Legal Document

Privacy Policy

Your privacy is our priority. This policy explains how we collect, use, and protect your personal information.

Last updated: 7/31/2025

1. Information We Collect

Personal Information

We collect information you provide directly to us, including:

  • Name, email address, and contact information
  • Account credentials and authentication data
  • Payment information (processed securely through third-party providers)
  • Profile information and preferences

Health Information

To provide personalized coaching, we collect:

  • Current medications and dosages (GLP-1 related)
  • Health goals and dietary preferences
  • Weight, height, and other health metrics
  • Side effects and symptom tracking
  • Exercise and activity data

Usage Data

We automatically collect certain information when you use our services:

  • Device information (IP address, browser type, operating system)
  • Usage patterns and interaction data
  • Log files and crash reports
  • Cookies and similar tracking technologies
2. How We Use Your Information

Primary Uses

  • Provide personalized AI coaching and meal planning
  • Generate medication off-ramp plans and health recommendations
  • Track progress and provide analytics
  • Communicate with you about your account and services
  • Process payments and manage subscriptions

Secondary Uses

  • Improve our AI algorithms and service quality
  • Conduct research and analytics (anonymized data only)
  • Ensure platform security and prevent fraud
  • Comply with legal obligations
  • Send marketing communications (with your consent)
3. Information Sharing and Disclosure

We DO NOT sell your personal information

Your health data is never sold to third parties or used for advertising purposes.

Limited Sharing

We may share your information only in these specific circumstances:

  • Service Providers: Trusted third-party providers who assist with our services (hosting, payment processing, analytics)
  • Legal Requirements: When required by law, regulation, or legal process
  • Safety and Security: To protect the rights, property, or safety of our users
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice)
  • Consent: When you explicitly consent to sharing
4. Data Security and Protection

Security Measures

  • End-to-end encryption for all health data transmission
  • Industry-standard SSL/TLS encryption
  • Regular security audits and penetration testing
  • Access controls and employee training
  • Secure data centers with 24/7 monitoring
  • Regular backups and disaster recovery procedures

HIPAA Compliance

We maintain HIPAA-compliant practices for all health information, including Business Associate Agreements with service providers and strict access controls.

Data Retention

We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Health data is retained for 7 years unless you request earlier deletion.

5. Your Rights and Choices

Data Rights

  • Access: Request a copy of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Request your data in a portable format
  • Restriction: Limit how we process your information
  • Objection: Object to certain processing activities

Communication Preferences

You can opt out of marketing communications at any time by clicking "unsubscribe" in emails or contacting us directly.

Account Deletion

You may delete your account at any time through your profile settings. Upon deletion, we will remove your personal information within 30 days, except where retention is required by law.

6. Cookies and Tracking Technologies

Essential Cookies

We use essential cookies for authentication, security, and basic functionality. These cannot be disabled.

Analytics Cookies

We use analytics cookies to understand how our service is used and improve user experience. You can opt out through your browser settings.

Third-Party Cookies

Some features may use third-party cookies (e.g., payment processing, customer support). These are governed by the respective third-party privacy policies.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your residence. We ensure adequate protection through standard contractual clauses, adequacy decisions, or your explicit consent.

8. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or prominent notice on our website at least 30 days before they take effect.

9. Contact Information

If you have questions about this privacy policy or our data practices, please contact us:

Email: privacy@clovecoach.com
Address: CloveCoach, Inc.
Data Protection Officer
[Address to be provided]
Phone: [Phone number to be provided]