Privacy Policy — 2110 Fitness Coaching Platform

This policy explains what the 2110 Fitness coaching platform (the "Platform") collects, why, who it is shared with, and the choices you have. It is operated by 2110 Fitness, Calgary, Alberta, Canada.

Contact: chris@theathleticyou.com

Last updated: August 10, 2026

1. Roles

Your coach decides what client information to collect and how to use it in their coaching practice. We provide the software and process that information on their behalf, and on our own behalf for operating and securing the Platform.

2. What we collect

Account: name, email address, optional phone number, password hash, locale, and timezone.

Coaching data you or your coach enter: training programs and workout logs; nutrition logs, targets, and food photographs; body weight, body measurements, and progress photographs; recovery metrics such as HRV and sleep, including screenshots you upload; habits; check-in responses; and messages between you and your coach.

Technical: IP address, browser and device information, and usage events for operating and securing the service.

We do not collect payment card details. Coaches who subscribe pay through a payment processor that handles card data directly; we never see full card numbers.

3. Why we process it

To provide the Platform to you and your coach; to generate AI assistance your coach has enabled; to secure the service and investigate abuse; to meet legal obligations; and, with your consent, to measure product usage.

Legal bases where GDPR applies: performance of a contract, our legitimate interests in operating and securing the Platform, your consent for analytics and for health-related data, and compliance with legal obligations.

4. Artificial intelligence — what is sent where

To produce coaching assistance, relevant content is sent to AI providers (currently Anthropic and OpenAI) for processing:

• Sent: the coaching context needed for the task — for example your training program, recent logs, nutrition entries, check-in text, and messages in the conversation being assisted.
• Progress photographs and food photographs are sent only when a feature you or your coach invoked requires image analysis.
• Not used to train models. We use these providers' business APIs, under terms that do not permit training on submitted content.
• Coach-supplied keys: where your coach supplies their own provider key, processing occurs under that coach's account with that provider.

AI output is assistive and may be wrong; your coach reviews it.

5. Who else sees your data

• Your coach, and administrators of the coaching organisation you belong to.
• Other coaching organisations on the Platform: never. Data is scoped per organisation, and that isolation is verified.
• Service providers who operate the Platform on our instructions: Vercel (hosting), Neon (database), Vercel Blob (file storage), our email provider, and the AI providers above.
• Authorities, where we are legally required to disclose.

We do not sell your personal information, and we do not share it for advertising.

6. Where data is stored

Data is stored on infrastructure located in the United States. If you are in Canada, the EU/EEA, or the UK, your information is transferred and processed there under appropriate safeguards, including standard contractual clauses where required.

7. Retention

We keep your data while your account is active. After account deletion we remove personal data within 30 days, except where retention is legally required. Backups are retained on a rolling basis and expire automatically.

8. Your rights

You may request access to your data, correction, deletion, a portable export, restriction of processing, or withdrawal of consent. Coaches can export client data directly in the Platform; anyone can email us. We respond within 30 days.

Where GDPR applies you may also lodge a complaint with your supervisory authority. If you are in Canada, you may contact the Office of the Privacy Commissioner.

9. Security

Passwords are hashed; traffic is encrypted in transit; progress photographs and file attachments are stored privately and served only to authorised viewers; access is scoped per coaching organisation and enforced server-side; API rate limiting and audit logging are in place. No system is perfectly secure, but we treat health and body-image data as sensitive by default.

10. Cookies and analytics

We use cookies strictly necessary for signing you in and keeping you signed in. Product analytics run only where you have consented, and can be declined without losing functionality.

11. Children

The Platform is not intended for children under 16. If you believe a child has provided us personal information, contact us and we will delete it.

12. Changes

We will post material changes here and, where they meaningfully affect you, notify you in the Platform or by email before they take effect.

13. Contact

Privacy questions, or to exercise any right above: chris@theathleticyou.com