Privacy Policy

This Privacy Policy applies to people who use the Lungeable website, Coach Desk, mobile or web app, AI-assisted features, billing flows, support workflows, and public forms (collectively, the "Service"). It covers coaches, clients, trial users, waitlist or demo contacts, and people who contact support.

Platform role and coach-managed context

Lungeable generally determines how self-serve account, billing, product-security, support, analytics, reliability, abuse-prevention, and core platform-operation data is processed. In coach-managed use, a coach or coach organization may also decide what client training information is entered, imported, reviewed, shared, or deleted inside the Service.

For coach-directed workspace content, Lungeable processes that data to provide the Service, while separately processing account administration, billing, security, support, abuse prevention, reliability, limited product analytics, and legal-compliance data for its own business operations. Coach workspaces or paying coach customers may also be subject to supplemental Coach Business Terms. For paid coach workspaces, those terms are incorporated into the purchase and workspace relationship unless separate written commercial terms say otherwise. Coach workspaces or paying coach customers may also be subject to a Data Processing Addendum, or separate written commercial terms where offered.

Information we collect

• Account and profile information: name, email address, role, locale, timezone, sign-in identifiers, and account settings.
• Administrative and body-profile information: age or birth date, height, weight, and related body-context or calibration inputs used to set up training.
• Training and coaching information: workouts, weekly reports, schedules, exercise choices, loads, exercise history, adherence context, messages, notes, and coach-review context.
• Health-adjacent training context: pain notes, injury-related constraints, readiness signals, training accommodations, body context, and athlete schedule details used to support coaching decisions.
• Billing and subscription metadata: subscription status, plan identifiers, invoices, Stripe or payment-provider customer references, and checkout or portal session status. Payment card data is handled by the payment processor, not stored by Lungeable.
• Usage, diagnostics, and security data: device or browser details, request IDs, log events, rate-limit or abuse-prevention signals, and support troubleshooting context.
• Support and public-form data: email threads, demo requests, waitlist submissions, privacy requests, lead attribution details, referrer data, abuse-prevention signals, and other information you choose to send us.
• AI feature inputs and outputs: relevant training context, summaries, suggestions, and reviewable drafts when AI-assisted features are used.

Browser, device, and local storage

Lungeable uses browser storage such as localStorage or sessionStorage to keep signed-in web sessions working across public and app-facing web surfaces and, on selected public pages, to remember first-touch attribution and related lead-routing context. On mobile and some web-capable app flows, Lungeable may also store limited session, notification-prompt, and workout-continuity data in secure, encrypted, or platform-provided local storage.

Local device copies may temporarily persist until the device session is cleared, the app refreshes its local cache, or the platform overwrites encrypted local storage. Deleting an account on the server does not guarantee that every device-local artifact disappears instantly.

Public pages, analytics, and abuse prevention

On selected public web pages, Lungeable uses Plausible for privacy-oriented marketing analytics. Public forms may also process UTM parameters, referrer information, browser or device details, and Cloudflare Turnstile verification data to review requests, reduce abuse, and understand high-level acquisition performance.

Public forms are not meant for diagnoses, treatment details, or client-identifying medical information. Please keep submissions limited to the information needed for a demo, trial, waitlist, or support request.

Authenticated product analytics

On authenticated product surfaces, Lungeable may process limited product analytics such as event names, request IDs, platform or app version, locale or timezone, and server-derived country or region when available so we can understand product reliability and workflow usage.

Lungeable aims to avoid intentionally storing message bodies, note content, user-supplied geo, raw auth tokens, or other high-sensitivity free-text fields in product analytics events.

Media, uploads, and notifications

If you upload profile images, imported workout files, or other media or documents where a feature permits it, Lungeable processes that content to store, display, secure, and transmit it through the Service.

If notifications are enabled, Lungeable may process push tokens, platform or locale details, and notification-preference state so account, workflow, and reminder notifications can be delivered.

How we use information

• To provide, secure, and maintain the Service.
• To support coach-client workflows, scheduling, Weekly Report review, billing, account management, and support operations.
• To understand feature usage, workflow reliability, and product quality through limited, scrubbed product analytics.
• To respond to support requests, privacy requests, safety questions, abuse issues, or legal obligations.
• To monitor reliability, investigate incidents, improve product quality, and maintain auditability.
• To generate AI-assisted summaries, suggestions, or draft adjustments when those features are used.
• To enforce our terms, product guardrails, subscription rules, and security safeguards.

Who can see your data

If you use Lungeable under a coach, your coach and authorized members of that coach's team may see the workout, weekly-report, schedule, message, note, and related training context needed to coach you through the Service.

Lungeable personnel and contractors may access limited account or content data when needed to provide support, investigate abuse or security issues, debug incidents, comply with law, or operate core infrastructure. Access is intended to be limited to the work required for that purpose.

Health-adjacent information

Lungeable may process training, schedule, pain, injury-constraint, and related coaching information that can feel health-adjacent or sensitive. Lungeable is training software, not medical care, and these inputs are used to support training decisions rather than diagnosis, treatment, rehabilitation, physical therapy, or return-to-play clearance.

AI-assisted processing

When AI-assisted features are used, relevant training, schedule, Weekly Report, and related coaching context may be sent to AI providers such as OpenAI to generate summaries, suggestions, or reviewable draft adjustments. We aim to limit those inputs to what is needed for the feature to function.

For more detail, see our AI Policy and current Subprocessors page.

Current service providers and subprocessors

Depending on environment and enabled feature paths, Lungeable currently uses providers such as Supabase, Vercel, Stripe, Plausible, Sentry, OpenAI, Cloudflare Turnstile, and notification delivery providers such as Firebase Cloud Messaging or Apple Push Notification service when notifications are enabled.

The current provider list and high-level purpose of each provider are maintained on our Subprocessors page.

Support and admin access

Support and admin access is not a general right to browse user content. It is used only when reasonably necessary for support, fraud prevention, security review, product reliability, legal compliance, or a request you make. Internal access should be scoped to the minimum information needed to complete that work.

Retention by category

• Account and profile information: kept while the account is active and for a reasonable period afterward to support deletion handling, account recovery, security review, and legal obligations.
• Training and coaching content: kept while the account or coach-managed relationship remains active, then removed, deactivated, or retained in limited form according to deletion handling, workspace ownership, and legal requirements.
• Messages and notes: kept with the associated account or coaching record while active, then handled under the same deletion and retention rules as related coaching content.
• Billing records: retained as needed for accounting, tax, fraud, dispute, and compliance obligations.
• Security and audit logs: retained for limited periods appropriate to abuse prevention, debugging, reliability, and compliance review.
• Backups: may contain encrypted copies that persist until the normal backup rotation overwrites them.

Your rights and requests

You can request deletion, access, correction, or portability support through the app settings, our account deletion page, or support@lungeable.com. We may request information needed to verify identity before acting on a request, and some requests stay support-reviewed so we do not expose another person's data, break coach/client record boundaries, or treat a support-reviewed export path like an instant self-serve download.

Children and minors

Self-serve Lungeable access is for people age 18 or older and is not directed to children. If a coach uses Lungeable with a minor client, that coach or program is responsible for obtaining any required guardian permissions, disclosures, or consents and for complying with applicable law before using the Service in that context.

Changes and contact

We may update this policy as the Service evolves. Material updates will be reflected on this page and, when appropriate, through in-product legal notices or release processes tied to versioned acceptance.

Questions: support@lungeable.com.