Privacy Policy

1. Information we collect

Your account

Your name, email address, password and whether you are a coach or a client, and when you agreed to our Terms of Service and which version. Your password is stored only as a secure hash by our sign-in provider; we never see it. You can also add a phone number, an Instagram handle and a profile photo.

Coaching information you provide

• Intake: goals, training history and schedule, weight, height, age, sex, body fat, activity level, diet preferences, allergies, injuries, medical conditions, medications and notes. Coaches can add their own questions, so they may ask about other topics; answer only what you are comfortable sharing.
• Check-ins: weight, body fat, body measurements, progress photos, ratings for sleep, energy, hunger, stress and mood, pain and where it is, digestion, cravings, notes, an optional attached image or PDF, and answers to your coach's questions. If it applies to you and your coach has it turned on, your menstrual cycle phase.
• Nutrition and training: food logs, meal plans, workouts and your results (weights, reps, effort ratings, notes), form-check videos you upload, personal records and one-rep maxes.
• Health records you choose to add: bloodwork results and lab reports, body-composition scans such as DEXA or InBody, supplements, injuries and competition plans.
• Messages between you and your coach, and messages you send in a group chat your coach adds you to.
• Programs you get from your coach: which program, when, the amount paid and until when you have access. Your coach sees this.
• Your gym: the gyms you train at, equipment you report for them, and gym check-ins. See Section 6.
• Past habit entries: if you used our former habit tracker, your earlier entries remain part of your account data until you delete your account.

Health Connect (Android, optional)

If you connect Google Health Connect, we read steps, distance, active calories burned, exercise sessions and weight. See Section 7.

Coach information

Profile details, bio, logo, brand colors and app name; the images you choose for your clients' app, such as the splash screen, wallpaper and card backgrounds, which your clients see; your public landing page, including any testimonials and photos you publish; your web address; and your Paragon Plus subscription status. If you bill clients through Paragon, Stripe collects your identity and bank details directly; we store only your Stripe account ID and its status.

Information about people without an account

• Inquiries: when someone contacts a coach through the coach's landing page, we collect their name, email address and message and send them to that coach. To limit spam we also store a one-way hash derived from the sender's IP address, not the address itself.
• Invitations: when a coach invites someone, we store the email address and name the coach entered and the invitation's status, and send an invitation email. Invitation emails contain a small image that tells the coach whether the email was opened.
• Testimonials and before-and-after photos that a coach publishes are the coach's responsibility, including having permission from the people shown.

Collected automatically

• Usage analytics: which pages and features are used, linked to a random account ID, your role, your coach's account ID and your plan type. We do not send your name or email for analytics, record your screen, or send health values; a check-in is recorded only as having happened, with details such as whether it included photos.
• How you found us (coaches): if you reach coach sign-up from an ad or a tagged link, we keep that link's campaign tags (such as utm_source) and the name of the website that sent you (for example instagram.com) with your account. We do not record the page you were on there.
• Error reports: technical details when something goes wrong, such as the error, the page and your device type. Before a report is sent, the App removes email addresses, sign-in tokens and account IDs from all of it. An error message can still occasionally include other text that was on screen when it happened.
• Device information: your notification token if you turn on notifications, your browser or device type, and your time zone so reminders arrive at the right local time.
• Server logs: our hosting providers keep standard technical logs such as IP addresses and request times.

2. How we use information

• To provide coaching through the App: sharing what you enter with your coach, calculating nutrition targets, tracking progress and delivering the plans and programs your coach creates.
• To send the reminders, notifications and emails described in Section 9.
• To process payments for Paragon Plus, coaching packages and programs.
• To run the AI features described in Section 5, when your coach or you use them.
• To keep the App secure: preventing abuse and spam, limiting repeated requests, and investigating problems.
• To find and fix errors and understand which features are used, so we can improve the App.
• To meet legal obligations, such as keeping payment records.

We do not sell your information, do not use your account or coaching information for advertising, and do not use it to train AI models. We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

3. Who can see your information

If your coach pauses (archives) your account, nothing is deleted and your coach keeps access to your history. What happens when a coach releases you, or leaves Paragon, is covered in Section 10.

In a group chat, anyone can report a message to the coach who runs the group, or hide another member's messages from their own view. The coach can delete any message and remove people. When a message is deleted its text is erased. If you leave a group, messages you sent stay in it until you or the coach delete them; if you are removed from a coach's client list or delete your account, the messages you sent in their groups are deleted.

If you move to a different coach, your coaching records move with you and your former coach can no longer see them. Your former coach keeps the messages the two of you exchanged and any private notes they wrote. Those messages stay in your account and are included when you export your data, though the chat screen shows only your conversation with your current coach.

For coaches: other coaches cannot see your profile or email address. Your clients see the name, photo and branding you choose to show them, and your landing page is public. If you sign up through another coach's referral link, that coach sees your display name and whether you have paid for Plus yet, so they know when their free month is due, and you see their display name.

We may disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of our business, in which case this policy would continue to apply to your information.

4. Service providers

These companies process information on our behalf, only to provide their service to us.

5. AI features

Some features use Claude, an AI model from Anthropic, to help with coaching. They run only when you or your coach use them:

• Drafting follow-up messages, suggesting replies to messages and spotting patterns in check-ins.
• Reading uploaded bloodwork and body-scan reports, and analyzing bloodwork results.
• Turning a coach's written workout into a structured program.

To do this, the information the feature needs is sent to Anthropic. Depending on the feature, that can include body stats, check-ins and measurements, training and injury history, recent messages with your coach, menstrual cycle notes, and for lab features the uploaded report together with medical conditions, medications and supplements.

Your name is not sent. The App refers to you as "the client" and adds your first name back into the result before your coach sees it. Words you or your coach wrote, such as a message being replied to or a check-in note, are sent as written, so a name that appears in them is sent too.

Anthropic uses this information to return a result. Under its commercial terms it does not use it to train its models. AI output is a suggestion for your coach to review. It is not medical advice.

6. Location and gym check-ins

If you set a home gym, you can check in when you train there. To confirm you are actually at that gym, the App asks your device for its precise location: its GPS coordinates and how accurate that reading is.

When we read your location

• Only while the App is open: when you start a workout, and on the My gym screen. Once you have allowed location access, the App takes one reading when you start a workout (and when My gym opens) and checks you in if you are there, so you do not have to tap anything else.
• The App asks for location permission at most once on its own: the first time you start a workout after setting a home gym. If you decline, it does not ask again. You can allow it later from My gym or your device settings.
• You can turn automatic check-in off in My gym. With it off, the App reads your location only when you tap to check in there.
• Never in the background, never continuously, and never while the App is closed. The App does not request background location permission.

What we keep

• For each check-in: the date and time, whether it was verified, how far you were from the gym in meters, and how precise the reading was. A visit counts as verified only when the reading is precise to within 200 meters and you are within 400 meters of the gym.
• We do not store your coordinates against your account.
• A gym you pick from Google Maps search gets its address and location from Google. For a gym added by hand that has no location on file yet, the first precise check-in sets it, so later check-ins can be compared with it. A gym's location is used only by our servers to check visits. It is not shown to anyone, including other people who train at that gym, and we do not record who set it.

Who can see it

• You and your coach can see your check-ins, including when each one happened and how far from the gym you were.
• Gym leaderboard (optional, off by default): if you turn on "Show me on this board", other people who train at the same gym, including clients of other coaches, see your first name, last initial, points, number of visits, workouts completed and streak. Only people who have that gym set in the App can see its board. They never see your location, distances, workout details or any health data. You can turn it off at any time.
• Equipment you report for a gym becomes part of that gym's shared equipment list, which other Paragon users can see. Your name is not shown with it.
• The name, city and any address you enter for a gym you add are visible to other Paragon users so they can find the same gym. Do not enter your home address for a home gym.

Your choices

• Location is optional. If you decline, you can still check in from My gym; the visit is recorded as unverified and earns fewer points. Starting a workout without location does not check you in.
• If a precise reading shows you are not at the gym, nothing is recorded at all. If you tapped to check in, the App tells you so.
• You can turn location access off at any time: on Android in this app's permissions in your device settings, and in a browser in the site's settings.
• Undo removes that day's check-in. Deleting your account deletes all of your check-ins.

Location data is never sold, never shared with third parties, never used for advertising and never used to train machine-learning models. It is stored with our database provider (Supabase) under the same protections as the rest of your account.

7. Google Health Connect

On Android you can choose to connect Google Health Connect. With your permission we read these data types and nothing else: steps, distance, active calories burned, exercise sessions, and weight. We do not read heart rate, sleep or any other Health Connect data type, and we never write to Health Connect.

We use this data to show you and your coach your daily activity and an estimate of the calories you burn. You see today's steps and calories burned on your Today screen and under Profile, and your recent days and workouts in your activity history. When the device reports no active calories, the App estimates them from your steps, distance and body weight and labels the number as an estimate.

Each time the App reads your data on your phone, it saves the daily totals for the last 7 days to your account: steps, distance and active calories, and for each exercise session its type, start time, duration, calories and distance. That is so your coach can see them, your activity history can show them, and the same numbers appear when you open the App in a browser. It is stored with the rest of your coaching information and shared only with your coach. We do not sell it, use it for advertising or use it to train AI models.

Weight readings, for example from a smart scale, become your daily weigh-in on your Today screen. We save at most one reading a day (the first of the day) to your account, and never replace a weight you typed in yourself.

Our use of information received from Health Connect complies with the Health Connect Permissions policy, including its Limited Use requirements.

You can stop sharing at any time in your device's Health Connect settings. Deleting your account deletes the Health Connect data we have stored.

8. Information stored on your device

• Sign-in and preferences: the App keeps your sign-in session and settings such as theme and units in your browser's or device's local storage.
• Drafts and offline changes: unsent check-ins, workouts and intake answers, which can include health and medical information, are saved on your device so you do not lose them, and changes you make without a connection are queued there until they can be sent.
• Coach dashboard (coaches only): so the dashboard opens at once, the App keeps a copy of what it last showed on the coach's device, such as the client list, recent check-ins and message previews, which can include clients' health information. Signing out removes it, and it is discarded after a week unused.
• Biometric sign-in (Android, optional): if you turn it on, your email and password are stored in your phone's secure Android Keystore and unlocked by your fingerprint or face. Your biometric data stays on your phone; we never receive it.
• Analytics: our analytics provider stores a random identifier in your browser to recognize repeat visits.

We do not use advertising cookies or advertising pixels in the App or on coaches' sites. Our marketing website, paragon-strength.com, uses the Meta Pixel to measure which of our ads bring coaches to it, as described in Section 4. Visitors in the EEA, UK and Switzerland are asked first and it does not load unless they agree. Everyone else can turn it off with Your privacy choices at the bottom of the website, and it stays off for any browser that sends a Global Privacy Control signal. Exercise demo videos play from YouTube in its privacy-enhanced mode, and YouTube can store information in your browser once a video plays, as described in Section 4.

9. Emails and notifications

We send emails about your account and coaching, such as invitations, reminders, password resets, coach replies, payment notices and, for coaches, new sign-ups, check-ins, inquiries, client payments and digests. We do not send marketing emails.

• Emails that tell a coach about a new check-in include check-in details such as weight, body fat and notes.
• Non-essential emails include an unsubscribe link. If you unsubscribe, or an email to you bounces or is marked as spam, we keep your email address on a suppression list so we do not send to it again.
• Push notifications can include your name and short previews, such as a workout's title or the first line of your coach's reply or feedback. On Android they are delivered through Google Firebase Cloud Messaging. You can turn notifications off in the App or in your device settings.

10. How long we keep information

We keep your information while your account is active, with one exception:

Form-check videos

A form-check video a client uploads is deleted 120 days after it was uploaded, unless their coach chooses to keep it. Before then, the coach sees the date it will be deleted. This applies to videos uploaded from September 24, 2026 on. Exercise demo videos a coach uploads are not deleted this way.

When you delete your account

Deletion starts immediately when you confirm it. Your account, coaching information, photos, files and uploaded videos are deleted at that time, and any subscriptions are cancelled. If a storage provider fails to delete a file, it is no longer linked to your account, and we delete it when we find it. Some records are kept afterwards:

• Payment records held by Stripe, and our records of platform fees, as tax and accounting rules require.
• Your email address on our email suppression list, if it is on it, so we never email you again.
• Security and audit logs. Most are deleted automatically within 180 days; records of actions taken by Paragon administrators are kept longer.
• Error reports and analytics events, under our providers' retention periods.
• Database backups, which are overwritten after a limited period.

When your coach releases you

The coaching information tied to that coaching relationship, including check-ins, logs, messages, health records and gym check-ins, is deleted immediately. Your login remains so you can work with another coach, and photos and videos you uploaded stay in your account until you delete it (form-check videos are still deleted 120 days after upload, as described above). Your former coach may keep records they need for their own business, such as payment records and notes they wrote.

When your coach leaves Paragon

If your coach deletes their account, your account and coaching records stay, and a new coach can invite you. Your messages with that coach, and their private notes and templates, are deleted with their account.

Inquiries and invitations

Inquiries sent through a coach's landing page are kept until the coach deletes them. Invitation records stay with the coach who sent them, and are removed if that coach later releases the person they invited.

11. Security

• Every connection uses HTTPS, and browsers are told to use it for all our sites.
• Database rules restrict every table so each person can reach only the records they are allowed to see.
• Check-in photos, documents and reports are kept in private storage and shown through links that expire after an hour.
• Passwords are stored only as secure hashes, sign-in tokens are cryptographically signed, and repeated requests are limited to slow down abuse.
• The Android app refuses unencrypted connections and excludes your data from device backups.

Some content is public by design: profile photos and the images a coach publishes on their landing page or sign-in screen can be viewed by anyone with the link. Uploaded videos are streamed from links that are not published or searchable, but anyone who has a video's link can play it.

No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

12. Your choices and rights

• Access and export: in Settings you can export all of your coaching information as CSV or JSON: profile and intake, check-ins, nutrition, training, body and health records, messages, supplements, contest prep and gym activity. Photos and videos are listed by reference; for copies of the files themselves, email us.
• Correct: you can edit most information in the App, or ask us or your coach to correct it.
• Delete: sign in on Android or in any browser and go to Settings, or email us. paragon-strength.com/delete-account explains both. If your coach has paused your account, Settings is not available to you, so email us.
• Control optional features: notifications, emails, location, Health Connect and the gym leaderboard can each be turned off at any time.
• Subscriptions: manage or cancel them in the App under Settings.

California residents

You have the right to know what personal information we collect and how we use it, to delete it, to correct it, and to not be discriminated against for exercising these rights. We do not sell personal information, and we use sensitive information only to provide the service. The Meta Pixel on our marketing website (not the App) can count as "sharing" for cross-context behavioral advertising: you can opt out with Your privacy choices at the bottom of the website, and we treat a Global Privacy Control signal as that opt-out. You can use an authorised agent to make a request.

EEA, UK and Switzerland

We process information to provide the service you signed up for; with your consent for health information and optional features such as location and Health Connect; and for our legitimate interests in keeping the App secure and improving it. You can access, correct, delete, restrict or object to processing, ask for your data in a portable format, withdraw consent at any time without affecting earlier processing, and complain to your local data protection authority.

To make a request, email admin@paragon-strength.com. We may need to confirm your identity, and we respond within the time the law requires, usually within 30 days.

13. Where information is stored

Our database and file storage are in the United States. Some providers in Section 4 process information in other countries. If you use the App from outside the United States, your information is transferred there. For transfers from the EEA, UK and Switzerland we rely on the Standard Contractual Clauses or other safeguards approved for that purpose.

14. Children

The App is for adults aged 18 and over and is not directed to children. If you believe someone under 18 has an account, email us and we will delete it.

15. Changes to this policy

When we update this policy, we change the date at the top. If a change materially affects how we handle your information, we will tell you in the App or by email before it takes effect.

16. Contact

Questions or requests about privacy: admin@paragon-strength.com. For questions about how your coach uses your information, you can also ask your coach.