1. Introduction

CoachBeacon ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use our coaching client portal, workout logging tools, and related services.

This policy applies to all users of CoachBeacon, including:

Coaches: Fitness professionals who use CoachBeacon to manage clients
Clients: Individuals who access their coaching plans through the portal
Website visitors: Anyone who visits coachbeacon.in

CoachBeacon operates from India and is committed to handling personal data in line with India's Digital Personal Data Protection Act, 2023 (the DPDP Act). Section 15 explains our roles under the DPDP Act, your rights as a Data Principal, and how to reach our Grievance Officer.

2. Information We Collect

2.1 Information You Provide Directly

Account Information: Name, email address, phone number (for coaches during onboarding)
Portal Configuration: Coach branding (logo, accent color), business name, portal URL slug, feature settings
Communication: Messages sent to support, feedback, and inquiries

2.2 Information Collected Automatically

Device Information: Browser type, operating system, screen resolution
Usage Data: Pages visited, features used, time spent on pages
Log Data: IP address, access times, error logs for debugging
Cookies: Session cookies for authentication (no third-party tracking cookies)

2.3 Information from Google Services

When you authorize CoachBeacon through Google OAuth, we access:

Email Address: For user identification and authentication
Basic Profile: Name and profile picture (for display purposes)
Google Meet (Coaches & team members only): Permission to create Google Meet meeting spaces on your behalf when you start a one-click client video call. We only create the meeting and receive its join link and code; we never access meeting content, recordings, transcripts, or participant lists

3. Google API Data Disclosure

This section specifically addresses our use of Google APIs and complies with the Google API Services User Data Policy, including the Limited Use requirements.

3.1 OAuth Scopes We Request

Scope	Purpose	User Type
openid	Authenticate your identity	All users
email	Identify you and match to your coach	All users
profile	Display your name in the portal	All users
meetings.space.created	Create Google Meet video call spaces on your behalf for one-click client calls	Coaches & team members only

3.2 How We Use Google Data

Client Portal: Read your Google Sheet in real-time to display personalized plans - data is rendered on-demand and NOT permanently stored on our servers
Coach Onboarding: One-time file copy to your Drive during initial setup; files are created in YOUR Drive using YOUR storage quota
Authentication: Verify identity and maintain secure session
Writing Portal URL: After setup, we write your unique portal URL back to your spreadsheet cell
Instant Meet Calls: When a coach or team member starts a call, we create a Google Meet meeting space via the Google Meet REST API and share the join link with the coach and their client (WhatsApp/email). This scope is create-only: we cannot read call audio or video, recordings, transcripts, or any meetings created outside CoachBeacon

3.3 Limited Use Disclosure

CoachBeacon's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements:

We only use Google data for the purposes described in this policy
We do NOT sell, rent, or lease Google user data to any third party
We do NOT use Google user data for advertising, marketing, or profiling purposes
We do NOT allow humans to read Google user data except:
- With explicit user consent for support purposes
- For security investigations or legal compliance
- When aggregated and anonymized for internal analytics
We do NOT transfer Google data to AI/ML models for training purposes

3.4 Data Retention & Deletion

Google Sheet Data: Read in real-time on each request; NOT cached or stored on our servers
Google Meet: Only the meeting link and code are processed to deliver call invites; call content, recordings, and transcripts are never accessed or stored
OAuth Tokens: Encrypted and stored securely; automatically expire and require re-authorization
Revocation: You can revoke access anytime via Google Account Permissions
Upon Revocation: We immediately lose all access to your Google data; cached session tokens are invalidated

4. How We Use Your Information

We use collected information for the following purposes:

4.1 Service Delivery

Display your personalized workout and nutrition plans
Enable real-time data sync between coaches and clients
Process workout logs and track fitness progress
Send service notifications (check-in reminders, account updates)
Send WhatsApp check-in reminders via Meta WhatsApp Cloud API (only if the client has opted in)

4.2 Service Improvement

Analyze usage patterns to improve features (anonymized/aggregated)
Debug technical issues and fix bugs
Develop new features based on user needs

4.3 Communication

Respond to support inquiries
Send account and service-related notifications
Share platform updates and announcements (not marketing emails)

5. Data Storage & Security

5.1 Where Data is Stored

Google Sheets Data: Remains in YOUR Google account; we only read and display it
Workout Logs: Stored in our secure PostgreSQL database (Supabase)
Coach/Client Metadata: Stored in our PostgreSQL database
Authentication Tokens: Encrypted and stored in our database; session tokens stored locally in your browser
Uploaded Photos: Stored in Cloudflare R2 (cloud object storage)
LinkBeacon / Bio Page Configuration: Coach branding, theme settings, links, testimonials, and lead-form configuration stored in our PostgreSQL database. Lead submissions (name, phone, email, goals, source) are written to the coach's own Google Sheet and an instant notification email is sent to the coach. Lead data is visible only to the coach and their team
InvoiceBeacon Data: Invoice configuration (business name, GSTIN, bank details, branding), saved packages, and invoice history (line items, amounts, status) are stored in our PostgreSQL database. Invoice PDFs are generated on demand and not permanently stored on our servers. Invoice data is visible only to the coach who created it
Blood Report PDFs: Uploaded files are sent directly to Google Gemini for AI parsing and are NOT permanently stored on our servers; the extracted biomarker data is returned to the client and displayed in-portal only
Apple Health and Health Connect Data (optional): If a client chooses to connect Apple Health (iPhone) or Health Connect (Android) in the CoachBeacon app, daily totals (for example steps, sleep, heart rate, heart rate variability, weight, body composition, nutrition and workouts; full list in Section 14) are worked out on the phone and stored in our PostgreSQL database (Supabase), separately from anything the client types in. See Section 14 for full details
Error & Crash Reports: We use Sentry for error tracking. Sentry collects device type, OS version, browser/app version, and error stack traces. No personally identifiable information (name, email, phone) is sent to Sentry
Free Tools (coachbeacon.in/tools): All 47 public calculators require no login and store no user data - all calculations happen locally in the browser

5.2 Security Measures

Encryption in Transit: All data transmitted via HTTPS/TLS 1.3
Encryption at Rest: Database encryption for sensitive fields
Password Hashing: bcrypt with salt for any stored passwords
Access Controls: Role-based access; coaches only see their own clients
Rate Limiting: Protection against brute-force attacks
Security Headers: Helmet.js for HTTP security headers, CORS restrictions
Regular Audits: Periodic security reviews and dependency updates

For a full description of our technical and organizational security measures, see our Reasonable Security Safeguards document.

5.3 Data Retention Periods

Data Type	Retention Period
Workout Logs	Indefinite (until account deletion)
Apple Health / Health Connect daily totals	Until the coach deletes it (coaches can delete it from their portal), or on a deletion request (Section 7.3). Disconnecting stops new syncing but does not delete data already synced
Coach Account Data	Until account deactivation + 12 months
Client Portal Sessions	90 days from last access
OAuth Tokens	Until revoked or expired
Server Logs	30 days
Error/Crash Reports (Sentry)	90 days
WhatsApp Send Logs	12 months
Support Records	2 years from last interaction

6. Data Sharing

We do NOT sell, trade, or rent your personal information. We share data only in these limited circumstances:

6.1 With Your Coach

Clients: Your workout logs, progress, and submitted updates are visible to your assigned coach
Clients who connect Apple Health or Health Connect: the synced daily totals (Section 14) are visible to your coach and the team members your coach assigns to you, only after you agree to this on the app's Health screen
This sharing is fundamental to how the coaching service works

6.2 Service Providers

Resend: Email delivery for service notifications
Meta (WhatsApp Cloud API): WhatsApp messaging for opted-in check-in reminders (phone number shared only when client opts in)
Telegram (Bot API): Group chat reminders via @coachbeacon_bot. We collect and store the coach's Telegram user ID and the Telegram group chat ID in our coaching Google Sheet to deliver automated reminders. No Telegram messages are stored on our servers beyond a delivery log (status, scheduled time, sent time) kept for operational diagnostics. See Section 13 for full Telegram disclosure.
Supabase: Database hosting
Cloudflare: CDN, DDoS protection, photo storage
Firebase: Application hosting, Firestore document storage, and push notification delivery (FCM)
Sentry: Error and crash reporting for service reliability (no PII transmitted)
Google Cloud: Google Sheets API, OAuth services
Google Gemini (AI): Blood report PDF parsing and personalised recipe generation. Data sent to Gemini is used solely to generate a response and is not used to train Google's models. See Section 12 for full AI disclosure.

6.3 Legal Requirements

When required by law, subpoena, or court order
To protect our rights, property, or safety
To prevent fraud or illegal activity
In connection with a merger, acquisition, or sale of assets (with user notice)

7. Your Rights

As a Data Principal under India's Digital Personal Data Protection Act, 2023 (the DPDP Act), you have the following rights regarding your data. Coaches and team members can exercise these by contacting CoachBeacon support. Clients exercise these rights through their coach, who is responsible for their data and holds their consent; CoachBeacon support can help route a request to the coach. See Section 15 for full DPDP details.

7.1 Access & Portability

Request a copy of your personal data
Export your workout logs in machine-readable format
View all data we have about you

7.2 Correction

Request correction of inaccurate personal data
Update your profile information through the portal

7.3 Deletion

Request deletion of your personal data
Coaches: Contact [email protected] to delete your account
Clients: Contact your coach to remove you from their system
Some data may be retained for legal compliance (support and account records)

7.4 Revoke Access

Revoke Google account access anytime via Google Account Permissions
Disconnect Apple Health or Health Connect anytime from the Health screen in the CoachBeacon app; this stops any further syncing. Data already synced stays with your coach, who can delete it; to have it deleted, ask your coach (Section 7.3 and Section 14)

7.5 Withdraw Consent

Withdraw your consent at any time, as easily as you gave it
Withdrawal applies going forward and does not undo processing already carried out lawfully
Some records, such as consent and billing history, are kept for as long as the law requires

8. Cookies & Tracking

8.1 Cookies We Use

Session Cookies: Essential for authentication; expire when you close browser or after inactivity
Preference Cookies: Remember your settings (theme, language)

8.2 What We DON'T Use

Third-party tracking cookies (Google Analytics, Facebook Pixel, etc.)
Advertising cookies
Cross-site tracking

9. Children's Privacy

CoachBeacon is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that a child under 18 has provided us with personal information, we will delete it immediately. If you believe a child has provided us with personal data, please contact us at [email protected].

Under the DPDP Act, the personal data of a child (anyone under 18) may be processed only with the verifiable consent of a parent or legal guardian. Where a coach chooses to work with a client under 18, the coach is the Data Fiduciary for that client and is responsible for obtaining and keeping that parental or guardian consent. CoachBeacon cannot verify the real age of the people a coach adds, so this duty stays with the coach.

10. International Data Transfers

CoachBeacon is operated from India. Your data may be processed in:

India: Primary operations and support
United States: Cloud infrastructure (Firebase, Supabase, Cloudflare)
European Union: Some CDN edge nodes

By using our services, you consent to the transfer of your data to these locations. We ensure appropriate safeguards are in place for international data transfers.

11. Push Notifications & Email Data

CoachBeacon uses push notifications and email for coach-client communications. This section explains how we handle notification-related data.

11.1 Data We Process

Push Subscription Tokens: Browser push notification subscriptions for reminder delivery
Email Addresses: Coach and client emails for notification delivery
Notification Delivery Status: Sent and failed statuses for service quality
Consent Records: When and how notification consent was granted or withdrawn

11.2 How We Use Notification Data

Deliver plan reminders and check-in notifications to clients
Send service updates and account notifications to coaches
Track delivery status for service quality improvements
Provide opt-out mechanisms when requested

11.3 What We Do NOT Do

We do NOT sell or share notification data with advertisers
We do NOT send marketing or promotional messages
We do NOT use notification data for profiling or targeting
We do NOT store notification content beyond delivery confirmation

11.4 Lawful Basis

We process notification data based on: (a) Explicit consent from users when enabling push notifications, (b) Legitimate interest in providing service notifications, and (c) Contractual necessity to deliver agreed-upon features.

12. AI Features & Gemini Disclosure

CoachBeacon uses Google Gemini, a generative AI service, to power two specific features: blood report analysis and personalised recipe generation. This section explains exactly how Gemini processes your data.

12.1 Blood Report PDF Parsing

Clients can upload a blood report PDF through their portal. This file is sent to Google Gemini to extract biomarker values (e.g. haemoglobin, B12, ferritin, TSH).
The PDF is sent directly to Gemini's API and is NOT stored on CoachBeacon servers. Only the extracted structured data (biomarker names and values) is returned and displayed in the portal.
The extracted data is visible to the client and their assigned coach. It is not shared with any other party.
Uploading a blood report is entirely optional. The feature requires explicit client action - no automatic uploads occur.

12.2 AI Recipe Generation

Clients can request AI-generated recipes based on their food plan ingredients, calorie targets, and dietary preferences set by their coach.
Only the plan parameters (ingredient names, macro targets, dietary flags) are sent to Gemini. No personally identifiable information (name, email, phone number) is included in the AI request.
Generated recipes are displayed directly to the client and are not stored permanently on our servers.

12.3 Gemini Data Use Policy

Data submitted to Gemini via the API is not used to train Google's AI models (per Google's API terms)
We do not use Gemini to process any data obtained via Google OAuth (Sheets, Drive, Gmail) - those are kept strictly separate
Apple Health and Health Connect data is used by AI only to help draft a client's Journey progress report, and is never used to train any AI model (Section 14.3)
We do not use AI to make automated decisions that legally or significantly affect users
You can choose not to use AI features at any time; they are opt-in actions, not background processes

12.4 ScanBeacon (Supplement Label Analyzer)

ScanBeacon operates as a separate Telegram bot that analyses supplement labels submitted by users (photo or text). The submitted image or ingredient text is sent to Google Gemini for analysis. The PDF report is delivered back to the user inside Telegram and forwarded to the admin Telegram for visibility.
Only the supplement label image/text is sent to Gemini. No personally identifiable information is included in the request. Submitted images are not permanently stored on CoachBeacon servers beyond the active analysis session.
Per-user scan history (product name, scan date, total scans) is stored in a Google Sheet for quota enforcement and audit. Access is invite-only via redeemable codes.

12.5 ScriptBeacon (Coaching Script Generator)

ScriptBeacon is an in-portal tool that uses Google Gemini to draft long-form coaching scripts (lead replies, retention messages, missed-check-in nudges, doctor-coach communications) on demand.
Only the prompt parameters (scenario, tone, persona, optional context entered by the coach) are sent to Gemini. No client personal data is included in the request unless the coach explicitly types it into the prompt - and we recommend keeping prompts generic.
Generated scripts and their input parameters are saved to the coach's history for re-opening, stored in our PostgreSQL database. Coaches can delete history entries at any time from the portal.
Access is gated by a per-coach monthly quota. Quota usage is tracked for billing and audit.

12.6 Free Public Tools (coachbeacon.in/tools)

CoachBeacon offers 47 free fitness calculators at coachbeacon.in/tools. These tools require no login and collect no personal data. All calculations run entirely in your browser. No inputs, results, or usage data are sent to our servers. These tools are available to anyone with no account required.

13. Telegram Group Bot (@coachbeacon_bot)

CoachBeacon operates a Telegram bot (@coachbeacon_bot) that coaches can deploy into client group chats to deliver automated coaching reminders. This section discloses exactly what data is collected and how it is used.

13.1 Data We Collect via Telegram

Telegram User ID (coach only): Collected when a coach sends a /start message to @coachbeacon_bot in a private DM, used to link the coach's CoachBeacon account to their Telegram identity. This ID is stored in the coach's own Google Sheet (tgb_coaches tab).
Telegram Group Chat ID: Collected when a coach adds @coachbeacon_bot to a client's Telegram group. Used to identify which group receives which scheduled reminders. Stored in the coach's Google Sheet (tgb_groups tab).
Group Configuration Settings: Water goal (litres), daily reminder frequency, active/inactive status, group name - all stored in the coach's Google Sheet. No client names or phone numbers are stored by the bot.
Message Delivery Log: A record of each scheduled message (type, scheduled time, sent time, delivery status) is stored in the coach's Google Sheet (tgb_message_log tab) for operational diagnostics and deduplication. Message content is not logged.

13.2 How We Use Telegram Data

Routing scheduled reminder messages to the correct Telegram group chat
Deduplication - preventing duplicate sends if a scheduled job re-runs
Linking a coach's CoachBeacon account to their Telegram user for bot command authorization
Allowing coaches to pause, resume, or reconfigure reminders per group

13.3 What We Do NOT Do with Telegram Data

We do NOT read, store, or process any messages sent by users inside the group chat
We do NOT collect the names, usernames, phone numbers, or profile photos of group members
We do NOT sell, share, or use Telegram data for any purpose other than reminder delivery
We do NOT use Telegram data to train AI models
The bot only sends outgoing reminder messages - it does not scrape or monitor group activity

13.4 Data Storage & Deletion

All Telegram-related data (coach Telegram ID, group chat IDs, delivery logs, configuration) is stored in the coach's own Google Sheets - under their own Google account using their own storage quota
No Telegram data is permanently stored on CoachBeacon servers beyond in-memory processing during message dispatch
Coaches can delete bot data by removing the bot from any group and clearing the relevant rows from their Google Sheet
Revoking Google OAuth access immediately terminates CoachBeacon's ability to read or write Telegram data in the Sheet

13.5 Telegram API Compliance

@coachbeacon_bot operates strictly within Telegram's Bot API terms of service. The bot is an admin-only tool controlled entirely by coaches. Client group members can leave any group at any time to stop receiving messages. Coaches can remove the bot from any group at any time via Telegram group settings.

14. Mobile Apps, Apple Health and Health Connect

Clients can use the CoachBeacon app on iPhone and Android. If a client chooses to, the app can read health and fitness data from Apple Health (iPhone) or Health Connect (Android) so the client and their coach can see it. This is optional, off until the client turns it on, and can be turned off at any time.

14.1 What we read

Activity: steps, walking and running distance, floors climbed, active and resting calories, and workouts recorded by the phone or watch (date, type, duration, calories, average heart rate)
Sleep: time asleep, time in bed, bedtime and wake time, sleep stages (light or core, deep, REM, awake), and temperature change during sleep, when the device records them
Heart and recovery: resting heart rate, heart rate variability, daily average and maximum heart rate, blood oxygen, breathing rate, and VO2 max (cardio fitness)
Body: weight, body fat and lean body mass (for example from a smart scale)
Nutrition: calories, protein, carbohydrates, fat and fibre logged in another app, and water intake
Health markers: blood pressure and blood glucose, if the client records them
Mind: mindful minutes, and on iPhone the client's own State of Mind (mood) entries
Cycle: period days, if the client records them
Each item is optional: the phone's permission screen lets the client choose which ones to share
We read only. We never write to, change or delete anything in Apple Health or Health Connect
We do not read any other category, for example medications, ECG or heart rhythm alerts, hearing, sexual activity, ovulation tests, pregnancy, symptoms or location

14.2 How it works and what we store

The app works out one total per day on the phone (for example "8,123 steps") and sends only those daily totals to our servers. Individual readings stay on the phone
On first connection the app reads up to the last 30 days. After that it sends new days when the app is opened and, where the phone allows it, in the background a few times a day
Daily totals are stored in our PostgreSQL database (Supabase), encrypted in transit, kept separate from anything the client types into check-ins or forms, and never written to Google Sheets
The client's own Health screen in the app shows their data

14.3 Who can see it, and how it is used

The client, their coach, and the team members the coach assigns to that client. The app asks the client to agree to this before connecting
It is used only to show progress and to plan and adjust the client's coaching
It is never sold, used for advertising or marketing, shared with data brokers, or used for credit, insurance or employment decisions
One AI use, and only one. When a coach asks CoachBeacon to draft a client's Journey progress report (weekly, monthly or quarterly), a summary of that period is sent to Google Gemini to help write the draft: averages with the lowest and highest values (for example average steps, average sleep, resting heart rate against the client's usual), the first and last reading for body measurements such as weight, the number of period days, and the types of workouts. The full day-by-day record is never sent. The coach reads and edits every draft before it is kept or shared. No other AI feature, including the AI Coach chat, receives this data
Never used to train any AI model. No exceptions. Not CoachBeacon's, not Google's, not anyone's. We send it to Gemini only through Google's paid API, whose terms forbid Google from using it to train or improve its models, and we will never use, sell or license it for AI training under any circumstances. This is a firm commitment, not a setting that can be changed
CoachBeacon does not store Apple Health data in iCloud
Our use of data from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements

14.4 Turning it off, and deletion

Disconnect anytime from the Health screen in the CoachBeacon app. This stops all further syncing straight away
Health sync is also off until your coach turns it on for you in their portal, and while your coach has it off the app does not sync and our servers refuse any health data that still arrives
You can also remove access in the phone's settings: on iPhone, Settings, Health, Data Access and Devices, CoachBeacon; on Android, Health Connect, App permissions, CoachBeacon. This also stops new data
Daily totals already synced stay with your coach as part of your coaching record, including after your coaching ends, until your coach deletes them. Your coach can delete them from their portal at any time; to ask for deletion, contact your coach or CoachBeacon support (Section 7.3)

14.5 Permissions the apps request

Permission	Purpose
Camera and photos	Take or choose progress and meal photos
Notifications	Reminders and messages from your coach
Apple Health (read only, optional)	Read the data listed in 14.1 on iPhone
Health Connect (read only, optional)	Read the data listed in 14.1 on Android, including in the background so totals stay up to date

14.6 Other data

Apart from the health data above, the apps collect the same data as the web portal (Sections 2 and 6).
Crash reports are sent to Sentry (see Section 5.1) and contain no personally identifiable information.

15. Indian Data Protection (DPDP Act, 2023) & Grievance Redressal

CoachBeacon operates from India and handles personal data in line with India's Digital Personal Data Protection Act, 2023 (the DPDP Act) and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.

15.1 Our Roles Under the DPDP Act

Your account data: CoachBeacon is the Data Fiduciary. We decide how it is used to run the platform, and we answer for it directly.
A coach's client data: the coach is the Data Fiduciary and CoachBeacon is only the Data Processor. The coach decides what is collected and why; we store and process it solely on the coach's instructions.
Clients do not give CoachBeacon a separate consent. The coach is the responsible party and holds each client's consent.

15.2 Grievance Officer

In accordance with the DPDP Act and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have appointed a Grievance Officer:

Grievance Officer: Shubham Modi

Email: [email protected]

Phone: +91 808-404-1998

Address: 304B Shiv Sarovar Apartment, School Road Purani Ranchi, Jharkhand 834001

15.3 Your Rights as a Data Principal

Access: ask for a copy of the personal data held about you
Correction: fix anything that is wrong, out of date, or incomplete
Erasure: ask for your data to be deleted once it is no longer needed (subject to legal retention requirements)
Withdraw consent: take back your consent at any time, as easily as you gave it (withdrawal applies going forward)

Coaches and team members can exercise these rights by contacting CoachBeacon support. Clients exercise these rights through their coach, who holds their data and consent; CoachBeacon support can help route a request to the coach.

15.4 How to File a Privacy Complaint

Email your complaint to [email protected]
Include your registered email, description of the privacy concern, and evidence
You will receive acknowledgment within 24 hours
Investigation and resolution within 15 days (30 days for complex issues)

15.5 Data Protection Board of India

If your concern is not resolved to your satisfaction, you have the right to raise a complaint with the Data Protection Board of India.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes:

We will update the "Last updated" date at the top
For material changes, we will notify you via email or in-app notification
Continued use of the service after changes constitutes acceptance

17. Contact Us

For questions, concerns, or requests regarding this Privacy Policy:

CoachBeacon Fitness Portal

Email: [email protected]

Phone: +91 808-404-1998

Address:

304B Shiv Sarovar Apartment, School Road Purani Ranchi

Old Mukti Gas, Ranchi G.P.O., Jharkhand, PIN: 834001, India

We aim to respond to all privacy-related inquiries within 48 hours on business days.