Privacy Policy

Elev8 is a coaching platform. Coaches publish training programs and availability; clients buy those programs, book sessions, follow the training plan and message their coach. When you use Elev8 as a client, your coach is the party you have a coaching relationship with, and we operate the platform that relationship runs on.

Account information. Your name, email address and password (stored only as a salted hash by our authentication provider — we never see or store your plaintext password). Optionally a profile photo, and for coaches a studio name, bio, branding and social links.

Coaching content. The programs assigned to you, training sessions and the results you record against them, scheduled bookings, and messages exchanged with your coach inside the app.

Purchase records. What you bought, when, the amount, the currency and the status of the payment or subscription. Card numbers are entered directly into Stripe’s hosted checkout and never reach our servers; we store only Stripe’s identifiers and the last four digits Stripe returns to us.

Device and usage data. Basic technical information such as your browser or device type, and — if you turn on notifications — a push subscription for that specific device.

Calendar data (optional). If you connect Google Calendar, we read your busy times to avoid double-booking and write the sessions you book. We do not read the contents of unrelated events.

To run your account and sign you in; to deliver the programs and sessions you have purchased; to take payment and issue refunds; to send transactional email such as booking confirmations, receipts and password resets; to send notifications you have opted into; to keep the service secure and to detect abuse; and to meet our accounting and tax obligations.

We do not sell your personal information, and we do not use your coaching content or messages to train machine-learning models.

We process your data to perform our contract with you (running your account and delivering what you bought), on the basis of legitimate interests (keeping the platform secure and working), with your consent where consent is required (push notifications, calendar access, marketing email), and to comply with legal obligations (retaining financial records).

We use a small number of processors, each of which receives only what it needs: Supabase (database, authentication and file storage), Netlify (application hosting), Stripe (payments, subscriptions and payouts), Resend (transactional email), Google (Calendar sync, only if you connect it), and the push service built into your browser or operating system — Apple, Google or Mozilla — which relays notifications to your device.

Your coach can see the information needed to coach you: your name, email address, the programs and sessions assigned to you, the results you record, your bookings and your messages with them. Your coach cannot see your password or your card details.

We may also disclose information if we are legally required to, or to establish or defend legal claims. If the business is sold or reorganised, account data may transfer to the acquirer under the same commitments set out here.

Push notifications are off until you turn them on. When you enable them we store an endpoint identifying that browser or device, plus two encryption keys the browser generates so the notification body can be encrypted end-to-end before it leaves our servers. You can turn them off at any time in Settings, or in your device’s own notification settings; doing so deletes the stored subscription.

Transactional email (receipts, booking confirmations, password resets) is part of the service and is not marketing. If you subscribe to a coach’s newsletter, every message includes an unsubscribe link.

Our database and file storage are hosted in the Asia Pacific region; our processors may transfer and process data in other countries, including the United States, under standard contractual clauses or an equivalent transfer mechanism.

We keep account and coaching data for as long as your account is open. When you delete your account we remove your profile, coaching content, messages, bookings and notification subscriptions. Records of completed payments and refunds are retained for as long as tax and accounting law requires (generally six years) because we are legally obliged to keep them; those records are held under your Stripe customer reference rather than an active Elev8 account.

You can access and correct most of your information directly in the app. You also have the right to request a copy of your data, to ask us to correct or delete it, to object to or restrict certain processing, and to withdraw consent you have given. Account deletion is available in the app under Settings, and is described at e8.coach/account-deletion.

To exercise any other right, email support@e8.coach. If you are in the UK or EU and are unhappy with our response, you may complain to your data protection authority — in the UK, the Information Commissioner’s Office.

Elev8 is not intended for children under 13, and we do not knowingly collect their information. Where a coach works with a minor, the account must be set up and managed by a parent or guardian who accepts these terms on the child’s behalf. If you believe a child has created an account, contact us and we will remove it.

Data is encrypted in transit and at rest. Database access is restricted row by row so that you can only read your own records and your coach can only read the records of their own clients. Payment card data never touches our infrastructure. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant regulator as the law requires.

If we make a material change we will update the date at the top of this page and, where the change significantly affects you, tell you in the app or by email before it takes effect.