Security, in plain language

I'm Taylor. This is a summary of how your data is actually protected on TS Coaching, not a marketing page. For the full list of what I collect and why, see the Privacy Policy.

Your data is isolated at the database

The database enforces row-level security on every table that holds account data. That means the rule isn't just "the app only shows you your own rows," it's "the database itself refuses to return another account's rows," even if a bug in the app tried to ask for them. This isn't a policy I'm promising, it's enforced on every query, on every table, automatically.

Passwords are never stored in plain text

Your password is hashed before it ever touches storage. I can never see it, and neither can anyone with database access. Payments go through Stripe directly, so I never see your full card number either.

You can export everything

From settings, you can download your account data as JSON or CSV whenever you want, no waiting on me. It's not locked in.

You can delete everything

Deleting your account from settings actually removes your data, not just hides it. A small number of records outlive deletion on purpose (so a refund reconciles, or a one-time perk can't be claimed twice), and those are stripped of anything that identifies you first. The full list is in the Privacy Policy.

Bot protection on account actions

Signing up, signing in, resetting a password, and changing your email or password all run through hCaptcha, so those actions have to come from a person. It doesn't run on the calculators or anywhere else you browse.

What this page isn't

I'm a solo operator, not a security team, and this isn't a compliance certification. It's an honest description of the real protections in place today. If you find a real vulnerability, please tell me through the contact form before posting it publicly, and I'll fix it fast.