Legal
Privacy Policy
Last updated: October 24, 2026
1. Information We Collect
Personal Information
- Name and email address (provided during signup)
- Password (stored as encrypted hash, never plain text)
- Profile information (fitness goals, fitness level, training style, equipment, injury history)
Health Information
- PAR-Q health screening responses
- Body weight entries (optional, client-provided)
- Soreness, energy, sleep, and mood check-ins
- Workout performance data (exercises, sets, reps, weights)
Technical Information
- Device push notification tokens (for workout reminders)
- App usage data (which features are used)
- IP address and browser/device type
Payment Information
- Payment processing handled entirely by Stripe
- On Your Mark Fitness never stores credit card numbers
- Stripe's privacy policy applies to payment data — see stripe.com/privacy
2. How We Use Your Information
- Generating and delivering your personalized training program
- Tracking your workout progress and completion
- Sending workout reminders and check-in notifications
- Processing subscription payments via Stripe
- Communicating with your coach
- Improving our programs and services
- Complying with legal obligations
3. Information Sharing and Disclosure
We do not sell your personal information.
We share data with:
- Supabase (database and authentication provider) — privacy policy: supabase.com/privacy
- Stripe (payment processing) — privacy policy: stripe.com/privacy
- Resend (transactional email delivery) — privacy policy: resend.com/legal/privacy-policy
- Klaviyo (email marketing) — receives your email address, first name and plan, and a record of some of what you do with us: signing in, finishing setting up your program and logging workouts on our website, coaching inquiries, and cancelling (with the reason you give). Klaviyo never receives your health screening answers or anything you tell us about injuries. Privacy notice: privacy.klaviyo.com
Your coach (Colin Koth) has access to:
- Your name and email
- Your program and current week
- Your check-in responses
- Your messages
- Your PAR-Q responses
4. Health Information
By using On Your Mark Fitness you voluntarily provide health and fitness information. This information is:
- Used solely to deliver your fitness program
- Visible to your coach for programming purposes
- Never sold or shared with third parties
- Stored securely with row-level security protections
5. Data Security
We implement the following security measures:
- All data encrypted in transit via HTTPS/TLS
- Database access controlled via Row Level Security (RLS)
- Authentication handled by Supabase with JWT tokens
- Passwords stored as encrypted hashes (never plain text)
- Payment data handled by Stripe (PCI DSS compliant)
- Push notification tokens stored securely
- Regular security audits of database access policies
6. Data Retention
We retain your data for as long as your account is active. If you cancel your subscription:
- Your workout history is retained for 90 days
- You may request deletion of your data at any time
- Contact: customerservice@onyourmarkfitness.com
To detect and block automated signups, we log each attempt to create an account: the name and email address submitted, the IP address it came from, the time, and whether the attempt was accepted. IP addresses in these logs are deleted automatically after 30 days. If an attempt is refused as automated, the name and email address that were submitted are deleted after 90 days; after that we keep only the date and the reason it was refused, with no personal information. The same 30-day limit applies to IP addresses collected by our other public forms.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your data
- Opt out of marketing communications
To exercise these rights contact customerservice@onyourmarkfitness.com.
8. Children's Privacy
On Your Mark Fitness is not intended for users under 18. We do not knowingly collect data from minors.
9. California Privacy Rights (CCPA)
California residents have additional rights including:
- Right to know what data is collected
- Right to delete personal data
- Right to opt-out of data sales (Note: We do not sell personal data)
- Right to non-discrimination for exercising rights
10. Changes to This Policy
We may update this policy periodically. We will notify you of significant changes via email. Last updated: October 24, 2026.
11. Contact Us
On Your Mark Fitness
Los Angeles, California
Email: customerservice@onyourmarkfitness.com
Website: onyourmarkfitness.com