Privacy Policy

Sessions.coach (“Company,” “we,” “us,” or “our”) provides a coaching marketplace and technology platform (the “Platform”). This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the limited rights and remedies available to you. This Policy should be read together with our Terms of Service, which govern your use of the Platform and include important limitations of liability, releases, and indemnification obligations that apply equally to your use of this Policy.

BY ACCESSING OR USING THE PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTAND THIS POLICY AND CONSENT TO THE COLLECTION, USE, AND SHARING OF YOUR INFORMATION AS DESCRIBED BELOW. IF YOU DO NOT AGREE, YOU MUST NOT USE THE PLATFORM.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, phone number (if provided), profile photo, and account type (Coach or Athlete). Coaches may also provide business information, certifications, sport specializations, and bio information.

1.2 Payment Information

Payment processing is handled by Stripe, Inc. We do not store your full credit card numbers, bank account numbers, or other sensitive payment details on our servers. Stripe collects and processes payment information in accordance with its own Privacy Policy. We may store transaction IDs, payment amounts, and payment status for record-keeping purposes.

1.3 Usage Data

We automatically collect certain information when you use the Platform, including your IP address, browser type, device information, operating system, pages visited, time spent on the Platform, and referring URLs.

1.4 Communications

We collect messages sent through the Platform’s messaging system between Coaches and Athletes. We may also collect information from emails or other communications you send to us.

1.5 Push Notification Data

If you enable push notifications, we collect your device push notification token to deliver notifications about bookings, messages, and other Platform activity.

2. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Platform.
• Process transactions and send related information (confirmations, invoices, receipts).
• Facilitate communication between Coaches and Athletes.
• Send push notifications, email notifications, and other communications related to your account and bookings.
• Respond to your comments, questions, and support requests.
• Monitor and analyze usage patterns and trends to improve user experience.
• Detect, prevent, and address technical issues, fraud, and security concerns.
• Comply with legal obligations.

3. Information Sharing

3.1 Between Coaches and Athletes

When an Athlete books a session with or joins a Coach, we share relevant information between the parties (such as name, contact details, booking details, intake form responses, and any waivers signed) to facilitate the coaching relationship. Coaches act as independent data controllers for any personal information you provide directly to them or that they collect about you through their own tools. Sessions.coach is not responsible for a Coach’s use, disclosure, retention, or protection of your information once it has been shared with that Coach, and we disclaim all liability arising from a Coach’s privacy practices. You must raise any data rights requests (access, correction, deletion) relating to information held by a Coach directly with that Coach.

3.2 Payment Processing

We share necessary information with Stripe to process payments, manage subscriptions, and facilitate payouts to Coaches via Stripe Connect.

3.3 Service Providers

We may share information with third-party service providers who perform services on our behalf, including hosting (Vercel), email delivery (Resend), and analytics. These providers are contractually obligated to protect your information and may only use it to provide services to us.

3.4 Legal Requirements

We may disclose your information if required to do so by law, or in response to valid requests by public authorities (e.g., a court order or government agency).

4. Data Security; No Warranty

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), hashed password storage, secure authentication mechanisms, and periodic security reviews.

NO METHOD OF TRANSMISSION OVER THE INTERNET OR ELECTRONIC STORAGE IS 100% SECURE. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, WE MAKE NO REPRESENTATION, WARRANTY, OR GUARANTEE THAT YOUR INFORMATION WILL BE SECURE FROM LOSS, MISUSE, UNAUTHORIZED ACCESS, DISCLOSURE, ALTERATION, OR DESTRUCTION, AND YOU USE THE PLATFORM AT YOUR OWN RISK. You are solely responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

5. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences, and authenticate your account. We use essential cookies required for the Platform to function. We do not use third-party advertising or tracking cookies. You can control cookie settings through your browser preferences, but disabling essential cookies may affect the functionality of the Platform.

6. Third-Party Services

The Platform integrates with the following third-party services:

• Stripe — Payment processing, subscription billing, and Coach payouts via Stripe Connect.
• Vercel — Application hosting and infrastructure.
• Resend — Email delivery for transactional emails (booking confirmations, password resets, etc.).

Each of these services has its own privacy policy governing the collection and use of your data. We encourage you to review their respective policies.

7. Children’s Privacy

The Platform is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe that a child under 13 has provided us with personal information, please contact us at team@fullout.energy.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Platform’s services. We may also retain certain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (such as maintaining financial records).

9. Your Rights

You have the right to:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request correction of any inaccurate or incomplete personal information.
• Deletion — Request deletion of your personal information, subject to certain exceptions.
• Portability — Request a copy of your data in a structured, machine-readable format.
• Objection — Object to the processing of your personal information in certain circumstances.

To exercise any of these rights, please contact us at team@fullout.energy. We will respond to your request within 30 days.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information to third parties.

To exercise your CCPA rights, contact us at team@fullout.energy.

11. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, and port your data. You also have the right to lodge a complaint with your local data protection authority. Our legal basis for processing your data is (a) performance of a contract (to provide the Platform services), (b) your consent, and (c) our legitimate interests (to operate and improve the Platform).

12. Health and Sensitive Information; Not a Covered Entity

The Platform is not a medical device, electronic health record, or covered entity under the Health Insurance Portability and Accountability Act (HIPAA), and we do not operate as a business associate under HIPAA. Any medical, health, fitness, injury, or allergy information you or your Coach choose to enter into intake forms, notes, messages, or waivers is entered at your own risk.

You should not submit protected health information or any information you would not want stored on a general-purpose web service. Sessions.coach disclaims all liability arising from the collection, storage, transmission, or inadvertent disclosure of any health or other sensitive information voluntarily submitted through the Platform.

13. No Liability for Third-Party Provider Acts

The Platform relies on third-party infrastructure and service providers, including but not limited to Stripe (payments), Vercel (hosting), Supabase (database), Resend (email), Klaviyo and Mailchimp (email marketing, where enabled by a Coach), and push notification services operated by Apple, Google, Microsoft, and Mozilla. These providers process certain information on our behalf or on behalf of the Coach.

Each such provider maintains its own privacy practices and security controls, which we do not operate or control. Sessions.coach is not responsible or liable for any act, omission, outage, data loss, data breach, unauthorized access, or other incident caused by or attributable to any third-party provider, and you release Sessions.coach from all claims arising therefrom. Your recourse for any such incident lies directly with the relevant provider.

14. User-Provided Information; Your Responsibility

You are solely responsible for the accuracy, legality, and appropriateness of all information you submit to the Platform, including information about family members, minors in your care, or other third parties. You represent and warrant that you have the legal right and, where applicable, all necessary consents to submit such information. You agree to defend, indemnify, and hold harmless Sessions.coach from any claim arising out of your submission, inaccuracy, or unauthorized disclosure of any such information, including any claim brought by another individual whose information you provided.

15. Limitation of Liability; Indemnification

TO THE FULLEST EXTENT PERMITTED BY LAW, SESSIONS.COACH, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, AND AFFILIATES SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF DATA, PROFITS, GOODWILL, OR USE, ARISING OUT OF OR RELATED TO THIS POLICY OR THE PROCESSING, STORAGE, DISCLOSURE, OR LOSS OF YOUR INFORMATION, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. OUR AGGREGATE LIABILITY ARISING FROM OR RELATED TO THIS POLICY SHALL NOT EXCEED THE GREATER OF ONE HUNDRED DOLLARS ($100) OR THE AMOUNT YOU PAID US IN THE TWELVE MONTHS PRECEDING THE CLAIM.

You agree to defend, indemnify, and hold harmless Sessions.coach and its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or relating to (a) your submission of information to the Platform; (b) your violation of this Policy; (c) your violation of any applicable law or third-party right; or (d) any privacy-related claim brought by any person whose information you entered on the Platform. The limitations and indemnity in this section survive termination of your account.

16. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Platform and updating the “Last updated” date. Your continued use of the Platform after any changes constitutes your acceptance of the revised policy.

17. Contact Information

If you have questions or concerns about this Privacy Policy, please contact us at team@fullout.energy.