Privacy Policy

Introduction

LivingZOI ("we," "our," or "us") provides a coaching platform for fitness, nutrition, and whole-person health. This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices you have. Because our services involve health, fitness, and — if you connect a device — biometric data, we treat that information as sensitive and describe our handling of it in detail below.

Information We Collect

• Account & contact data: name, email, phone number, and login credentials.
• Health & fitness data: goals, workout and meal logs, body metrics (e.g. weight), check-ins, and reflections you record in the platform.
• Biometric & wearable data: if you connect a fitness tracker, we receive the metrics that device shares (for example steps, heart rate, sleep, and activity) through our integration partner.
• Progress photos & uploads: images and documents you choose to upload, which may be analyzed by our AI features to give you feedback.
• Payment data: handled by our payment processor; we receive confirmation and limited billing details, never full card numbers.
• Usage & device data: IP address, browser/device type, and interactions with the site, used for security and to improve the product.

How We Use Your Information

• Deliver and personalize your coaching program and content
• Generate insights, meal/photo analysis, and coaching responses
• Communicate with you about appointments, programs, and account activity
• Process payments and manage your subscription
• Secure the platform, prevent abuse, and comply with legal obligations

AI Processing of Your Data

Some features use artificial-intelligence models to analyze the content you provide — for example, estimating nutrition from a meal, giving feedback on a progress photo, or answering coaching questions. To do this, the relevant input is sent to a model provider through our AI gateway, processed to produce a response, and returned to you. Under our configuration, providers do not use your inputs to train their models. AI outputs are informational and are not medical advice.

Service Providers We Share Data With

We do not sell your personal information. We share it only with service providers who process it on our behalf to run the platform, under agreements that require them to protect it:

• Supabase: Database, authentication, and file storage (all account, health, and uploaded data).
• Stripe: Payment processing and subscription billing. We never store full card numbers.
• Twilio: SMS reminders and coaching notifications (only if you opt in).
• Terra: Wearable/fitness-tracker integration — syncs the biometric data you connect.
• Resend: Transactional and program email delivery.
• Vercel: Website hosting, delivery, and aggregate analytics.
• AI model gateway (Vercel AI Gateway / model providers): Powers meal analysis, progress-photo analysis, and coaching chat. Providers process inputs to generate a response and do not use your data to train their models under our configuration.

We may also disclose information if required by law or to protect the rights, safety, and security of our members and our platform.

Data Retention

We keep your information for as long as your account is active and as needed to provide the services. When you close your account or request deletion, we delete or de-identify your personal data within a reasonable period, except where we must retain limited records to meet legal, tax, or accounting obligations or to resolve disputes.

Your Rights & Choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can export your data from your account settings, and you can request access or deletion by contacting us at the address below. You may also opt out of SMS at any time by replying STOP, and unsubscribe from marketing email using the link in any message.

California Privacy Rights

If you are a California resident, you have the right to know what personal information we collect, to request its deletion, and to not be discriminated against for exercising these rights. We do not sell or share your personal information for cross-context behavioral advertising. To exercise your rights, contact us below.

Children's Privacy

Our services are intended for adults and are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

International Users

We operate in the United States, and our service providers may process your information there. If you access the platform from outside the U.S., you understand that your information will be transferred to and processed in the United States.

Data Security

We use technical and organizational safeguards — including encryption in transit, access controls, and row-level database security — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Cookies

We use cookies that are necessary to keep you signed in and to secure the platform, plus limited analytics to understand aggregate usage. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice.

Contact Us

For any privacy question or to exercise your rights, contact us at:

Email: hello@livingzoi.com