Privacy Policy

Effective July 17, 2026

The short version: we store what the app needs to coach you — your account, your rep log, and your coaching conversations — on our server. Coaching requests are processed by an AI provider. We don't sell your data, we don't run ad trackers, and you can delete your account and everything in it from inside the app at any time.

What we collect

When you create an account: your email address, a password (stored only as a one-way cryptographic hash — we cannot read it), and your date of birth (used once to confirm you are 18 or older; the app is for adults only).

As you use the app: your onboarding answers, the reps you log and the XP/levels they produce, your daily briefs and reflections, messages you submit for review, and your conversations with the coach. This is your coaching record; storing it is what lets the coach know you.

How AI coaching works

When you use the brief, message review, coach chat, or reflection features, the relevant text (your message, your profile context, your recent activity) is sent to a third-party AI provider — currently Google (Gemini), with DeepSeek as a fallback — to generate the coaching response. These providers process the text to produce a reply under their own terms. We do not use your data to train AI models, and we do not permit providers to do so through our API configuration.

Emails

We send account emails only — verification, password reset — through our email provider (Resend). No marketing lists, no newsletters you didn't ask for.

What we never do

We never sell or share your personal information. We never show ads or use ad trackers. We never post anywhere on your behalf. The people you talk about in coaching are never contacted, identified, or profiled by us — your conversations are between you and your coach.

Deleting your account

Settings → Delete account, inside the app. This permanently erases your account, profile, rep log, XP, chats, reviews, and sessions from our server. There is no soft-delete or retention window — it's gone.

Security

All traffic is encrypted in transit (HTTPS). Passwords are hashed with scrypt. Sessions expire and can be revoked. Our server enforces per-user rate limits to prevent abuse.

Contact

Questions or requests: coach@approachxp.com.