Privacy Policy

Last Updated: September 17, 2026

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, update your profile, use the interactive features of our services, and communicate with us. This may include your name, email address, phone number, goals, challenges, and check-in data.

SMS Communications

If you choose to opt in, we may send you text messages containing reminders, check-ins, assignments, and coaching-related notifications.

Message frequency varies.

You opt in by checking the SMS consent box during onboarding.

You may opt out at any time by replying STOP to any message, or by contacting us at hello@thecoachai.app.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes at any time.

Third-Party Service Credentials and Integration Data

When you connect a third-party service to CoachAI — such as Google Calendar — we collect and store the OAuth access tokens and refresh tokens issued by that service so we can access it on your behalf. We also temporarily process data returned by the service (for example, calendar event details) to fulfill your requests. For details on how we handle Google user data specifically, see the "Google User Data" section below.

Coaching Materials and Proprietary Content

If you are a coach and choose to provide your website, uploaded documents, frameworks, or other coaching materials so we can tailor your AI assistant to your style and methodology, we use that content solely to configure and operate your AI assistant. Your proprietary information is kept confidential and is never sold or shared with third parties for marketing or promotional purposes.

2. How We Use Information

We use the information we collect to provide, maintain, and improve our services. This includes using your data to personalize the AI coaching experience, communicate with you, monitor and analyze trends, and for other internal business purposes.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes at any time. This includes your phone number, opt-in data, and consent.

3. Google User Data

CoachAI integrates with Google Calendar to let you manage your schedule through natural language conversations with your AI coach. This section explains what Google user data we access, how we use it, how we protect it, and how you can revoke access at any time.

What We Access

When you connect your Google Calendar to CoachAI, we request access to the following Google OAuth scopes:

  • openid and https://www.googleapis.com/auth/userinfo.email — allows CoachAI to identify your Google account by email address when you connect your calendar.
  • https://www.googleapis.com/auth/calendar.events — allows CoachAI to view, create, update, and delete events on calendars you own.
  • https://www.googleapis.com/auth/calendar.readonly — allows CoachAI to view your list of calendars so you can choose which one to use.

We do not request access to any other Google data, including Gmail, Drive, Contacts, or account-level calendar settings.

How We Use Google Calendar Data

We use this access solely to provide CoachAI's core functionality: letting you manage your calendar through conversation with your AI coach on WhatsApp or SMS. When you ask CoachAI to schedule, reschedule, or cancel an event, we read the relevant events from your Google Calendar and create, modify, or delete events as you've requested. We do not use your Google Calendar data for any other purpose.

How Google Calendar Data Is Stored and Protected

CoachAI stores your Google OAuth access and refresh tokens so that we can continue to access your calendar on your behalf when you message your coach. These tokens and any temporarily processed calendar data are stored on CoachAI's application infrastructure, which is hosted on the Base44 platform.

Base44 reports ISO 27001 certification and a SOC 2 Type II audit. These assurances concern Base44's platform and the scope of its certifications and audit; they do not mean CoachAI is independently certified. Base44's security program includes:

  • Encryption of data in transit via SSL/TLS and encryption at rest
  • Row-level security restricting data access at the database layer, with granular per-entity permissions
  • Role-based access controls and managed authentication
  • Annual third-party penetration testing and ongoing vulnerability management
  • Regular automated backups
  • GDPR compliance, including a Data Processing Agreement governing vendor data transfers

The hosting and international-processing disclosures in Section 4 also apply to Google integration data. We do not maintain a persistent copy of your calendar events beyond what is temporarily needed to process a given request.

Compliance with the Google API Services User Data Policy

CoachAI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What We Do Not Do with Your Google Calendar Data

  • We do not use Google Calendar data to serve advertisements.
  • We do not sell Google Calendar data to any third party.
  • We do not share Google Calendar data with third parties except as needed to provide the CoachAI service (for example, with our hosting and infrastructure providers), for security purposes, or to comply with applicable law.
  • We do not allow humans to read your Google Calendar data unless we have your specific consent, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or for internal operations where the data has been aggregated and anonymized so that it cannot be linked to you or any individual user.

Revoking Access and Requesting Deletion

You can revoke CoachAI's access to your Google Calendar at any time by visiting your Google Account permissions page and removing CoachAI from the list of connected apps. Revoking access will immediately stop CoachAI from being able to read or modify your calendar.

You can also request deletion of your CoachAI account and all associated data, including any stored Google OAuth tokens, by contacting us at hello@thecoachai.app. We will process deletion requests within a reasonable time frame.

Contact

If you have any questions about how CoachAI handles your Google user data, please contact us at hello@thecoachai.app.

4. Data Security, Hosting, and International Processing

CoachAI uses Base44 to host its application and store application data. Base44 states that data on its platform is encrypted in transit and at rest. This is not end-to-end encryption: authorized personnel and service providers may access data when necessary to operate, support, or secure the service. We take reasonable measures to protect personal information, but no storage or transmission method can be guaranteed completely secure.

Base44 reports ISO 27001 certification and a SOC 2 Type II audit. These apply to Base44 within the scope of its certification and audit, not to CoachAI as an independently certified or audited organization.

According to Base44's published documentation, workspace data is stored in the United States by default, with EU or UK storage options available for eligible workspaces and apps. This describes Base44's hosting options, not a verification of CoachAI's configured storage region. We do not promise Canada-only or Israel-only storage, or that all data remains exclusively in the United States.

Storage location is distinct from processing location. Base44 and authorized service providers used for AI coaching, messaging, payments, and connected services may process information in other countries. Their data-handling practices and applicable laws may differ from those in your country. The Base44 security assurances above do not establish the hosting location or security controls of every third-party service.

For Base44's published platform information, see its privacy and security documentation and security overview.

5. Data Sharing

We do not sell your personal information. We share relevant coaching information with a human coach only if you choose to work with and link your account to that coach; human coaching is optional. We may also share information with authorized service providers who need it to operate CoachAI, including hosting, AI processing, messaging, and payment providers, or where required by law. For the additional restrictions applicable to Google user data, see Section 3 above. No mobile information, including phone numbers, opt-in data, and consent, will be shared with third parties or affiliates for marketing or promotional purposes.

6. Your Choices

You may request access to, an export of, correction of, or deletion of your personal information through our contact page. You can also use available account controls to update your information or request account deletion. We may need to verify your identity before fulfilling a request. Requests are handled subject to applicable law; certain information may be retained where required by law or necessary for legitimate purposes such as security, resolving disputes, and maintaining required transaction records.

7. Children's Privacy

Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from anyone under 18 years old. If we learn that we have inadvertently collected such information, we will take steps to delete it promptly.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us through our contact page, or by emailing hello@thecoachai.app.