This document is a draft. The company behind Coach, its registered address and the law these terms run under are still to be confirmed, and are marked in square brackets below.
Coach is an AI health and fitness coach at coach.ai, operated by [Operating company to be confirmed] ("Coach", "we", "us"). This policy explains what we collect when you use the website and the chat, what we do with it, and the choices you have. It should be read with our Terms of Use.
1. What we collect
When you use Coach without an account
- Your conversations. The questions you ask, the answers Coach gives, and the time of each. A conversation is stored on our servers so you can return to it. Your browser holds the list of conversations you have had on that device.
- Technical information. Our hosting provider records ordinary server information when your browser makes a request, including IP address, browser and device type, and the time of the request. These logs are kept for 90 days.
- Settings on your device. Your light or dark theme preference, stored in your browser, not on our servers.
When you create an account
- Your email address, and your name if you give one. The name is optional.
- Your password, stored only as a scrypt hash. We cannot read it, and nobody here can tell you what it is.
- If you sign in with Google: your Google account identifier, email address and name, as Google provides them with your permission. We never see your Google password.
- Account activity: when the account was created, when you last signed in, and whether your email address has been confirmed.
- Your conversations, as above, now linked to your account so they follow you between devices.
We do not ask for payment details, because Coach is free at present. We do not run advertising or analytics trackers, and we set no tracking cookies.
Health information
Coach is a place people describe injuries, conditions, medication, weight and other personal matters. Anything you type into the chat is stored with the conversation, and is processed by our AI provider to produce an answer. Please share only what is needed for the question you are asking, and see Terms of Use for what Coach can and cannot advise on.
2. What we use it for
- To answer your questions, and to keep the thread of a conversation so follow-up questions make sense.
- To create and secure your account, confirm your email address and let you reset your password.
- To show you your own past conversations.
- To keep Coach working: diagnosing errors, investigating abuse, and protecting the service.
- To meet legal obligations.
We do not sell your personal data. We do not share it for anyone else's marketing. We do not use your conversations to train AI models, and our AI provider is contractually barred from training its models on them.
3. Who it is shared with
Coach runs on a small number of providers, each of which handles only what it needs to:
- Amazon Web Services, for hosting and for sending account emails, in the London region.
- MongoDB Atlas, which stores accounts and conversations.
- Our AI provider, which receives the messages in a conversation in order to generate the reply. Messages are held for up to 30 days so a conversation can continue where it left off, then deleted. Write to us if you would like to know who it is.
- Google, if you choose to sign in with Google, and when Coach searches YouTube for demonstration videos. A video search sends the search words, not your identity or your message.
- Professional advisers or authorities, where the law requires it or to protect the rights and safety of people using Coach.
Demonstration videos are shown as a still image and a play button. Nothing loads from YouTube, and YouTube sets no cookies, until you press play. When you do, YouTube receives the request and its own privacy policy applies.
4. Where your data is held
Our servers and database are in the United Kingdom (AWS London). Our AI provider and Google process data in the United States and elsewhere. Where the law requires safeguards for those transfers, we rely on the contractual protections those providers offer.
5. How long it is kept
- Conversations are kept until you delete them, or until you delete your account, which deletes every conversation belonging to it.
- Conversations held without an account are kept indefinitely, because there is no account to attach a deletion request to. Clearing your browser storage removes them from your list but does not delete them from our database. If you want an anonymous conversation deleted, email us from any address and tell us its id, which you can see in your browser's storage.
- Account records are kept until you delete the account.
- Server logs are kept for 90 days.
- Backups may hold copies for a short period after deletion, and are themselves deleted on a rolling basis.
6. What you can do
You can, at any time:
- Read what we hold about you, and ask for a copy.
- Correct your name or email address by asking us.
- Delete a conversation, from the panel beside it.
- Delete your account, which removes the account and its conversations. Ask us and we will action it.
- Sign out of every device, if you think someone else has your password.
- Object to or restrict what we do with your data, and complain to the data protection authority where you live.
Email hello@coach.ai for any of these. We may need to confirm you control the email address on the account before acting on a request.
7. Storage in your browser
Coach keeps a small amount of information in your browser rather than on our servers: your theme, your sign-in tokens if you are signed in, and, if you are not, the list of conversations held on that device. None of it is used for tracking or advertising. Clearing your site data signs you out and empties that list.
8. Keeping it safe
Everything travels over an encrypted connection. Passwords are stored only as scrypt hashes. Signing in issues a short-lived token rather than storing your password anywhere, and resetting your password signs out every other device. Access to the database is restricted and credentialled. No service can promise perfect security, and we do not.
9. Children
Coach is not for people under 18. See Terms of Use.
10. Changes
If this policy changes we will post the new version here and update the date below. If a change matters to you, we will say so more directly, by email where we have one.
11. Contact
Questions, requests and complaints go to hello@coach.ai.
[Operating company to be confirmed]