Encrypted
Every connection runs over HTTPS and the database is encrypted at rest. Sensitive health details are encrypted a second time inside the app.
Client health data stays private.
Encrypted, shared only with consent and never sold. This is how we protect the people we coach, and the programs we work beside.
Four rules every record follows.
Shared only with consent
Clients consent to each kind of data before we use it, and can withdraw at any time. A clinic team sees progress reports only when the client agrees.
Never sold
We never sell personal or health data, to anyone.
Owned by the client
Clients can see, correct, export or delete their data. A deletion request is completed within 30 days, unless the law or a legitimate business need requires us to keep it.
Layers around every record.
ConsentAccessEncryptedFieldsClient record
Shared only with consent
Data reaches a clinic team or an AI tool only under the consent the client gave for it.
Access set by role
Each person sees what their role needs. Staff accounts use two-step sign in, and access is logged and watched for anything unusual.
Encrypted in storage and on the way
The database is encrypted at rest, and every connection runs over HTTPS.
Health details encrypted again
Allergies, diagnoses and other sensitive health details are encrypted inside the app before they are stored.
AI, with limits.
AI helps our coaches read lab results and build plans. These limits hold every time.
Asked first
Opti, the assistant in the app, asks the client before it uses AI, and waits for a yes.
Never trained on
Nothing a client shares is used to train AI models.
A person on request
Any client can ask for a human review of a plan AI helped build.
Where the data lives.
Stored in the United States, with providers held to our privacy policy. Records are kept through the coaching and for seven years after, as with medical records.
- Database and hosting
- Supabase, Railway
- AI
- Anthropic, OpenAI
- Lab result files
- Google Drive
- Wearables, when connected
- Garmin, WHOOP
- Call recordings, with consent
- Fathom
- Texts with Opti, opt in
- Twilio
- Team operations
- Airtable, Slack (alerts only, never full health records)
The full list of providers
This website holds no client health data. Applying sends your answers to HubSpot so we can book a call; everything else stays behind the client app's sign in.