Privacy Policy

Dux Coach (“the app”) is provided by Frank Data Consultants, Inc. (“FDC”, “we”, “us”). It is a fitness-coaching app built around your logged history. This policy explains what we collect, how we use it, who processes it, and the control you have. We collect only what the app needs to coach you — we do not sell your data or use it for advertising.

Information we collect

• Account: your email address (for sign-in).
• What you log: workouts and sets, walks, daily check-ins (mood, energy, sleep), body metrics (e.g. weight), habits, and nutrition notes.
• Sensitive health information you choose to add: progress photos, pain or injury sites, supplements, and any medical context you enter. You decide what to share; you can skip any of it. This and the logged data above are also “consumer health data” — see our separate Consumer Health Data Privacy Policy.
• Usage: minimal technical/error logs to keep the app working.

How we use it

To run the app and generate your coaching: plans, weekly check-ins, and answers from your coach are produced from your own history. We do not use your data to train third-party AI models, and we do not sell it or share it with advertisers.

Who processes your data

We use a small set of service providers, only to operate the app:

• Supabase — database, file storage, and authentication (US region).
• Vercel — application hosting.
• Anthropic (Claude) — the AI model that generates your coaching and reads the food, supplement-label, and progress photos you submit. Relevant context from your logs, plus any photo you send, is processed to produce a response.
• Deepgram — converts your voice notes to text, if you use voice input.
• Twilio - delivers text-message reminders, only if you opt in to SMS. It receives your phone number and the content of the reminders we send.

We do not run third-party advertising or analytics trackers in the app.

Our website (duxcoach.com)

Our public website at duxcoach.com uses Google Analytics 4, a service from Google, to count visits and clicks on the App Store button. It runs only on our public marketing pages and only for visitors who are not signed in; it is never loaded inside the Dux Coach app or on app screens. Google Analytics sets Google cookies in your browser and receives standard technical details such as the page visited, referring site, and browser and device type. Google Analytics 4 does not log or store IP addresses. We do not use it for advertising, remarketing, or Google signals, and we never send your health information, logs, or account details to Google. See Google’s Privacy Policy and how Google uses data from sites that use its services. You can opt out with the Google Analytics opt-out browser add-on or by blocking cookies in your browser.

Text messages (SMS)

Text reminders are optional and off by default. If you provide a mobile number and opt in, we collect your phone number and a record of your consent (the exact wording shown, its version, and a timestamp) so we can send the coaching reminders you requested and honor opt-outs. We use your number only for those messages. Reply STOP at any time to opt out, or HELP for help. We never share your phone number or your SMS opt-in consent with third parties for marketing. Messages are delivered through Twilio, a messaging provider acting on our behalf.

Storage & security

Your data is isolated per account with row-level security so you can only access your own records. Progress photos and other files are kept in private storage and served through short-lived, signed links. No system is perfectly secure, but we take reasonable measures to protect your information. We keep a log of when our systems and staff access account data, so we can review and investigate access.

Your choices & rights

• Export: download everything you’ve logged, anytime, from More → Settings → Your data.
• Delete: permanently delete your account and all associated data from More → Settings → Your data. This cannot be undone.

Depending on where you live, you may have additional rights over your personal and health information (for example, to access, correct, delete, or export it, to opt out of any sale or sharing, and to withdraw consent). The export and delete tools above are the primary way to exercise those rights; you can also contact us and we’ll respond within 45 days. For consumer health data specifically, see our Consumer Health Data Privacy Policy.

Retention & backups

We keep your data for as long as your account is active so the coach can use your history. When you delete your account, your data is permanently removed from our live systems. Copies may remain in our encrypted database backups for up to about 15 days until those backups are automatically replaced. We do not restore or use deleted data from backups except as needed to recover from a system failure, and if that happens we delete it again. You can export or delete your data at any time from More → Settings → Your data.

Where the service operates

Dux Coach is offered only in the United States, and your data is stored and processed in the United States. If you use the app from outside the U.S., you understand that your information will be transferred to and handled in the U.S.

Your state privacy rights

Residents of California (CCPA, as amended by the CPRA), Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with consumer privacy laws have rights over their personal information. We extend the rights below to all users, wherever in the U.S. you live:

• Know and access: learn what personal information we collect, use, and disclose, and get a copy of it.
• Delete: have your personal information deleted, subject to limited legal exceptions.
• Correct: fix inaccurate personal information. You can edit most entries directly in the app.
• Opt out of sale, sharing, and targeted ads: we do not sell your personal information, do not “share” it for cross-context behavioral advertising, and do not use it for targeted advertising or profiling that produces legal or similarly significant effects. There is nothing to opt out of, but you may still contact us.
• Limit use of sensitive information: we use sensitive personal information, including health information, only to provide the app you asked for.

How to exercise your rights. Use the export and delete tools in More → Settings → Your data, or email support@frankdataconsultants.com. We will verify your request by confirming it comes from the email address on your account, and we respond within 45 days (we may extend once by another 45 days when reasonably necessary, and will tell you if we do).

Authorized agents. You may use an authorized agent to make a request for you. We may ask the agent for your signed permission and ask you to verify your identity directly with us.

No discrimination. We will not deny you service, charge you a different price, or give you a lower quality of service because you exercised your privacy rights.

Appeals. If we decline your request, you may appeal by replying to our decision or emailing support@frankdataconsultants.com with the subject line “Privacy Appeal”. We will respond in writing within 60 days (or the time your state’s law requires) and explain our decision. If you are not satisfied, you may contact your state Attorney General.

Washington, Nevada, and consumer health data. Health-related data is covered by our Consumer Health Data Privacy Policy, which explains your rights under the Washington My Health My Data Act and similar laws.

Children

The app is not intended for anyone under 18.

Changes & contact

We may update this policy; material changes will be reflected here with a new date. Questions? Contact Frank Data Consultants, Inc. at support@frankdataconsultants.com.