This document is a draft. The company behind Coach, its registered address and the law these terms run under are still to be confirmed, and are marked in square brackets below.
Coach is an AI health and fitness coach at coach.ai, operated by [Operating company to be confirmed] ("Coach", "we", "us"). This policy explains what we collect when you use the website and the chat, what we do with it, and the choices you have. It should be read with our Terms of Use.
1. What we collect
When you use Coach without an account
- Your conversations. The questions you ask, the answers Coach gives, and the time of each. A conversation is stored on our servers so you can return to it. Your browser holds the list of conversations you have had on that device.
- Technical information. Our hosting provider records ordinary server information when your browser makes a request, including IP address, browser and device type, and the time of the request. These logs are kept for 90 days.
- Settings on your device. Your light or dark theme preference, stored in your browser, not on our servers.
When you create an account
- Your email address, and your name if you give one. The name is optional.
- Your password, stored only as a scrypt hash. We cannot read it, and nobody here can tell you what it is.
- If you sign in with Google: your Google account identifier, email address and name, as Google provides them with your permission. We never see your Google password.
- Account activity: when the account was created, when you last signed in, and whether your email address has been confirmed.
- Your conversations, as above, now linked to your account so they follow you between devices.
- Your coaching profile, if you fill any of it in: sex, year of birth, height, weight, your goal, how long you have trained, how often and for how long, the equipment you can use, how active you are, and anything you tell us to work around. Every field is optional and every one can be cleared. Your body mass index is not stored: it is worked out from your height and weight whenever it is shown.
- Photographs of yourself, if you choose to add them: two of you standing and three of your face. See below.
- Videos you save, as a list of YouTube links with their titles.
We do not ask for payment details, because Coach is free at present. We do not run advertising or analytics trackers, and we set no tracking cookies.
Health information
Coach is a place people describe injuries, conditions, medication, weight and other personal matters. Anything you type into the chat is stored with the conversation, and is processed by our AI provider to produce an answer. Please share only what is needed for the question you are asking, and see Terms of Use for what Coach can and cannot advise on.
Photographs of yourself
Coach can build a 3D figure with your own proportions and face, so an exercise can be shown on a body like yours instead of a stock one. That needs five photographs: two of you standing, in an A pose and a T pose, and three of your head, from the front and each side.
These are optional. Coach works fully without them, and nothing is ever taken automatically: a photograph reaches us only when you choose a file or press the shutter yourself.
Because a photograph of your face and body identifies you more directly than anything else here, it is treated differently from the rest:
- They need an account. There is no way to upload one anonymously, because there would then be no way for you to come back and delete it.
- They are private. They are held in encrypted private storage that is not readable from the web. They are never public, never shown to anyone else, never used in marketing, and never used to train anyone's models, ours or a provider's.
- They are not sent to our AI provider. The chat model is never given your photographs, and is not told that you have added any.
- They go straight from your browser to that storage, using a link that expires in minutes, so the images do not pass through our servers or appear in any log.
- Only you can see them. Viewing one in the app uses a link that works only for you and stops working within five minutes.
- Deleting one deletes the image. Removing a photograph, or deleting your account, deletes the file itself and not merely our record of it.
If you would rather not, skip that step. It is skippable like every other, and nothing else about Coach changes.
2. What we use it for
- To answer your questions, and to keep the thread of a conversation so follow-up questions make sense.
- To create and secure your account, confirm your email address and let you reset your password.
- To show you your own past conversations and your saved videos.
- To make the coaching specific to you. Where you have filled in a profile and left "Let Coach use my profile" switched on, what is on that page is given to the AI model along with your question, so the answer fits your body, your equipment and your week. Switch it off in your profile and it is not sent at all.
- To build a 3D figure with your proportions, where you have added photographs. That is the only thing your photographs are used for.
- To keep Coach working: diagnosing errors, investigating abuse, and protecting the service.
- To meet legal obligations.
We do not sell your personal data. We do not share it for anyone else's marketing. We do not use your conversations, your profile or your photographs to train AI models, and our AI provider is contractually barred from training its models on what it receives.
3. Who it is shared with
Coach runs on a small number of providers, each of which handles only what it needs to:
- Amazon Web Services, for hosting, for private photograph storage and for sending account emails, in the London region.
- MongoDB Atlas, which stores accounts and conversations.
- Our AI provider, which receives the messages in a conversation, and your coaching profile if you have left that setting on, in order to generate the reply. It never receives your photographs. Messages are held for up to 30 days so a conversation can continue where it left off, then deleted. Write to us if you would like to know who it is.
- Google, if you choose to sign in with Google, and when Coach searches YouTube for demonstration videos. A video search sends the search words, not your identity or your message.
- Professional advisers or authorities, where the law requires it or to protect the rights and safety of people using Coach.
Demonstration videos are shown as a still image and a play button. Nothing loads from YouTube, and YouTube sets no cookies, until you press play. When you do, YouTube receives the request and its own privacy policy applies.
4. Where your data is held
Our servers and database are in the United Kingdom (AWS London). Our AI provider and Google process data in the United States and elsewhere. Where the law requires safeguards for those transfers, we rely on the contractual protections those providers offer.
5. How long it is kept
- Conversations are kept until you delete them, or until you delete your account, which deletes every conversation belonging to it.
- Conversations held without an account are kept indefinitely, because there is no account to attach a deletion request to. Clearing your browser storage removes them from your list but does not delete them from our database. If you want an anonymous conversation deleted, email us from any address and tell us its id, which you can see in your browser's storage.
- Your profile, your saved videos and your photographs are kept until you clear or delete them, or until you delete your account.
- Account records are kept until you delete the account.
- Server logs are kept for 90 days.
- Backups may hold copies for a short period after deletion, and are themselves deleted on a rolling basis.
6. What you can do
You can, at any time:
- Read what we hold about you, and ask for a copy.
- Correct your name or email address by asking us.
- Delete a conversation, from the panel beside it.
- Clear any part of your profile, or all of it, from your profile page.
- Stop Coach using your profile at all, with the switch on that page. It stays stored for you, and stops being sent with your questions.
- Delete any photograph, from your profile page. The image itself is deleted.
- Remove a saved video, with the bookmark on its card.
- Delete your account, which removes the account, its conversations, its profile, its saved videos and its photographs. Ask us and we will action it.
- Sign out of every device, if you think someone else has your password.
- Object to or restrict what we do with your data, and complain to the data protection authority where you live.
Email hello@coach.ai for any of these. We may need to confirm you control the email address on the account before acting on a request.
7. Storage in your browser
Coach keeps a small amount of information in your browser rather than on our servers: your theme, your sign-in tokens if you are signed in, and, if you are not, the list of conversations held on that device, the profile you have filled in, and the videos you have saved. Signing in moves that profile and those videos onto your account and clears the local copies. None of it is used for tracking or advertising. Clearing your site data signs you out and empties that list.
8. Keeping it safe
Everything travels over an encrypted connection. Passwords are stored only as scrypt hashes. Photographs are held encrypted at rest in storage with public access blocked outright, and are reachable only through short-lived links issued to the account that owns them. Signing in issues a short-lived token rather than storing your password anywhere, and resetting your password signs out every other device. Access to the database is restricted and credentialled. No service can promise perfect security, and we do not.
9. Children
Coach is not for people under 18. See Terms of Use.
10. Changes
If this policy changes we will post the new version here and update the date below. If a change matters to you, we will say so more directly, by email where we have one.
11. Contact
Questions, requests and complaints go to hello@coach.ai.
[Operating company to be confirmed]