Privacy Policy

For a coach's own account information, IPTA is the data controller. For the personal data a coach collects about their clients through Stride, the coach is the controller and IPTA acts as a processor on the coach's behalf — we process client data to provide the Service and under the coach's instructions.

Account details (name, email, role); profile and business information; training, nutrition, measurement, and progress data that coaches and clients enter; messages sent through the Service; payment metadata (processed by Stripe — we do not store full card numbers); and technical data such as device, browser, and usage logs.

To provide and improve the Service; to power features you enable (including optional AI features that generate program and nutrition drafts from your data); to process payments; to communicate with you (including authentication and transactional emails); to keep the Service secure; and to comply with law.

We share information with vendors who help us run Stride, under contracts that require them to protect it. These currently include:

• Supabase — database, authentication, and storage
• Stripe — subscription billing and coach → client payments
• Resend — transactional and authentication email delivery
• Bunny.net — media and image delivery (CDN)
• Anthropic — processing for optional AI features

We maintain a current list of sub-processors and will provide a Data Processing Addendum (DPA) to coaches on request.

When you use AI features, relevant client context (such as logged history, goals, and preferences) is sent to our AI provider solely to generate the requested draft, which you review before sharing. We do not sell your data, and we do not use your client data to train third-party foundation models.

We don't sell personal data. We share it only with the service providers above, with the coach and client parties to a coaching relationship as needed to deliver the Service, when required by law, or in connection with a business transfer.

We keep information for as long as your account is active and as needed to provide the Service. You can export your data at any time, and you may request deletion of your account and associated data, subject to legal retention obligations.

Depending on where you live, you may have rights to access, correct, delete, or port your data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. Clients should typically direct requests to their coach (the controller of their data); we'll assist as processor.

We use necessary cookies to run the Service and limited analytics to understand and improve usage. Where required, we'll ask for your consent to non-essential cookies.

We use technical and organizational measures to protect information, including encryption in transit and access controls that isolate each coach's data. No system is perfectly secure, but we work continuously to safeguard your data.

Stride is not directed to children under 13 (or the minimum age in your jurisdiction). Coaches are responsible for obtaining any consent required to include minors as clients.

We may update this policy; material changes will be communicated in-app or by email. Questions or requests: privacy@traineracademy.org.