Privacy policy

• We collect what the app needs to work: your account, the coaches you follow, your progress, what you write and post.
• Your journal is private. Only you can read it. Not other members, and not your coach.
• Community posts and comments are visible to the other members and the team of the coach you posted with.
• No ads, no selling data, no third-party tracking. We don't build advertising profiles.
• Your account data is stored in the European Union (Frankfurt, Germany).
• You can delete your account in the app at any time. It removes your account and personal data, including your community posts.

Coached Days is published by [PUBLISHER NAME], [ADDRESS] (“we”, “us”). We are the data controller for the personal data described here: we decide why and how it is used.

Coached Days is a platform. Independent coaches publish programs and run communities in the app; we provide the tools. Coaches see some of your data inside their own space, as described in Who can see what.

Questions about privacy: support@coacheddays.com.

We only collect data you give us or that the app needs to work. Here is each kind, why we need it, our lawful basis under the GDPR and how long we keep it.

• Your account

  Email address, password, display name and time zone. Your password is stored only as a secure hash by our authentication provider; nobody can read it, including us. Your phone sets your time zone automatically.

  Why

  To sign you in, show your name in the community, and open each program day at your local midnight.

  Lawful basis

  Contract: we need it to provide the app you signed up for.

  Kept

  Until you delete your account.

• Coaches you follow

  Which coaches you have joined and your role in each (member, assistant coach or owner).

  Why

  To show you the right programs and community, and to give coaches and their team the right tools.

  Lawful basis

  Contract.

  Kept

  Until you leave that coach or delete your account.

• Programs and progress

  The programs you started, when you started them, and which lessons you completed.

  Why

  To unlock days in order, remember where you are, and show coaches overall engagement with their programs.

  Lawful basis

  Contract.

  Kept

  Until you delete your account. If a coach deletes a lesson or a whole program, your progress in it is deleted too.

• Journal entries

  What you write in response to journal prompts. Private: only you can read your journal. Coaches only see a count of how many journal entries exist for a lesson, never their content or who wrote them.

  Why

  To keep your reflections for you.

  Lawful basis

  Contract, and your explicit consent for anything sensitive you choose to write (see Sensitive information below).

  Kept

  Until you delete the entry or your account. If a coach deletes the lesson the prompt belongs to, the entry is deleted with it.

• Community posts and comments

  What you post and comment in a coach's community, with your display name and the time.

  Why

  To share it with that coach's community.

  Lawful basis

  Contract, and your explicit consent for anything sensitive you choose to share.

  Kept

  Until you delete it, a moderator removes it, or you delete your account. If it was reported, a copy stays with the report (see Reports and blocks below).

• Reports and blocks

  Content you report and why, and the people you block. When someone reports a post or comment, a copy of the reported text, who wrote it and when is kept with the report, so the coach's moderators can review it even if the post or comment is later deleted. We also record which moderator handled the report and when.

  Why

  To keep communities safe: moderators review reports, and blocked people's posts are hidden from you.

  Lawful basis

  Legitimate interests: keeping the community safe, and our legal duties about illegal content.

  Kept

  Reports, with the copy of the reported text, as long as needed for moderation and safety, also after the post or comment itself is deleted; blocks until you unblock. Reports you made and your blocks are deleted with your account.

• Push notification tokens

  A token for your device that lets us send notifications to it.

  Why

  To deliver notifications you agreed to, such as messages from your coach.

  Lawful basis

  Consent: your phone asks before notifications are turned on, and you can switch them off in your phone's settings.

  Kept

  Until you sign out on that device, switch notifications off, or delete your account.

• Bug reports

  What you write in a bug report, plus your device model, operating system version and app version. Bug reports sent from inside a coach's space are visible to that coach's team as well.

  Why

  To find and fix problems.

  Lawful basis

  Legitimate interests: keeping the app working.

  Kept

  As long as needed to fix the problem. When you delete your account, the link between the report and your account is removed.

• Purchases (when paid programs launch)

  Which program you bought, when, and whether the purchase is active or refunded. Payments go through Apple or Google; we never see your card or bank details.

  Why

  To give you access to what you bought, and for accounting.

  Lawful basis

  Contract, and legal obligation (tax and accounting records).

  Kept

  As long as accounting and tax law require.

• Coach applications

  If you apply as a coach: your name, email, coaching business, website or social link and your message.

  Why

  To review your application and get in touch.

  Lawful basis

  Steps before entering a contract, at your request.

  Kept

  While we review it. If we don't work together, we delete it within 12 months.

• Technical logs

  When your app or browser talks to our servers, our providers record technical details such as IP address, time and device or browser type.

  Why

  Security, preventing abuse, and troubleshooting.

  Lawful basis

  Legitimate interests: keeping the service secure and reliable.

  Kept

  For a short period set by each provider, typically days to a few weeks.

Sensitive information

Journal entries and posts can reveal sensitive things, such as your health or how you feel. You decide what to write. We process it only to store it for you and show it where you shared it, based on your explicit consent, which you give by writing it. You can withdraw that consent at any time by deleting the entry, the post or your account.

Cookies on this website

This website uses only the cookies needed to keep coaches signed in to the dashboard. We use no analytics, advertising or tracking cookies, so there is no cookie banner. The phone app contains no advertising or tracking software.

• We don't show ads, and we don't sell or rent your data to anyone.
• We don't use third-party trackers or advertising networks.
• We don't make automated decisions about you that have legal or similarly significant effects.
• We don't read your journal.

Other members of a coach

Your display name and the posts and comments you share in that coach's community. Members of other coaches see nothing.

The coach and their team

Your display name, your role and when you joined; your posts and comments; reports about content in their community; bug reports sent from their space; and engagement statistics for their programs, such as how many members completed a lesson. They do not see your email address, your password or your journal.

Our team

A small team runs Coached Days. We access personal data only when needed to support you, handle a report, keep the service secure or meet a legal obligation.

Authorities

We share data with authorities only when the law requires it, for example under a valid court order.

We use a few trusted providers to run Coached Days. They process data only on our instructions, under data processing agreements, and only for the purpose listed.

• Supabase: database, sign-in and file storage (audio, PDFs, images). Your account, progress, journal and community data are stored in the EU, in Frankfurt, Germany.
• Bunny.net (BunnyWay d.o.o., Slovenia, EU): video hosting and streaming. Videos are delivered through a global network, so when you watch, a nearby server receives your IP address to send you the video.
• Expo (650 Industries, Inc., USA): sends push notifications to Apple's and Google's notification services. It receives your device's push token and the notification text.
• Apple and Google: distribute the app, deliver notifications to your phone and process in-app purchases. For those parts they act under their own privacy policies.
• Website hosting: the provider that serves this website. To be confirmed before launch.

We may add providers later, for example an email service to send sign-in and account emails, or an error monitoring service to find crashes. We will list each one here, with its purpose and location, before we start using it.

Transfers outside the EU

Some providers, or companies in their groups, are based outside the European Economic Area, for example in the USA. When data is transferred there, we rely on safeguards the GDPR recognises, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework. Contact us for a copy of the relevant safeguards.

We keep personal data only as long as we need it for the purposes above. The “Kept” line for each kind of data shows the details. In short:

• Most data is kept while your account exists and is deleted when you delete your account.
• Deleted data disappears from our live systems straight away and from backups within 30 days, as backups expire.
• Purchase records are kept as long as accounting and tax law require.
• Bug reports are kept without the link to your account.

Under data protection law, including the GDPR, you have the right to:

• Access the personal data we hold about you and get a copy.
• Correct data that is wrong or incomplete.
• Delete your data (“right to be forgotten”).
• Export your data in a common, machine-readable format (portability).
• Restrict or object to how we use your data, including where we rely on legitimate interests.
• Withdraw consent at any time, for example by turning off notifications or deleting a journal entry.
• Complain to a data protection authority, in the country where you live or work or in [COUNTRY / GOVERNING LAW]. We'd appreciate the chance to sort it out first.

You can delete your account yourself in the app (see below). For everything else, email support@coacheddays.com from the address you use with Coached Days, so we can confirm it's you. We reply within one month, and it's free.

In the app, open the Me tab and choose Delete account. This permanently removes your account and personal data: your profile, coach memberships, programs and progress, journal, community posts and comments, reports, blocks and push tokens. It can't be undone.

• Your community posts and comments are deleted with your account, including the replies under your posts. If one of them was reported, the copy kept with the report stays as long as needed for moderation and safety.
• Bug reports stay, without the link to your account.
• Purchase records we must keep by law stay for as long as the law requires.
• Deleting your account does not cancel a subscription with Apple or Google. Cancel it in your App Store or Google Play account settings.

If you can't open the app, email support@coacheddays.com from your account's email address and we'll delete it for you. More help on the support page.

• All connections to the app and website are encrypted (HTTPS).
• Database rules enforce who can see what, so a member of one coach can never read another coach's community or anyone's journal.
• Passwords are stored only as secure hashes.
• Videos, audio and files are delivered through short-lived links that work only for members allowed to open them.
• Only the people who run Coached Days can reach the systems behind it, and only when needed.

Coached Days is not meant for children. You must be at least 16 years old to create an account. If you believe a child has given us personal data, contact us and we will delete it.

When we change this policy, we update the date at the top. If a change is significant, we'll tell you in the app before it takes effect.

[PUBLISHER NAME]
[ADDRESS]
Email: support@coacheddays.com