Privacy Policy
Your privacy is our priority. This policy explains how we collect, use, and protect your personal information.
Last updated: 7/31/2025
Personal Information
We collect information you provide directly to us, including:
- Name, email address, and contact information
- Account credentials and authentication data
- Payment information (processed securely through third-party providers)
- Profile information and preferences
Health Information
To provide personalized coaching, we collect:
- Current medications and dosages (GLP-1 related)
- Health goals and dietary preferences
- Weight, height, and other health metrics
- Side effects and symptom tracking
- Exercise and activity data
Usage Data
We automatically collect certain information when you use our services:
- Device information (IP address, browser type, operating system)
- Usage patterns and interaction data
- Log files and crash reports
- Cookies and similar tracking technologies
Primary Uses
- Provide personalized AI coaching and meal planning
- Generate medication off-ramp plans and health recommendations
- Track progress and provide analytics
- Communicate with you about your account and services
- Process payments and manage subscriptions
Secondary Uses
- Improve our AI algorithms and service quality
- Conduct research and analytics (anonymized data only)
- Ensure platform security and prevent fraud
- Comply with legal obligations
- Send marketing communications (with your consent)
We DO NOT sell your personal information
Your health data is never sold to third parties or used for advertising purposes.
Limited Sharing
We may share your information only in these specific circumstances:
- Service Providers: Trusted third-party providers who assist with our services (hosting, payment processing, analytics)
- Legal Requirements: When required by law, regulation, or legal process
- Safety and Security: To protect the rights, property, or safety of our users
- Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice)
- Consent: When you explicitly consent to sharing
Security Measures
- End-to-end encryption for all health data transmission
- Industry-standard SSL/TLS encryption
- Regular security audits and penetration testing
- Access controls and employee training
- Secure data centers with 24/7 monitoring
- Regular backups and disaster recovery procedures
HIPAA Compliance
We maintain HIPAA-compliant practices for all health information, including Business Associate Agreements with service providers and strict access controls.
Data Retention
We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Health data is retained for 7 years unless you request earlier deletion.
Data Rights
- Access: Request a copy of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request your data in a portable format
- Restriction: Limit how we process your information
- Objection: Object to certain processing activities
Communication Preferences
You can opt out of marketing communications at any time by clicking "unsubscribe" in emails or contacting us directly.
Account Deletion
You may delete your account at any time through your profile settings. Upon deletion, we will remove your personal information within 30 days, except where retention is required by law.
Essential Cookies
We use essential cookies for authentication, security, and basic functionality. These cannot be disabled.
Analytics Cookies
We use analytics cookies to understand how our service is used and improve user experience. You can opt out through your browser settings.
Third-Party Cookies
Some features may use third-party cookies (e.g., payment processing, customer support). These are governed by the respective third-party privacy policies.
Your information may be transferred to and processed in countries other than your residence. We ensure adequate protection through standard contractual clauses, adequacy decisions, or your explicit consent.
We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or prominent notice on our website at least 30 days before they take effect.
If you have questions about this privacy policy or our data practices, please contact us:
Email: privacy@clovecoach.com
Address: CloveCoach, Inc.
Data Protection Officer
[Address to be provided]
Phone: [Phone number to be provided]