Consumer Health Data Privacy Policy

Your health data and your rights.

This policy explains how Coachable LLC handles consumer health data and how you can exercise your rights under applicable health-data privacy laws, including Washington’s My Health My Data Act.

Last updated: October 21, 2026

1. Health data we collect and why

Coachable LLC collects the following consumer health data when you provide it or authorize a feature that needs it:

  • We collect fitness goals, exercise history, injuries, limitations, and physical measurements to create and adapt training plans.
  • We collect meals, meal photos, hydration, dietary preferences, and nutrition goals to estimate intake and personalize meal plans.
  • We collect sleep, heart-rate variability, resting heart rate, recovery activity, stress, energy, and readiness information to adjust coaching and recovery recommendations.
  • We collect biological sex, reproductive or pregnancy status, menstrual information, and cycle context when you choose to provide them or authorize a supported connection. We use them to tailor coaching to the context you provide.
  • Where an upload or connection feature is available, we collect the biomarker and laboratory information you choose to provide for wellness context and summaries.
  • We collect health information in coaching messages, check-ins, notes, and AI reports. We use it to respond, maintain coaching memory, investigate reports, and correct safety problems.

We also derive information from these records, such as nutrition estimates, readiness trends, and recommendations. We associate health records with your account to provide the requested features. We use limited technical records to secure the service and investigate failures. We do not use consumer health data for advertising, employment decisions, or data-broker products.

2. Where health data comes from

We receive health data directly from you, from your activity in Coachable, and from your device or services you authorize, such as Apple Health, Health Connect, or supported wearable and laboratory connections. We generate additional health-related estimates and inferences from that information through calculations and AI processing.

3. Health data categories disclosed to each recipient

We disclose the following categories when they are needed for the service you request:

  • Vercel: Account identifiers, request metadata, and the health categories submitted through Coachable pass through our application hosting. Vercel Blob stores profile photos and the limited deletion records described in our Privacy Policy.
  • Neon: Our database and authentication provider stores account-linked profile, fitness, injury, body, nutrition, meal-photo, sleep, heart, recovery, reproductive, biomarker, message, plan, and derived health information.
  • Vercel AI Gateway and Google Gemini providers: An AI request includes your message or photo and the subset of profile, plan, nutrition, fitness, recovery, or connected-health context needed for the feature you request. We configure current AI routes to require zero data retention.
  • Resend: Our email provider receives your email address and the information you put in a support or privacy email. Automated AI-report notifications contain a report reference and exclude the report text, health details, and reporter email.
  • Expo, Apple, and Google notification services:These providers receive a device token, notification text, and routing information when you enable notifications. A reminder can reveal that you use a fitness, nutrition, or recovery feature.
  • YouTube or Vimeo: A video thumbnail or player can disclose network and device information, playback activity, and the selected video. The video choice can reveal a fitness, nutrition, or recovery interest.

Authorized Coachable staff can review health information you include in a support request or AI report. We may also disclose health data to a recipient you direct us to use, to authorities or parties entitled to it under applicable law, or as part of a qualifying business transfer subject to applicable health-data protections.

If you voluntarily join an organization challenge, other eligible participants and organization administrators can see your display name, team, rank, and qualifying workout count. They do not receive workout contents, private coaching conversations, or connected health metrics through that leaderboard. Ordinary employer reports use aggregate engagement with minimum cohort thresholds. You can disable “Share aggregate engagement” in settings.

Coachable does not write health data to Apple Health or Health Connect. We do not sell consumer health data. Coachable has no corporate affiliate that receives consumer health data.

5. Your health-data rights

You may ask us to confirm whether we collect or disclose your consumer health data, access that data, obtain a list of third parties and affiliates with whom we shared it and their contact details, withdraw consent, or delete the data, as provided by applicable law. We do not require account deletion to submit a request about particular health data.

Email hello@meetcoachable.com with the subject “Health Data Privacy Request” and identify your account email. Do not send health records or identity documents in your initial message. We may verify your identity before completing a request. You can also follow our account deletion instructions to request deletion of your account and associated health data.

We respond without undue delay and within 45 days after receiving a request. We may extend that period once by 45 days when reasonably necessary, and we will explain the extension during the initial period. We respond to an appeal within 45 days. Requests are free up to twice per year, subject to limits allowed by law for unfounded, excessive, or repetitive requests.

Revoke Apple Health and Health Connect permissions in device settings, or disconnect a supported integration in Coachable, to stop future collection from that connection. Disconnecting does not automatically remove previously saved records. Contact us to request their deletion or withdraw consent for other processing. A feature that needs the affected data may become unavailable.

If we deny a request, reply to our decision and ask for an appeal. We will explain the outcome and applicable complaint options. You may also contact the Washington Attorney General or your state’s relevant authority. We will not discriminate against you for exercising these rights.

6. Changes to this policy

We will post updates here and revise the “Last updated” date. We will email the address associated with your account about material changes and when they take effect. When a change requires your consent, we will obtain it before collecting or sharing your health data under that change.