This Privacy Policy explains how Protocols by James ("we," "us," or "our") collects, uses, and protects your personal information when you use the website at protocolsbyjames.com and the web application at app.protocolsbyjames.com (collectively, the "Services"). We respect your privacy and only collect data we need to deliver the Services to you.
1. Information we collect
Account information
When you create an account, we collect your name, email address, and a password hash. You may optionally provide an avatar URL.
Health, fitness, and body metrics
To deliver personalized coaching, we collect information you provide through check-ins, including body-weight, measurements, progress photos, training logs, nutrition logs, and any notes you share with your coach. You control what you submit.
Payment information
Payments are processed by LemonSqueezy, our merchant of record. LemonSqueezy handles all payment processing, tax collection, and compliance. We do not store or receive your full card number, CVC, or bank credentials. We do receive and store a customer ID, subscription status, and billing history.
Technical information
When you use the Services, we automatically collect basic technical information such as your IP address, browser type, device type, and pages visited. This helps us keep the Services secure and reliable.
Communications
We store messages you send to your coach through the app, as well as emails and other communications you send to us.
2. How we use your information
- To deliver personalized coaching, including generating training and nutrition plans.
- To process payments and manage your subscription.
- To communicate with you about your account, Service updates, and support.
- To improve the Services and troubleshoot issues.
- To comply with legal obligations and enforce our Terms.
We do not sell your personal information. We do not share your information with advertisers.
3. Service providers
We share limited information with third-party service providers who help us operate the Services:
- LemonSqueezy — payment processing and merchant of record. See LemonSqueezy's privacy policy.
- Supabase — database, authentication, and file storage hosting.
- Vercel — web application hosting.
- Email providers — transactional email (for example, account confirmation emails).
Each provider is bound by its own privacy terms and is only authorized to use your information to perform services for us.
4. Cookies & tracking
We use strictly necessary cookies to keep you logged in and to maintain your session. We do not use third-party advertising or behavioral-tracking cookies.
5. Your rights
You can access or update most of your information from your account settings. You also have the right to:
- Request a copy of the personal data we hold about you.
- Ask us to correct inaccurate information.
- Ask us to delete your account and associated data.
- Opt out of non-essential emails.
To exercise any of these rights, email protocolsbyjames@gmail.com. We will respond within 30 days.
6. Data retention
We keep your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within 60 days, except where we are required to retain it for legal, tax, or accounting reasons (for example, payment records).
7. Security
We use industry-standard encryption in transit (TLS) and at rest. We limit access to personal information to those who need it to operate the Services. No system is perfectly secure; please use a strong, unique password and notify us immediately if you suspect unauthorized access.
8. Children
The Services are intended for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us and we will delete it.
9. International users
The Services are operated from the United States. If you access the Services from outside the U.S., your information may be transferred to, stored, and processed in the U.S.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services.
11. Contact
Questions or requests about your data? Email protocolsbyjames@gmail.com.