[COMPANY NAME] ("APEX," "we," "us," or "our") operates this website and the coaching services offered through it (the "Service"). This Privacy Policy explains what personal information we collect, how we use and protect it, and the choices and rights available to you. By using the Service, you agree to the practices described here.

1. Information We Collect

Contact information. When you submit our contact form, we collect your first name, last name, phone number, and email address so a coach can respond to your inquiry.

Health and fitness information. If you become a client and use the member dashboard, we may collect information you choose to provide such as workout logs, body composition or biometric measurements, training history, fitness goals, and other health-related information you share with your coach. We collect this category of information only after you affirmatively opt in, and you may decline to provide it without affecting your ability to inquire about our services.

Technical information. Our servers automatically log standard technical data (such as IP address, browser type, and request timestamps) for security and debugging purposes. We do not currently use advertising cookies, analytics trackers, or third-party tracking pixels on this site. If that changes, we will update this policy.

2. How We Use Your Information

• To respond to inquiries submitted through our contact form
• To deliver, personalize, and improve coaching and training services
• To communicate with you about your account, sessions, or program
• To maintain the security and integrity of our systems
• To comply with legal obligations

We do not use your health information for advertising and will never sell it.

3. Consent for Health Information

Before we collect any health or fitness data beyond basic contact information, we will ask for your explicit, opt-in consent and explain how that specific data will be used. You may withdraw consent at any time by contacting us, after which we will stop collecting new health data from you and delete what we are not legally required to retain.

4. How We Share Information

We do not sell personal information. We share information only with:

• Service providers who host our infrastructure and database (currently Supabase) and our website (currently Vercel), strictly to operate the Service on our behalf
• Our payment processor (currently Stripe), which collects and processes your payment details directly. APEX never receives or stores your full card number. Stripe handles that information under its own privacy policy, available at stripe.com/privacy
• Law enforcement or regulators when required by valid legal process
• A successor entity in the event of a merger, acquisition, or sale of assets, subject to the same protections described in this policy

5. Data Security

We use industry-standard safeguards to protect your information, including encrypted transmission (HTTPS), restricted database access controls, and rate-limiting to prevent abuse of our systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain personal information only as long as necessary to provide the Service, respond to your inquiry, or comply with legal obligations. You may request deletion of your information at any time as described in Section 8.

7. Not a HIPAA-Covered Entity

APEX is a personal training and coaching business, not a healthcare provider, health plan, or healthcare clearinghouse, and is generally not subject to HIPAA. We nonetheless apply safeguards modeled on those standards to protect any health-related information you share with us.

8. Your Rights and Choices

Regardless of where you live, you may contact us to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent for the collection of health-related information

California residents (CCPA/CPRA). You have the right to know what personal information we collect, to request deletion or correction, to opt out of the sale or sharing of personal information (we do not sell or share your information), and to limit the use of sensitive personal information. We will not discriminate against you for exercising these rights.

Consumer health data rights (Washington, Nevada, Connecticut, and similar state laws). Where applicable, you have the right to confirm whether we collect consumer health data about you, to access it, to withdraw consent, and to request its deletion. We do not use geofencing around healthcare facilities, and we do not sell consumer health data.

To exercise any of these rights, contact us using the information in Section 11.

9. Children's Privacy

The Service is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and where required by law, we will provide additional notice or seek renewed consent.

11. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact us at privacy@apexhumanperformance.com or through our contact page.