Privacy Policy

Last updated 27 October 2026

CoachAI is an AI strength coach run by Bhyrav Prasad. This page explains what data CoachAI collects, what it does with it, who else handles it, and what you can do about it. The short version: your training data is used to coach you, nothing else. We don't sell it, show you ads, or use it to train AI models.

What we collect

• Your account: username, password (stored only as a one-way bcrypt hash, never in readable form), time zone and preferred units. If you sign in with Google, we also receive your name and email address from Google.
• What you tell the coach and log: your chat messages, and your training log — workouts, exercises, weights, reps, effort ratings, bodyweight, goals, and any notes about pain, injuries, sleep or nutrition you choose to share. Some of this is health information.
• Imported history: when you import workouts from another app, the file is read in your browser and only the workouts parsed from it are sent to us. If we don't recognise the file's format, its column names and first 12 rows are sent to the AI model (see below) to work out which column is which.
• Your plan: when you pick a plan, your email address and mobile number, which plan you chose, and the state and dates of your subscription and payments. Card numbers, UPI PINs and bank details go to Cashfree Payments, not to us; we never see or store them.
• How you use CoachAI: a record of what you do in the app and when, such as signing in, messaging the coach, logging a set, claiming free months or paying. It notes the action and the time, never what you wrote. We use it to see how the app is used and to improve it. If you report one of the coach's replies, we keep that reply and your note so we can review it.
• Technical data: our hosting provider keeps standard server logs (such as IP address, the page or API requested, and the time) for security and debugging.
• Ad measurement: our website uses the Meta Pixel to see which of our Facebook and Instagram ads work (see "Who else handles it" and "Cookies" below).
• Website visits: on our home and pricing pages we record, without your name or IP address, how you arrived (for example from one of our Instagram ads), which parts of the page you looked at and for how long, how far you scrolled, and which links and buttons you tapped. Your browser keeps a random visitor ID so repeat visits can be counted, and if you then create an account we note which visit brought you. We use this only to improve our website, it stays with us (no other company receives it), and visits are deleted after 90 days.

How we use it

• To coach you: plan workouts, answer your questions, and keep your training log, its index and your one-page summary up to date.
• To show you your own data — every page of your log is visible to you in the app.
• To keep the service secure and fair: sign-in protection, rate limits and daily usage limits.
• To email you, if we have your email address: about your account, and now and then about CoachAI itself, such as asking for your feedback. Reply "stop" to one of those and we won't send you any more.

We do not sell your data, use it to train AI models, or use it for anything other than running CoachAI for you as described above. Your training log, chats and contact details are never shared for advertising; the only data that reaches an advertising company is the limited Meta Pixel data described below.

Who else handles it

CoachAI uses a few service providers to run. Each only receives what it needs to do its job:

• Amazon Web Services stores your account and training data (in the Mumbai, India region).
• Vercel hosts the app and runs its server code.
• Z.AI provides the AI model. When you chat with the coach — and when your summary is rewritten each night — your message and the relevant parts of your training log are sent to Z.AI to generate the response.
• Resend delivers the emails we send you. It receives your email address and the message.
• Cashfree Payments processes plan payments: your name, email address and mobile number, and the payment details you enter on its checkout.
• Meta (Facebook and Instagram) receives Meta Pixel data from our website: the pages you visit, and whether you created an account, trained on 3 days of your free week, or bought a plan (with its price) — plus your IP address, browser and device details, and Meta's own cookies. It never receives your training log, chats, username, email address or phone number. We use it to measure our ads and to show them to people who have visited CoachAI. Meta handles this data under its own privacy policy.
• Your browser's push service (Google for Chrome and our Android app, Mozilla for Firefox, Apple for Safari) delivers notifications if you turn on reminders: a nudge when it's time to train, and a note when the coach has replied. We keep the push address your browser gives us for that; each message is encrypted, so the push service can't read it. Turn reminders off any time from the menu.

How it's protected

• Everything travels over HTTPS and is encrypted at rest.
• Each account's data is kept separately and is only reachable with that account's signed-in session.

How long we keep it

We keep your data for as long as you have an account. When data is deleted or changed, earlier versions remain in our backups for up to 30 days and are then removed for good.

Your choices

• See it: the Log tab shows your summary, index and every day page.
• Delete your account and data: in the app, open the menu and tap Delete account; it's deleted straight away. Or email hello@coachai.fit from the details you signed up with (or tell us your username) and we will delete your account, training log and chats within 30 days. See how to delete your account.
• Get a copy or ask us to correct something: email hello@coachai.fit.

Cookies

CoachAI sets one cookie to keep you signed in (it lasts up to 30 days, or until you sign out) and, while you are signing in with Google, a short-lived cookie (10 minutes) that protects that step. When you create an account we also set a 10-minute cookie so the Meta Pixel can count the sign-up once. On the home and pricing pages we store a random visitor ID in your browser and set a cookie (90 days) with how you first arrived, so we can see which visits lead to sign-ups (see "Website visits" above).

The Meta Pixel sets Meta's advertising cookies (_fbp, and _fbc if you arrived from a Meta ad), which last up to 90 days. You can block them in your browser's settings, and control how Meta uses this data for ads in your Facebook or Instagram ad preferences.

Age

CoachAI is not for anyone under 16. If you believe someone under 16 has an account, contact us and we'll delete it.

Changes

If this policy changes, we'll update the date at the top, and tell you in the app before significant changes take effect.

Contact

Questions or requests: hello@coachai.fit.