Security, in plain language

I'm Taylor. This is a summary of how your data is actually protected on TS Coaching, not a marketing page. For the full list of what I collect and why, see the Privacy Policy.

Your data is isolated at the database

The database enforces row-level security on every table that holds account data. That means the rule isn't just "the app only shows you your own rows," it's "the database itself refuses to return another account's rows," even if a bug in the app tried to ask for them. This isn't a policy I'm promising, it's enforced on every query, on every table, automatically.

Passwords are never stored in plain text

Your password is hashed before it ever touches storage. I can never see it, and neither can anyone with database access. Payments go through Stripe directly, so I never see your full card number either.

You can export everything

From settings, you can download your account data as JSON or CSV whenever you want, no waiting on me. It's not locked in.

You can delete everything

Deleting your account from settings actually removes your data, not just hides it. A small number of records outlive deletion on purpose (so a refund reconciles, or a one-time perk can't be claimed twice), and those are stripped of anything that identifies you first. The full list is in the Privacy Policy.

Bot protection on account actions

Cloudflare Turnstile checks signing up, signing in, resetting a password, and changing your email or password, plus the contact form, a coaching application, and the waitlist. Most of the time it ticks its own box. Now and then it asks you to click it.

What this page isn't

This isn't a compliance certification. It's an honest description of the real protections in place today. If you find a real vulnerability, please tell me through the contact form before posting it publicly, and I'll fix it fast.