Privacy Policy.

Most of the site works without an account. The free tools and calculators are all open.

If you create an account, I store your email address and any name you provide. You can sign in using an email link or an available sign-in provider, including Google or Apple. If you set a password, Supabase handles the password credentials; I do not store a readable copy. During setup I also collect the profile details you enter: your goals, activity level, and body metrics (things like age, height, and weight). Your account stores what you save as you use the site: calculator and tool results, AI plan history, tool flow progress, and, if you are on Pro, Your Corner chat messages (what you asked and what it answered, so the conversation is there next time). The mental health check-in is the exception: your answers there are never stored, though they are sent to Anthropic to generate that one response, the same as the other AI features below. You control what you fill in, and you can edit or clear it in settings.

If you donate, subscribe to Pro, or pay for 1:1 coaching, Stripe handles the payment, so I never see your full card details. Donation records saved by an earlier version of the app may still be held. For Pro, Stripe tells me your subscription status and renewal date so the app knows to unlock Pro features; I do not store your card number.

The coaching application is the longest form on the site, so it is worth being specific: it asks for your name and email, the goal you are working toward and what has not worked before, and optionally your training experience, age, height, weight, and anything to work around. If you become a client, the intake form afterward asks a lot more: how long you have trained, your days and time per session, preferred training days, where you will train and what equipment you have, how you feel about cardio, how you eat (meals per day, cooking skill, dietary restrictions), your sleep and stress levels, what a normal week looks like and what keeps tripping you up, past coaching experience, supplements you take, your preferred check-in day, how you want to be held accountable, and any notes you add. That is real detail about your body and your health, you are handing it to me on purpose, and I hold it so I can actually coach you.

If you become a coaching client, I save the intake answers you provide, including your training routine, food preferences, sleep, stress, injuries, supplements and other notes. The form saves your progress before you finish it. This is coaching information, not a medical examination or clearance to exercise.

At coaching checkout, I record the name you type, when you accept, and which version of each document you accept: the Terms, this Privacy Policy, the coaching agreement, the liability waiver, the coaching privacy addendum, and the health screen acknowledgment.

Beyond that, here is the rest of it in one place, so nothing is collected that this page does not name:

• The contact form. Your name, email, subject, and message are saved, not just emailed to me.
• The coaching waitlist. Your name, email, and any note you leave.
• Cancellation feedback. If you cancel Pro and tell me why, the reason and any comment are saved.
• Feedback answers. If you fill out the feedback form, your answers and whether I may email you about them are saved with your account, and I read them myself. They are deleted with your account.
• A profile photo, if you upload one. It is stored at a public URL. Anyone with that URL can open the image, so do not upload something you would not want reachable.
• Email records. Your address, which topics you opted into, and a log of what was sent to you. That log records whether an email was opened and whether a link in it was clicked, which Resend reports back to me.
• Subscription records. When you start Pro I keep a record of the price and renewal terms you were shown, and if you claim the free Pro week I keep a note that it was used; both are kept for 3 years after an account closes.
• Usage analytics I keep myself. Separately from Vercel, my own database records page views, and events like a calculator being run, saved, or exported, a share being created, a prompt or upsell being shown or clicked, and a returning visit. Each row carries the tab id described below when the event happened in a tab, plus your account id if you are signed in; an event my server generates on its own may carry neither. Events from a tab also carry where that visit came from: the campaign tag in the link you followed (such as utm_source), the ad platform's name, the website that sent you, or "direct". For visits that arrive by an ad link, events also carry the campaign name and the ad keyword from that link (utm_campaign and utm_term). Never the ad click id itself. It records that the event happened, not what you typed into it, and, for accounts, how you first found the site, as described under Cookies and storage.
• A log of AI runs. Which feature ran, which model answered, whether it worked, how long it took, and how long the request and reply were. The content of the request and the reply is not in that log.
• Your IP address, for rate limiting. Public forms and the AI endpoints count recent requests per IP so one script cannot flood them. That means your IP is briefly stored as part of a counter.
• Error reports. When a page breaks, the error message, the technical stack trace, the page URL, and your browser version are emailed to me so I can fix it. If you are signed in, the message, the page and your browser version are also saved against your account, along with any plan that failed to build, so I can see what went wrong for you. They are deleted with your account.
• Tool explanations. When you ask what a result means, the explanation is saved against your account with the tool and a fingerprint of the numbers behind it, so asking the same thing again returns the same answer instead of a new one.
• Anything the app writes about your numbers. Flow summaries, a ninety day review, and, if you are a coaching client, the check-in I draft each week. Each one saves the text and the figures it was built from.
• Plan edits you have not applied yet. When you ask the coach to change a plan, the proposed version and the version it would replace are both saved, because undo needs the old one.
• A review request, if you buy one. Your email, your note, and a copy of the plan or numbers you sent me, plus when I resolved it. That copy is separate from the original, so changing the original later does not change what I read.
• Share links you create. A shared result stores its own copy of the numbers and the inputs behind them at a secret web address. That copy is what anyone with the link sees while it is active. Expiring or turning off the link stops public access but does not immediately delete that database copy.
• Your setup answers, your own flows, and what you opened. The answers from the first-run questions, any flow you build yourself, which flows you have finished, how often you asked to repeat a flow, and a short list of tools you used recently so they are easy to get back to.
• Habits, streaks, and what you have dismissed. Your habit names and the dates you ticked them off, your streaks, milestones you have hit, your interface preferences, and which prompts you have waved away. These live with your profile so they follow you between devices.
• Purchases, credits, and allowances. What you bought, any credit on your account, how much of a monthly allowance you have used, and a record of plan generations in progress. The billing details themselves stay with Stripe.
• Security events from Google. If you sign in with Google and Google tells me your account was compromised, disabled, or signed out everywhere, that notice is recorded so I can act on it.

Saving is on by default. Calculating a result normally saves it, along with the numbers you typed, so your history and prefills work without you thinking about it. You can turn that off in settings. Turning off autosave stops automatic tool-result saves. It does not stop other features from saving information you submit, such as plans, chats, profile changes or review requests, and it does not delete information already saved.

• To let you save your data across sessions and devices.
• To power AI features (plans, the plan chat, Your Corner chat on Pro, tool explanations, fix-it plans, flow summaries, the First 12 Weeks intro, coaching check-in drafts, and the mental health check-in): the profile details, tool inputs, and questions you provide for that feature are sent to Anthropic to generate the response; see below for what that means.
• To reply to coaching applications and support emails personally.
• To keep the site running (basic analytics, error logs).

Parts of this site are written by an AI model rather than by me, and I would rather say so here than let you find out. The model is run by Anthropic. When you use one of these features, the inputs for that request leave my server and go to Anthropic to produce the response.

Some AI requests include your first name. When you ask for a plan section to be rewritten, I send the current plan, the section being changed and your feedback. A coaching review can also include your saved check-in drafts.

• AI plans. More than a form goes over, so it is worth naming: your measurements and goals, your training and dietary preferences, any injuries or medical conditions you told me about, your notes, whichever saved results are relevant, your setup answers, and your latest ninety day review. The plan that comes back is saved to your account, along with a snapshot of the form you submitted. That snapshot is the form only, not everything listed here.
• Asking questions about a plan. Your question, the plan it is about, and the earlier messages in that conversation go over.
• Your Corner chat on Pro. So it can answer about your actual situation, this one sends more: the messages in the thread, plus your saved tool results, your active plan, your onboarding answers, your settings, and your latest 90 day review. Each thread is saved to your account, with its name and dates, so it is there when you come back. "New chat" starts another one and leaves the old ones alone; they stay until you delete them yourself or delete your account. Only the thread you have open is ever sent to the model. Your Corner can run a calculator during a conversation and send its results, your question and the reply so far to Anthropic for an explanation. The context sources you switch off in Your Corner are left out of that chat's context.
• Tool explanations and fix-it suggestions. The tool you are on and the result you just got, plus your other saved calculator results, so the answer can connect them. The explanation is saved and reused when you ask about the same numbers again. Fix-it suggestions are not saved.
• Flow summaries, check-in briefs, and the 90 day review. The saved results and figures being summarized go over, and the write-up that comes back is saved to your account.
• The First 12 Weeks email. The short intro at the top is written for you from three things: your goal, how many days a week you train, and your age band. The plan itself is the same for everyone.
• The mental health check-in. Your ratings and anything you type go over to produce that one reply, and so do your recent recovery, stress, sleep, workout readiness and hydration results where you have them, since the reply reads better against them. Signed out, those come from your browser. None of it is saved on my side, and neither is the reply. Close the page and my copy is gone. If what you write matches a phrase the page watches for, it answers with support resources directly and sends nothing to the model, but that is a fixed list of phrases and it cannot recognise every way of saying you are in trouble. Nobody is monitoring this, and it reaches no emergency service. It is a reflection prompt, not therapy, not a diagnosis, and not a substitute for talking to a professional.

The "since you started" comparison is calculated from your saved results. The 90 day review is written by AI. A personal review is written by me, not by AI.

Anthropic does not use API data like this to train its models, under its standard API terms. That is Anthropic's commitment in its terms rather than something I can verify from my end, so I am telling you where the data goes and letting you weigh it.

AI output can be wrong, and it can contradict itself between runs. Treat a generated plan or answer as a starting point to check, not as instructions from a professional who knows your situation. Nothing here is medical advice.

The calculator formulas themselves use arithmetic. Some related features send information to Anthropic automatically: a finished flow can get a written summary, and setup can produce the introduction to your First 12 Weeks email. On Pro, a saved-result rerun can also send the previous and new results and changed inputs for an AI plausibility check.

AI summaries and reviews that are saved remain with your account unless you remove them or delete the account.

I use a small set of trusted services to run this site:

• Supabase stores your account and app data.
• Vercel hosts the site, and also collects aggregate page-view and page-performance analytics for every visitor (Vercel Analytics and Speed Insights). This is not used to build a profile of you or shared with advertisers. I use Vercel to count some interactions as well as page visits and performance. These include saving a tool result, viewing a Pro feature, clicking an upgrade link, visiting coaching and moving through an application. The event can include a tool or feature name, a step number and whether you are signed in. I do not include your entered measurements or free-text answers in these event fields.
• Anthropic processes the AI requests described above, including the automatic requests. It receives the inputs you provide for that request (your profile details, tool results, or question) to generate the response. Anthropic does not use API data like this to train its models, under its standard API terms.
• Stripe processes every payment: donations, Pro subscriptions, coaching subscriptions, and a personal review, plus any refund of one. I never see your full card details.
• PandaDoc handles electronic signing for coaching clients. After you enroll, it receives your name and email so it can send you the coaching documents to sign, and it keeps the signed copies and your health screen answers for me. Ask me and I will send you a copy of anything it holds about you.
• Resend is the service I use for app emails, including results, plans, reviews, coaching messages and progress reports. Those emails and attachments can contain the fitness information needed for that message. Sign-in and password-reset emails are requested through Supabase Auth. Resend also reports back whether a message was opened and whether a link in it was clicked, and I keep that against the send record.
• Cloudflare Turnstile checks that account actions come from a person rather than a bot: signing up, signing in, resetting a password, and changing your email or password in settings, plus the contact form, a coaching application, and the waitlist. It sees your IP address and basic browser details for that check, and it is never loaded on the calculators or anywhere else you browse.
• Sentry records technical details when something breaks: the error, the page it happened on, and the browser, and your account ID when you are signed in. The configured filter removes request bodies, cookies, headers and URL query strings before sending them. It does not record your screen or your session.
• Google also hosts the fonts my emails ask for and the ones my server uses when it draws a share image. Your email app may fetch a font from Google when it opens one of my emails; the share image is drawn on my server, so your browser is not the one asking.
• Google sign-in is involved in two ways, both optional. If you choose "Continue with Google" to sign in, Google shares your name, email, and Google account id with this site so it can create or match your account. Separately, if you signed in that way, Google can send this site an automatic security alert about that same Google account (Google calls this Cross-Account Protection), for example that your Google sessions were revoked or the account was disabled. An alert carries your Google account id and the type of event, never your Google password or anything from inside your account, and I use it only to sign you out here or lock the account here to match what happened on Google's side.
• Apple sign-in is optional too. If you choose "Continue with Apple", Apple shares your name and email with this site, or a private relay address if you choose to hide your email, so it can create or match your account.
• Telegram. I use Telegram for coaching communication. If you contact me there, Telegram handles the messages and any information or files you choose to send under its own privacy terms.

You can also share a check-in draft through your device's share menu or copy it and open Telegram. The app does not automatically send the draft to Telegram or import your Telegram conversations.

I do not sell your data, and I do not run ad pixels or ad cookies. The one thing I share with an advertiser: if you arrive from one of my Google ads and then sign up or buy Pro, I send Google the ad click id and the time of that signup or purchase, so I can see which ads are worth paying for. Your name, email, health numbers and tool results are never sent.

• What you saved stays until you remove it. Your profile, saved results, plans, and flow progress are yours and are not aged out.
• Deleting one result is narrower than it sounds. It removes that entry from your history. Copies that were already taken elsewhere do not go with it: a share link keeps its own copy of the numbers even after you revoke the link, and so do a flow summary, a saved plan, and a review request you sent me. Deleting the whole account removes those account-linked database copies.
• What the AI writes for you stays with your account. Your weekly check-in drafts, 90 day reviews, and your Your Corner chat are kept until you delete the account. They are not aged out on a timer, and deleting the account takes them with it.
• Applications, contact submissions and waitlist entries. I keep an accepted application while the coaching relationship is active. Once its end is recorded, the application becomes eligible for deletion after 730 days. If you want yours removed, ask me and I will delete it. Other applications, contact submissions and waitlist entries become eligible after 730 days from submission.
• Coaching consent and signed documents. The record of which coaching documents you agreed to (with the name and email you gave) and the documents you signed through PandaDoc, including your health screen answers, plus the Stripe ids of any coaching payment held while your agreement was missing, are kept for 3 years after you delete your account, so they can be produced if there is ever a dispute about coaching. After that they are deleted here and at PandaDoc.
• Usage analytics, AI run logs, and rate-limit counters. The cleanup job runs monthly. Usage events, AI-run logs and rate-limit records become eligible for deletion after 90 days, so they may remain until a later successful run. Enquiry records follow the longer periods described above.
• Google security events. I review Google security-event retention daily. After 90 days, events without a replay identifier are deleted. For events with one, I clear the Google identifier and event details but keep the replay identifier, event type, date and account association to prevent the same event being processed again. Account deletion removes that account association.
• The email send log is kept. It is what stops a welcome email being sent to you twice, so it has no expiry.
• A few records outlive a deleted account on purpose. Those are listed under Your choices below.

These retention periods describe records in the app's database. Email services, hosting and error-monitoring services, and AI providers can retain copies under their own terms and settings. Deleting an account here does not recall information already processed by those services.

Deleting a database record does not remove an email or attachment already delivered to me or another recipient.

Some of what you enter is about your body: your weight, height, age, sex, measurements, and how active you are. Some of it is more than that: the injuries and medical conditions you tell an AI plan about, the coaching intake you fill in as a coaching client, and what you write in the mental health check-in. It is stored because you entered it, and it is used to run the calculation, to show you your own history, and to build what you asked for. Nothing on this site is a diagnosis or medical advice, and none of it makes me a medical provider. It is still information about your health, and I treat it as the most sensitive thing I hold.

The mental health check-in is the one place I went further. Your answers are never written to my database. They go to the model, the summary comes back, and that summary is what you read on the page. Nothing from that check-in is stored on my side, so there is no history of it to show you and nothing for me to delete later. If you want to keep a copy, copy the text before you leave the page.

None of this is advertising. I do not run ad cookies or cross-site tracking. Here is everything the site keeps on your device:

• Sign-in cookies and pending email links. Supabase uses cookies for your session and temporary verification cookies while you sign in or create an account. I also keep your email address, newsletter choice and request time in this browser while an email-link sign-in is pending.
• A cookie holding your display name and tier. Set when you sign in and kept for 30 days, so the sidebar can show who you are before your profile has loaded. Signing out clears it.
• An analytics opt-out cookie, if you set one. Kept for five years, and its only job is to leave you out of the usage counts. I use it on my own devices so my testing does not show up as traffic.
• Preferences and saved work in your browser. These are not cookies. Your theme, text size, unit choice, favorite tools, flow progress, habits, unfinished forms, the numbers you last typed into a tool, cached AI summaries, and any results you save without an account sit in your browser's local storage. Most of it survives closing the browser. Some of it syncs up to your account when you are signed in, which is how your preferences and habits follow you between devices, and the rest is only on that device. Clearing your site data removes all of it, and if you were not signed in, work saved that way is gone for good.
• Offline copies of tool pages. So the calculators still work with no signal, a service worker keeps the site's static files and up to 40 public tool pages you have visited. Those copies have no expiry date; they are replaced as the site updates and go when you clear site data. Nothing private is cached this way.
• A per-tab id, and a few small session values. Also not cookies. A random id identifies the current visit for the usage counts described above. The same short-lived storage also holds a sign-in redirect while an OAuth round trip is in progress, your answers mid-way through a daily flow, and a prompt you have dismissed for this visit. All of it lives in your tab and is dropped when you close it.
• A returning-visitor id. Also not a cookie. This returning-visitor information also survives closing the browser. If you are not signed in, a random id and the date you first arrived are kept in your browser so that one visit on a later day counts as a return rather than a new person. That is the whole purpose: it answers whether anyone comes back at all. The id itself never leaves your device, nothing is attached to it, and only the fact that a return happened is counted. It is cleared when you sign out, and clearing your site data removes it.
• How you first found the site. Also not a cookie. On your first visit, your browser keeps a note of the campaign tags in the link you followed (such as utm_source), any ad click id in it (gclid, fbclid or ttclid), the page you landed on, and the website that sent you. It stays only on your device for up to 90 days and is cleared when you sign out. If you create an account, that note is saved with it so I can see which links bring people in. If you are signed in and later arrive from an ad link, the note on your account is updated with that visit too. If the note holds a Google ad click id and you sign up or buy Pro, that click id and the time are sent to Google Ads to measure the ad. Nothing else from the note, and nothing else about you, goes with it. I run no ad pixels.
• Cloudflare Turnstile's own cookies. Turnstile runs on the account actions listed above, and on the public forms too: the contact form, a coaching application, the waitlist, and the feedback prompt on the coaching page. It may set cookies of its own to do that check. Those are Cloudflare's, not mine, and it is not loaded on the calculators or anywhere else you browse.
• Vercel's measurement scripts. The analytics and page-speed scripts run on every page. Anything they set belongs to Vercel, it is there to count visits and load times, and none of it goes to an ad network.
• Affiliate links. This is the one place a third party sets a cookie on purpose, and only if you click one. More on that below.

Blocking or clearing all of it is fine by me. The tools still work. You would just be signed out and back to the default settings.

• You can use the free tools without signing up at all.
• You can download your account data from the settings page, as JSON or CSV. It covers your profile, onboarding answers, saved tool results, flow progress and completions, custom flows, AI plans, flow summaries, check-in briefs, 90 day reviews, Your Corner chat messages, and coaching applications and intake. Your account download may include donation records or monthly trend notes saved by an earlier version of the app. Their presence does not mean the current app creates new records of those kinds. It does not include the operational records: contact form submissions, the email send log, and the usage and error telemetry described above. The download contains the account datasets listed here, not every record associated with you. It also leaves out some schedules, recent-tool records, cached explanations, share-link snapshots, plan-edit proposals, review requests, billing and allowance records, and security records. Contact me if you need information outside the download. The same two links sit on the delete screen, so you can take a copy before the account goes.
• You can delete your account yourself from the settings page, which removes your data. A handful of records outlive the account on purpose, in two ways. Some are kept exactly as they are: if an earlier version of the app saved a donation record, it stays on the books with your name and email so it reconciles against Stripe; your email address stays on the suppression list so I never email you again; past email sends stay logged so a resend is never counted twice; and if you ever claimed a one-time perk, like the free personal review or the once-ever coaching credit, a record that you claimed it stays, keyed to a scrambled version of your email rather than your account, so deleting and signing up again cannot claim it a second time. Some records linked to your account are kept with identifying fields cleared: a linked coaching application or waitlist entry stays so the funnel numbers and my pipeline history hold up, with your name, email, phone, and notes cleared; a note about why you cancelled stays so I can see the pattern. Only your email address is cleared from it, so if the comment itself names you, that stays; a linked contact form submission stays for the daily count, with your name, email, subject, and message cleared; and a Google security alert (see the Google entry above) stays as part of the log that stops the same alert being replayed, with your Google id and the details cleared. If you would rather I handle the deletion, email me.
• Account deletion removes or clears records linked to your account as described here. A message or application submitted while signed out may not be linked to it and may remain under its normal retention period. Contact me about those submissions so I can verify which ones are yours.
• Two more things outlive the account without being anonymised right away. Your usage analytics and AI run logs are unlinked from your account immediately. Rate-limit counters are not touched by account deletion and may hold an IP address or an account id until the records are deleted. The cleanup job runs monthly. Usage events, AI-run logs and rate-limit records become eligible for deletion after 90 days, so they may remain until a later successful run.
• Deleting your account cancels any Stripe subscription, but does not delete your Stripe customer or payment records, or an account id Stripe may hold in that record's metadata. Stripe is its own controller for that data under its own privacy terms.
• If you make a share link for a tool result, that link is public: anyone holding the URL can open it and see that result and the numbers behind it, with no account and no sign-in. A new link stops working on its own after 90 days unless you keep it going. Links you made before that change stay live until you turn them off. Your name and email are not on the page, and search engines are told not to index it. You can turn any link off from the saved result it came from, and deleting your account takes down every link you made.
• A share link keeps a separate copy of the inputs and result. Expiring or turning off the link stops public access but does not immediately delete that database copy. Deleting your account removes the stored share records. It cannot remove copies someone already downloaded or forwarded.
• Some share cards carry their figures directly in the URL. Anyone with that URL can reconstruct the card. These links have no account-linked expiry or revoke control, and deleting your account cannot remove the figures from a URL someone already has.
• You can change your password any time from your settings.
• If you subscribe to Pro, you can cancel any time from settings, which opens the Stripe billing portal.
• The newsletter is opt-in only, from an unticked box when you create your account or from your settings afterwards, and you can turn it off in settings or from the unsubscribe link in any newsletter email.
• If you buy a second personal review and do not have Pro, I may email you a comparison with Pro pricing. This message does not follow your newsletter setting. Reply STOP to it and I will not send it again.
• Joining the coaching waitlist asks me to send you a confirmation and an update when a spot opens. This is separate from the newsletter. Reply STOP to ask me to remove you from the waitlist; changing your newsletter setting does not remove that entry.

Encryption, access limits, and what happens if something goes wrong are written up on the security page.

Some articles link out through affiliate links, including the Amazon Associates program. If you click one, that third party (for example Amazon) may set its own cookies to credit a purchase. I do not see your card details or what you buy, only whether a referral qualified. If you buy through a link, I may earn a small commission at no extra cost to you.

The site is intended for people aged 13 or older. I do not verify age during signup. Some profile and coaching forms ask for age, but those fields are not an age-verification process.

This site is not directed at children under 13. If you think a child has signed up, email me and I will remove the account.

If I update this policy, I will update the date at the top. For material changes I will post a note on the homepage or email account holders.

Questions, corrections, or deletion requests: reach me through the contact form. Privacy requests by post go to TS Coaching LLC, 200 S 21st St, Ste 400A, Lincoln, NE 68510.