Privacy Policy

Last Updated: May 15, 2026

PrepCoach ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our nutrition coaching and meal planning platform.

1. Information We Collect

1.1 Information You Provide

When you use PrepCoach, we collect information you voluntarily provide:

• Account Information: Name, email address, password, phone number, time zone
• Profile Information: Professional credentials (for coaches), preferences, notification settings
• Health and Progress Data: Body weight, body measurements, progress photos, dietary preferences, food allergies, and health goals - provided at your discretion and visible to your coach
• Meal Planning Data: Meal plans, food database entries, macro targets, and nutritional information created by coaches and logged by clients
• Communication Data: Messages between coaches and clients, check-in submissions, and coaching notes
• Payment Information: Billing details processed securely by Stripe; PrepCoach does not store full payment card numbers on its servers

1.2 Information Collected Automatically

We automatically collect certain information when you use our Service:

• Usage Data: Features used, pages viewed, time spent in app, actions taken
• Device Information: Browser type, operating system, device type, screen resolution
• Log Data: IP address, access times, error logs, performance data
• Cookies and Local Storage: Session data, preferences, authentication tokens

2. How We Use Your Information

2.1 Service Delivery

• Create and manage your account
• Provide meal planning and nutrition tracking tools
• Enable coach-client communication
• Process and track check-in submissions
• Sync data across your devices
• Send service-related notifications

2.2 Payment Processing

• Process subscription payments
• Manage billing and invoices
• Detect and prevent fraud

2.3 Service Improvement

• Analyze usage patterns and trends
• Debug technical issues
• Develop new features
• Optimize performance and user experience

2.4 Communication

• Send account-related emails (password resets, confirmations)
• Send notification emails (if you've opted in)
• Respond to support requests
• Send important updates about the Service

2.5 Legal Compliance

• Comply with legal obligations
• Enforce our Terms of Service
• Protect our rights and safety
• Resolve disputes

3. Health Data - Special Considerations

3.1 Nature of Health Data on PrepCoach

PrepCoach may collect and store data that can be considered health or biometric information, including body weight, measurements, progress photos, food logs, and stated health goals. This data is entered by you voluntarily, and you control what you share.

This health data is:

• Shared with your assigned coach(es) to support the coaching relationship
• Stored securely on Firebase/Google Cloud servers (United States)
• Not sold to third parties, advertisers, or data brokers
• Not used by PrepCoach to make clinical determinations, generate medical recommendations, or train commercial AI models without your separate consent

3.2 Coach Access to Your Health Data

Your assigned coach can view all health data you submit through the platform - including check-ins, progress photos, weight logs, and messages. This is the core purpose of the coaching relationship. PrepCoach does not control how coaches use or store this information outside the platform. Please review your coach's own privacy practices and, if applicable, their professional obligations under applicable law.

3.3 Sensitive Health Conditions

If you disclose medical conditions, diagnoses, or medications through the platform (e.g., in messages or check-in notes), this information is stored by PrepCoach as part of your communication history. PrepCoach does not treat this information as protected health information (PHI) under HIPAA, as PrepCoach is not a covered entity or business associate under that law. Users with specific medical conditions should consult a qualified healthcare professional before using the Service.

4. How We Share Your Information

We do not sell your personal information. We only share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who help us operate the Service:

4.2 Coach-Client Relationship

If you are a client, your data is shared with your assigned coach(es) to provide coaching services. This includes meal plans, progress data, check-ins, and messages. Coaches are independent professionals - not employees of PrepCoach - and are responsible for maintaining appropriate confidentiality.

4.3 Legal Requirements

We may disclose your information if required by law, such as:

• In response to a subpoena or court order
• To comply with legal processes
• To protect our rights, safety, or property
• To investigate fraud or security issues

4.4 Business Transfers

If PrepCoach is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new owner. We will provide notice before your data is subject to a different privacy policy.

5. Data Storage and Security

5.1 Where We Store Data

Your data is stored on secure servers provided by:

• Firebase / Google Cloud: United States data centers
• Browser Local Storage: On your device for offline access and performance

5.2 Security Measures

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS / TLS)
• Encryption at rest for sensitive data
• Secure authentication and password hashing
• Regular security audits and updates
• Access controls and monitoring

5.3 Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account:

• Personal data is deleted within 30 days
• Some data may be retained for legal or security purposes
• Anonymized analytics data may be retained indefinitely

6. Your Privacy Rights

6.1 Access and Portability

You have the right to:

• Access all your personal data
• Download a copy of your data
• Request data in a portable format

6.2 Correction and Deletion

You can:

• Update your profile information in the app
• Delete individual meal plans, messages, or check-ins
• Delete your entire account from inside the app: Clients use Profile → Account → Delete Account; coaches use Settings → Account → Delete Account. The app cancels any active subscription, removes your data from our database and file storage, and deletes your Firebase Authentication record.
• Request deletion from the web (no app required): visit our public account-deletion page for step-by-step instructions and an email-request option for users who cannot sign in.

For Google Play users: the in-app deletion described above is the canonical mechanism, and the same public web URL (/delete-account.html) is registered in the Play Console "App account deletion" field.

6.3 Notification Preferences

You can control notification settings in the app:

• Email notifications
• In-app notifications
• Push notifications (if applicable)
• Quiet hours settings

6.4 Regional Privacy Rights

California Residents (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of data sales (we don't sell data)
• Right to non-discrimination for exercising privacy rights

European Residents (GDPR):

• Right to access, rectification, and erasure
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

7. Cookies and Tracking

7.1 What We Use

We use cookies and similar technologies for:

• Essential Cookies: Authentication, security, core functionality
• Preference Cookies: Remember your settings (dark mode, time zone)
• Analytics: Understand how users interact with the Service (aggregated, non-personal)

7.2 Local Storage

We use browser local storage to:

• Enable offline functionality
• Improve performance and speed
• Sync data across tabs
• Store user preferences

7.3 Your Choices

You can control cookies through your browser settings. Note that disabling certain cookies may affect Service functionality, including authentication and offline access.

8. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect information from minors. If you believe a child has provided us with personal information, please contact us immediately and we will promptly delete it.

9. International Data Transfers

Your data is stored and processed in the United States. If you are located outside the United States, your data is transferred to and processed in the U.S. By using PrepCoach, you consent to this transfer. We ensure appropriate safeguards are in place consistent with applicable data protection laws.

10. Third-Party Links

Our Service may contain links to third-party websites or services. PrepCoach is not responsible for the privacy practices of these third parties. Please review their privacy policies before providing any personal information.

10A. Mobile App Data Practices (iOS & Android)

The PrepCoach iOS app supports in-app subscriptions via Apple In-App Purchase (IAP). Subscriptions may also be purchased on our website (nutrition-planner-lake.vercel.app). The PrepCoach Android app is a companion app for sign-in to an existing account; Android users purchase subscriptions on our website. Purchases and refunds made through the iOS App Store are handled by Apple — PrepCoach does not process iOS App Store payment data directly.

10A.1 What the mobile app does on your device

• Account sign-in. Firebase Authentication (Google's service) verifies your email and password. Auth tokens are stored in the app's encrypted private storage, not in plain text.
• Health and coaching data. Weight, measurements, goals, check-ins, photos, and messages between you and your coach are synced with our Firebase Realtime Database and Firebase Storage.
• Camera and photo library access. Used only when you tap "Update profile photo" or "Attach check-in photo." We request permission at the moment of use and process the file in memory before uploading to Firebase Storage.
• Local storage / cache. A short-lived cache of your most recent meal plan and preferences. This cache is cleared when you sign out or delete your account.

10A.2 What the mobile app does NOT do

• It does not collect precise or coarse location.
• It does not access your contacts, calendar, microphone, SMS, or call logs.
• It does not run in the background or schedule background syncs.
• It does not display advertising or share data with advertisers.
• It does not use Android Advertising ID or any analogous tracking identifier.
• It does not back up your PrepCoach data to Google Drive (Android Auto Backup and Device-to-Device transfer are disabled for this app).

10A.3 Mobile SDKs in use

• Capacitor — the open-source native shell that hosts the app.
• Firebase Authentication, Firebase Realtime Database, Firebase Storage — Google's backend services. Data resides on Google Cloud servers (United States).
• Stripe.js — only loaded by our website. The mobile apps disable Stripe in-app; all billing happens on the website.

10B. Google Play Data Safety Summary

The table below mirrors what we declare in the Google Play Console "Data Safety" form. This summary applies to the Android app specifically; the website may collect additional logs (see Section 4).

Security practices we declare:

• Data is encrypted in transit (TLS 1.2+). Cleartext HTTP traffic is disabled in the Android app.
• You can request data be deleted (see Section 6.2 and /delete-account.html).
• The app complies with the Google Play Families Policy: No — PrepCoach is for adults 18+ only.
• The app uses Android Auto Backup: No — backup and device-to-device transfer are disabled.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via:

• Email notification to your registered address
• In-app notification
• Prominent notice on our website

Continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: support@prepcoachnutrition.com

Data Protection Requests

To exercise your privacy rights (access, deletion, correction), please contact us with:

• Your name and email address associated with your account
• Description of your request
• Verification of your identity

We will respond to verified requests within 30 days.

By using PrepCoach, you acknowledge that you have read and understood this Privacy Policy.