HYBRIDCoach

Privacy Policy

Last updated: February 5, 2026

Your privacy is important to us. This Privacy Policy explains how HYBRID Coach ("we", "our", or "us") collects, uses, and protects your personal information when you use our platform.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, password (encrypted)
• Profile Information: Photo, bio, certifications, specialties
• Fitness Data: Workout logs, personal records, goals, training preferences
• Communication Data: Messages between athletes and coaches
• Payment Information: Processed securely through Stripe (we don't store card details)

Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, error logs

2. How We Use Your Information

Purpose	Legal Basis (GDPR)
Provide coaching services	Contract performance
Process payments	Contract performance
Send important notifications	Legitimate interest
Improve our service	Legitimate interest
Marketing communications	Consent
Prevent fraud and abuse	Legitimate interest

3. Data Sharing

We may share your information with:

• Your Coach/Athletes: To facilitate the coaching relationship
• Service Providers: Stripe (payments), Resend (email), Neon (database hosting)
• Legal Requirements: When required by law or to protect our rights

We never sell your personal data to third parties.

4. Data Security

We implement industry-standard security measures:

• All data transmitted over HTTPS encryption
• Passwords hashed using scrypt algorithm
• Database hosted in secure, SOC 2 compliant infrastructure
• Regular security audits and updates
• Access controls and authentication requirements

5. Data Retention

We retain your data for as long as your account is active. After account deletion:

• Personal data is deleted within 30 days
• Anonymized analytics data may be retained
• Legal/financial records retained as required by law

6. Your Rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing at any time

To exercise these rights, contact us at privacy@the-hybrid-coach.com

7. Cookies

We use essential cookies for:

• Session management (keeping you logged in)
• Security (CSRF protection)
• User preferences (theme settings)

We do not use third-party tracking cookies or advertising cookies.

8. Push Notifications

With your consent, we may send push notifications for:

• New messages from your coach/athletes
• Workout reminders
• Achievement celebrations

You can disable notifications in your browser or device settings at any time.

9. International Transfers

Your data may be processed in countries outside the EU. We ensure appropriate safeguards are in place through:

• Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Service providers with appropriate certifications

10. Children's Privacy

HYBRID Coach is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform. Your continued use after changes constitutes acceptance.