Privacy policy

What we collect

Only what the service actually needs:

• Your name, email address and a salted hash of your password — never the password itself.
• Messages you send us through contact, consultation or application forms.
• Reviews you choose to submit: your name (shown publicly only in the form you pick — first name, first name and last initial, or anonymous), your rating, your words and any result line. A review is published only after moderation and only when you've agreed to public display — your email stays private for verification and is never shown publicly.
• Membership billing state (plan, status, renewal dates) — when online payments are enabled, payment card details will be handled entirely by our payment provider and never reach our servers.
• If you use the member area's tracking features: the measurements, goals and notes you or your coach record, plus workout completion history.
• Technical basics needed to keep you signed in: an essential session cookie that expires after 8 hours.

What we don't do

We do not sell or share your data for marketing. There are no third-party analytics, advertising or social-media trackers on this site — nothing records your behaviour across other websites.

We do not use your data for automated decision-making or profiling, and the site's assistant is a local, rule-based helper: your questions are answered from site content without being sent to an external AI service.

Who processes your data and why

Your data is processed only to run the service you asked for — delivering your membership, answering your messages, sending transactional email (password resets, booking confirmations, reminders) and keeping the platform secure.

• Vercel — hosting for the site and its database connection.
• Stripe (used once online billing is enabled) — subscription payments. Card data stays with Stripe; we receive payment status only.
• Resend — delivery of transactional emails such as password resets.
• Our email address and WhatsApp — where your messages actually land with a human.

Cookies

One essential cookie keeps you signed in (HttpOnly, expires in 8 hours, deleted on sign-out). If you dismiss the 'install app' prompt, that choice is stored locally in your browser only. No tracking or advertising cookies are used.

How long we keep it

Account and enquiry data is kept while your account exists or while we're in conversation about coaching. You can delete your account at any time from your account page; subscription payment records are retained only as long as needed for the business's accounting.

Your choices and rights

You can export a copy of your data or delete your account directly from your account page. You can also ask us to access, correct or remove anything else we hold about you — just get in touch and we'll action it. Depending on where you live, data-protection law may give you additional rights; ask and we'll explain what applies to you.

Security

Passwords are stored only as salted hashes. Sessions use signed, HttpOnly cookies. Access to premium content and private records is checked on the server on every request, and your private records are only ever readable by your own signed-in account (and by your coach where you've shared them for coaching).

No system is perfectly secure — if we ever discover a problem that affects you, we'll tell you.

Changes and contact

If this policy changes materially, we'll update this page and, for active members, communicate the change. Questions about your data? Use the contact page or email manasa@feelalivefitness.net — a human will reply.