Privacy Policy

Account info — your email, and a password hash if you create an account with credentials rather than Google, Facebook, or Apple. If you sign in with Google or Facebook, we also store the name and profile picture they share with us, and use the language your account is set to there as a starting guess for which language Coach should use — you can always change it during onboarding.

Profile and onboarding answers — age, gender, weight, height, goals, diet type, sleep, exercise habits, stress level, work type, medications and supplements you tell us about, pregnancy/breastfeeding status, whether you're under 18 or manage a diagnosed condition, gear you own, and your Coach preferences.

Habit and progress data — what you log each day, streaks, and badges earned.

Conversations with Coach — messages you send, and short summaries Coach extracts from them to remember context between sessions.

Full conversation exchanges, for model improvement — separately from the short memory summaries above, we also retain the complete exchange behind each reply Coach sends (what you said, the instructions Coach was working from, and its full reply) to evaluate and improve how Coach responds, including training future versions of the coaching model. This is used for that internal development and quality-evaluation purpose only — never sold, never used for advertising, and deleting your account removes it.

Billing data — handled by Stripe. Coach never sees or stores your card number.

Affiliate click activity — when you click a product link, we record the product category and reference so we can attribute the click to the right retailer partner (see "Affiliate links" below).

Photos you upload — pictures you attach to a conversation or add to your profile gallery, including if you set one as your profile picture.

Anonymous first-visit data — before you have an account, we log your country (from standard network headers), the language you were greeted in, the external site that referred you (if any), and the page you landed on. This is stored once per browser, not per account, and never includes your IP address or a user ID.

To personalize what Coach says and recommends, track your habits and progress, process payments, keep the free tier within its limits, and improve the product. Medical and medication information is used only to make Coach more cautious and appropriate — never to diagnose, and never sold or used for advertising.

To make Coach's suggestions better for everyone, we look at anonymous, aggregated patterns in which recommendations people keep versus dismiss — for example, whether people whose top goal is better sleep tend to keep or skip a particular kind of suggestion. This is grouped only by broad signals like your top goal, computed as counts, and a pattern is only ever used once enough different people are behind it. No individual recommendation, answer, or identity is ever part of this — nothing you personally chose to keep or dismiss is shown to anyone. Right now this is only measured internally; it doesn't change what Coach shows you or anyone else yet.

You're included in this by default, and you can turn it off any time from Settings — doing so removes your data from these counts and doesn't affect what Coach recommends to you either way.

Anthropic processes your profile summary and messages to generate Coach's replies and recommendations.

Stripe processes payments and holds your billing details.

Google, Facebook, and Apple handle authentication if you log in with one of those accounts.

Retailer affiliate partners (e.g. Amazon Associates, or another supplier Coach partners with) only see that a click happened through their own tracking link when you follow one — we don't send them your profile, health data, or conversations.

ElevenLabs converts Coach's replies to speech when you use voice. It receives the reply text being spoken, not your original messages.

Vercel hosts the app and stores photos you upload on our behalf.

Sentry receives crash and error reports so we can find and fix faults. Reports are scrubbed before they leave us — no message content, no profile fields, no email.

Meta, Google and TikTok — only if you choose “Accept” on the cookie banner, and only while we're actually running ads. Their measurement pixels then load in your browser, and we tell those platforms that a sign-up happened, identified by a one-way hashed version of your email so they can match it to the ad you clicked. They never receive your conversations, health data, profile, or habit logs. Choose “Necessary only” and none of it loads or is sent.

We never sell your data. Apart from the ad measurement described just above — which happens only if you accept it, and which you can withdraw at any time from Cookie settings in the footer — we don't share your data for advertising.

Your conversations with Coach are private. Day to day, no person reads them — they are processed by the AI systems described above to generate Coach's replies, and that is it.

There is one exception, and we'd rather tell you about it than hide it: a small number of authorized Coach AiLA staff can review a member's conversation and email history when it's genuinely needed — to investigate a complaint you've raised, a safety concern, or a suspected error in what Coach said. Every single such access is itself recorded in an internal audit log — who looked, at what, and when — and that log can't be quietly edited. Review access is never used for marketing, advertising, or curiosity, and deleting your account removes your conversations from what can be reviewed.

Product links on Coach are affiliate links. If you buy through one, we may earn a commission from the retailer at no extra cost to you — see About for how that works and why it never changes what gets recommended.

Two cookies are essential and are set whatever you choose on the banner. Everything else waits for your explicit “Accept”, and nothing is set before you have chosen.

Always on — essential. A session cookie keeps you signed in, and a language cookie remembers the language you picked for a year, including before you have an account. A marker in your browser's local storage also records your banner choice itself, so we don't ask again.

Only if you accept — audience measurement. A one-per-browser record of the anonymous first-visit data described above, plus Vercel Analytics and Vercel Speed Insights, which count page views and measure loading speed. These are cookieless and hold no IP address or account id, but they still only run once you have accepted.

Only if you accept — advertising measurement. When we are running ads, accepting also loads the Meta, Google Ads and TikTok measurement pixels, which set their own third-party cookies and let those companies recognise your browser. This is the one category that shares an identifier (a hashed email) outside Coach — see “Who we share it with” above. “Necessary only” switches it off entirely.

You can change your mind at any time: Cookie settings in the footer reopens the banner, and choosing “Necessary only” there stops all of the optional categories from that moment on.

We keep your data while your account is active. You can download a copy of your own data any time from Settings, and request account deletion yourself just as easily — that starts a 90-day countdown you can cancel any time before it completes, or you can choose to delete everything immediately instead, with no waiting period and no way to undo it. Once that countdown (or the immediate option) runs, the account and its data are actually removed, not just marked for later. Questions about either one can also go to privacy@coachaila.com.

Trust is the core of Coach AiLA. You tell Coach things you might not tell anyone else — protecting that is not a feature, it's the foundation everything else stands on, and security is treated as a first priority in how we build.

Concretely, today: all traffic between you and Coach is encrypted in transit (TLS), and your data is encrypted at rest by our database and file-storage providers. Passwords are never stored — only strong one-way hashes. Card details never touch our servers at all (Stripe holds them). Access to member content is restricted to a small number of authorized accounts, and every staff access to conversation content is itself written to an audit log, as described above.

No method of transmission or storage is completely secure, and we won't pretend otherwise — but when we say your trust comes first, the paragraph above is what that means in practice, and the list is meant to grow.

Coach is not intended for anyone under 13, and we don't knowingly collect data from children under that age. If we learn that someone under 13 has created an account, we'll delete it. Coach also asks whether you're under 18 during onboarding so it can be more cautious with recommendations for users between 13 and 18.

If this changes in a way that matters, we'll update this page and reset the date below.

Effective 1 September 2026.