a special category

Your Life Model is the context The Oracle uses to coach you. It is treated as a special privacy category with stricter handling than other data.

• Your Life Model is NEVER used to train AI models — not ours, not Google's, not Apple's
• Your Life Model is kept separate from fitness and nutrition coaching experiences
• Your Life Model NEVER appears in the social feed, on leaderboards, or in community features
• Your Life Model is stored encrypted and accessible only to your authenticated user account
• Oracle voice session recordings are processed in real-time by Google Gemini and discarded; only transcripts are retained for session memory

4. How we share information

We do not sell your personal information. We share information only in these limited circumstances:

• With service providers who operate our infrastructure: Google Firebase (data storage, authentication), Google Cloud (AI inference via Vertex AI / Gemini), and Apple HealthKit
• With your consent: when you post to the feed or challenges, that content is visible to other Coach Vellum users
• For legal reasons: if required by law, court order, or to prevent fraud or protect safety
• In a business transfer: if TAAS LLC is acquired, user data may transfer to the acquiring entity, subject to an equivalent privacy policy

5. Your choices and rights

• Access: you can view available data within the app or submit a privacy request through the Coach Vellum Contact page
• Deletion: you can delete your account from within the app. Deletion applies to associated data as described in this policy
• Correction: edit your profile, Life Model, or preferences directly in the app
• Notification preferences: control which notifications you receive from the Notifications settings in the app
• HealthKit revocation: revoke HealthKit access anytime from iOS Settings → Health → Data Access & Devices

6. GDPR rights (EU/UK users)

If you are in the European Union or United Kingdom, you may have additional rights under applicable data-protection law, including rights to access, rectify, erase, restrict processing, and data portability. Submit a request through the Coach Vellum Contact page.

7. CCPA rights (California users)

California residents may have rights under applicable privacy law, including rights to know what personal information we collect and to request deletion. Submit a request through the Coach Vellum Contact page.

8. Children's privacy

Coach Vellum is not intended for users under 18. We do not knowingly collect information from minors. If you believe a minor has provided information, submit a request through the Coach Vellum Contact page.

9. Data retention

We retain your data for as long as your account is active. When you delete your account, we delete associated data within 30 days. Aggregated, de-identified data may be retained indefinitely for analytics purposes.

10. Data security

We use industry-standard security practices including encryption in transit (TLS), encryption at rest (Firebase default), authenticated access controls, and regular security audits. No system is completely secure — we cannot guarantee absolute protection but we take this seriously.

11. International data transfers

Coach Vellum's infrastructure is primarily in the United States. If you are outside the United States, your information may be transferred to and processed in the United States, subject to applicable safeguards.

12. Changes to this policy

We may update this Privacy Policy as Coach Vellum evolves. Material changes will be communicated through an appropriate channel.

13. Contact us

Submit privacy questions through the Coach Vellum Contact page. Coach Vellum is operated by TAAS LLC.