Privacy Policy
Last updated: March 22, 2026
1. Information We Collect
We collect information you provide directly when using Elevate:
- Account information: name, email address, and password
- Client profiles: name, contact info, physical stats, training history, injuries, and goals (entered by trainers)
- Training data: workout plans, exercise logs, and progress notes
- Usage data: how you interact with the Service
2. How We Use Your Information
We use collected information to:
- Provide and maintain the Service
- Generate personalized training plans
- Send workout reminders and notifications (with your consent)
- Improve the Service and develop new features
- Respond to support requests
3. Data Storage & Security
Your data is stored securely using industry-standard encryption. We use Supabase for database hosting, which provides enterprise-grade security including row-level security policies, encrypted connections, and regular backups. Client data is isolated per trainer and is never shared across accounts.
4. AI & Plan Generation
When you generate a training plan, client profile data (age, stats, goals, injuries, equipment access) is sent to our AI provider to create a personalized program. This data is used only for the specific generation request and is not stored by the AI provider for training or other purposes.
5. Data Sharing
We do not sell your personal information. We share data only with:
- Service providers: hosting, authentication, and payment processing partners
- Trainer ↔ Client: clients can view their own profiles and published training plans
- Legal requirements: when required by law or to protect our rights
6. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate information
- Delete your account and associated data
- Export your data
- Opt out of non-essential communications
Trainers can delete client profiles at any time. Clients can request account deletion through their portal settings.
7. Cookies & Tracking
We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising pixels.
8. Data Retention
We retain your data for as long as your account is active. When you delete your account, all personal data is permanently removed within 30 days. Aggregated, anonymized data may be retained for analytics purposes.
9. Children's Privacy
The Service is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes via email or in-app notification.
11. Contact
For privacy-related questions or requests, contact us at privacy@elevate.com.