Coach Privacy Policy
Last updated 2026-11-04. What Coach collects and why, how it uses AI, who else handles your data, how long it is kept and how to have it deleted.
Who we are
Coach is a personal-training service run by Cordella Systems LLC, a Montana company ("we", "us"). Eric Wold, the trainer behind Coach, owns the company. He runs Coach day to day, is the only person at Cordella Systems with access to members' records, and handles every privacy request himself.
Coach is invite-only. Eric creates each member's account, and there is no public sign-up. You reach Coach through a private link Eric sends you, which you can save to your phone's Home Screen. Coach shares no data with Cordella's other products.
The short version
- Coach collects what it needs to coach you: your questionnaire, including your health answers, and your training. If you connect it, it also receives data from your Garmin account.
- Coach's servers and database are in the United States. Coach is in a closed test: it runs on a server Cordella Systems owns and operates, and the only Garmin account connected is Eric's own. Before any member connects Garmin, Coach will move to Google Cloud in the United States: its servers, database, files and backups, encrypted in transit and at rest.
- Some Coach features use AI from Anthropic. No AI model ever receives your Garmin data or anything worked out from it. Your morning check and your program are not AI: they are rules written in Coach's code. See the AI transparency statement.
- We will never sell your data, use it for advertising or show you ads. Coach uses no third-party analytics or tracking tools.
- Your data is kept until you ask us to delete it, except your Garmin data, which has its own time limits (Garmin data).
- You can ask for a copy, a correction or deletion at any time: [email protected].
AI transparency statement
Coach uses artificial intelligence for the features below: Anthropic's Claude models, through Anthropic's commercial service. For each feature, here is what the AI receives.
No Garmin data, ever. No AI feature receives your Garmin data or anything worked out from it. That includes your morning color when Garmin data decided it, how today's session was scaled by it, your Energy and Trends, heart-rate recovery results, and a body weight or protein target taken from a Garmin scale. If Coach ever offers an AI feature that uses Garmin data, it will first ask for your explicit consent, separately from connecting Garmin, and you will be able to withdraw that consent at any time.
Answers to your questions. When you send a question or request from My Plan, Coach's AI usually answers it straight away. It receives what you wrote and a summary of your training: your experience level, goals, schedule, gym, the movements you like and dislike, your program, today's session, any active injuries and your units. Answers from the AI are labelled "Coach"; Eric's answers carry his name, and "Ask Eric about this" sends any Coach answer to him.
Weekly review. If your plan includes it, the AI writes a short review of your week on Sundays. It receives your name, your sessions against your plan, personal records and benchmark results, the weights you log yourself, the movements Coach is holding or leaving out because of pain or injury, any days you were excused for illness or injury with the reason you gave, and any trip that week.
Reading uploaded reports. If you upload a body-composition scan (such as DEXA, InBody or BodPod) or a VO2 max test report, Coach keeps the photo or PDF and sends it to the AI to read the numbers out. The numbers wait for Eric to check them before they count in your records. Reports like these often show your name, your date of birth and, for a DEXA scan, an image of your body.
Intake interview (optional, instead of the written questionnaire). Coach's AI asks the questions and records your answers, including your health answers. Everything you say reaches the AI, and the transcript is kept. If the interview is spoken, ElevenLabs turns your voice into text and reads Coach's replies aloud.
Chat with Coach (when Eric opens it to you). The AI receives your conversation; your profile, including your health answers; your injuries; your training and program, including personal records, benchmark results, schedule and trips; the body weight you log yourself and the protein target set from it; your maximum heart rate, when you entered it or a test measured it; Eric's answers to your requests; the notes Coach keeps; and any photo you attach. The AI writes short summaries of past conversations so Coach can remember them.
Eric's own Coach chat. Eric manages members through his own chat with Coach's AI. When he asks about you, it can receive your training and program (including your last workout and today's session), the history of changes to your plan, program, settings and membership, your contact details, the pain and injury answers on file, numbers from reports you upload, your questions and answers, and his notes about you. Your private link never goes to the AI.
What the AI doesn't do. The morning check, the way your session is scaled and when your weights go up are rules written in Coach's code; the AI doesn't make those calls. Eric starts every program Coach builds for you. If you build your own program, it starts the next Monday without waiting for him, and he is told. In chat, the AI can carry out a change you or Eric ask for, such as skipping today, swapping an exercise or making today lighter. Coach will never train AI models on your data.
Anthropic. Anthropic, PBC stores these requests in the United States; the model itself may run in other countries. Its commercial terms forbid it from training its models on what Coach sends. It deletes inputs and outputs within 30 days, except that content its safety systems flag may be kept for up to 2 years, or longer where the law requires. Coach keeps its own copies of the answers and reviews, as described under How long we keep it.
We will update this statement when Coach's use of AI, the law or Garmin's policies change.
What Coach collects, and why
Your account. Your name, phone number and email, which Eric enters when he invites you, plus your time zone, region, membership state (active, paused or ended; Coach records an ended membership as "graduated") and plan. Coach uses them to identify you, send you your link and reach you.
Your questionnaire. Your name, age, sex, body weight, time zone, maximum heart rate if you know it, your goals and the date of any event you're training for, training history and time off, how many days a week and how long you can train and what that time covers, the days you can't train, your gym and, if you know them, the starting weights of two of its machines, your cardio habits and what you want from cardio, the movements you love or hate, weights you already know and your protein target. It also asks whether you wear a watch or want two short questions each morning, any event or activity you want to be ready for and what success would look like, what stopped you training before and what gets you back after a missed session, how hard you push your hardest sets, the muscle you most want to bring up, and which lifts to test. An intake interview also asks about your equipment and your notification preferences. From your answers Coach writes your profile, which Eric reviews. Coach uses all of this to choose and build your program and to word what it tells you.
Your health answers. Pain or limitations for each type of movement (which side, which movements, whether it hurts now and who has looked at it). Whether you have a heart condition, uncontrolled blood pressure, an acute back or disc problem, a pregnancy, or a history of an eating disorder. Any surgeries, treatment or medications that affect heart rate or recovery. Coach also keeps the pain you report later with the Hurts button (where it hurts and on which movement) and what you tell its check-ins about it. Coach uses these to keep you safe: a movement that hurts is held at its current weight, and Eric is told. Your eating-disorder answer is private to Eric. It never appears in your program notes, on your dashboard or in your profile, and Coach's AI is told only that a private answer exists; in an intake interview, the AI hears your answer as you give it, and it is then stored privately. Members who live outside the United States get a shorter questionnaire without the pain and medical questions.
Body measurements and tests. Weights you log; body composition and blood pressure from Garmin devices, if you connect them (see Garmin data); results of body-composition scans and VO2 max tests that you upload or Eric enters, along with the report files themselves; and fitness benchmarks and heart-rate recovery tests. Coach uses them to set loads for bodyweight exercises and your protein target, to show your progress and to judge your conditioning.
Your training. Sessions you log in Coach: the exercises, weights, reps, effort ratings, set notes and times. Also your program and each day's prescribed session, when your weights went up, exercise swaps, skipped days and the reasons you give, pauses, and personal records.
Your schedule, gym and trips. Your gym and its equipment, the days you can't train, changes to your schedule with the reason in your words, and trips: destination, lodging, time zone, gym memberships and notes.
Location. Coach will never track where you are. When you tap "Suggest gyms near me", your phone shares its location once, and Coach sends it to Google to find gyms nearby. Trip destinations are sent to Google the same way, to find gyms and time zones.
Questions, requests and check-ins. What you send from My Plan, word for word, with Coach's and Eric's answers; your answers to Coach's check-in questions; and any request to pause or leave.
Chat. If you use chat: the full conversation, summaries of past conversations, and notes Coach keeps, in your own words, about things you have told it. Coach is built to refuse notes about pain, illness, medication, mood, or your body or weight. "Forget what I've said in chat" deletes those notes and summaries, but not the conversations themselves. A photo you attach is sent to the AI for that reply and is not stored; the conversation keeps only the words "[image attached]".
Eric's notes. Eric keeps his own notes about members, in Coach and in his working files, which aren't shown to you. They are included if you ask for a copy of your data, and deleted with it.
Notifications. Your phone's push subscription (an address at Apple or Google, encryption keys, and the description your browser gives of itself), and a record of every notification Coach tries to send you, including its text.
On your phone. Coach sets no cookies, and its member pages load nothing from other companies. Your phone keeps your private link (in the Home Screen app and in the names of two saved drafts); your questionnaire draft, including your health answers, until you confirm it; your program-builder draft until you send it; the session you are logging, and a copy of each finished session for about two weeks; today's plan; the programs you tried on the Lineup (Coach keeps the ones you had picked when you sent your questionnaire); your logger settings; exercise clips you have watched; and a copy of the logging page so it opens without a connection. Clearing your browser's data for Coach, or removing Coach from your Home Screen, removes them.
Server logs. Coach's servers record each request your phone makes (the time, the page and an IP address) and the work Coach does for you, to keep Coach running and secure. Logs never include your private link or your phone's location, and they are deleted after 30 days.
Garmin data
During Coach's closed test, the only Garmin account connected is Eric's own, and that data is held on Coach's server in the United States. The rest of this section describes how Coach handles a member's Garmin data once members can connect.
Coach connects to your Garmin account through the Garmin Connect Developer Program. You sign in on Garmin's own page, so Coach never sees your Garmin password, and you choose there what to share.
Of what Garmin sends, Coach keeps only what it uses:
- Each day: sleep (its duration, stages and score), heart-rate variability (HRV) and resting heart rate, as Garmin provides them.
- Activities: type, date, duration, distance and heart rate, plus the heart-rate recovery Coach works out from them. Coach doesn't keep GPS tracks or the places your activities started or ended.
- Body composition from a Garmin scale: weight, body fat and muscle mass.
- Blood pressure from a Garmin monitor: systolic, diastolic and pulse.
Coach also keeps the model of the Garmin device that recorded each item, your Garmin user ID, the permissions you granted, and the access tokens Garmin issues, encrypted.
Why. Your morning numbers (sleep, HRV and resting heart rate) decide how hard today's session should be. Activities tell Coach what you have already done. Body weight sets loads for bodyweight exercises and your protein target. Your Energy, Trends and progress views show the rest back to you. Blood pressure is shown to you on its own screen; Coach never uses it to change your training and never flags or interprets it.
Garmin labels. Every screen that shows your Garmin data names your Garmin device ("Garmin" when the model isn't provided). Your morning color, the session it scaled, Energy, Trends and heart-rate recovery results say they are derived in part from Garmin device-sourced data.
Where it is kept. Before any member connects Garmin, Coach will move to Google Cloud. Your Garmin data will be stored only in Coach's Google Cloud environment in the United States, encrypted in transit and at rest. Only Eric will have access to it.
Who else receives it. Google Cloud, which will host Coach, and Cloudflare, which passes Garmin's deliveries through to Coach and stores none of them. Coach will never send your Garmin data, or anything worked out from it, to an AI model, a notification or any other app or service. It will never sell Garmin data, never use it for advertising, and never use it to decide anyone's eligibility for credit, insurance or employment.
Disconnecting, and how long Coach keeps it. You can disconnect at any time, in Coach or in Garmin Connect. Coach stops receiving your data at once, stops using the Garmin data it holds, and deletes it within 30 days unless you ask us to keep your history. If your membership ends, Coach deletes your Garmin data 12 months later unless you rejoin.
Workouts sent to Garmin. If Coach offers to put your sessions on your Garmin calendar, it will first tell you, link to the Garmin Connect privacy notice and ask for your consent. Workouts sent to Garmin are then held by Garmin under that notice, and Garmin may use them for its own purposes.
How Garmin itself handles your data in Garmin Connect is covered by Garmin's privacy notice, not by this policy.
Importing your history
If you import your history from Strong or JEFIT, Coach reads the file itself, and what it read waits up to an hour for you to confirm. Nothing is sent to Strong or JEFIT.
Everyone else who handles your data
Besides Eric, these companies handle some Coach data, each only for the purpose shown:
- Google Cloud will host Coach (its servers, database, files and backups, in the United States) before any member connects Garmin.
- Anthropic, PBC runs the AI features described above, which never receive your Garmin data. Eric also maintains Coach's software with help from Anthropic's Claude, which can see members' records while he works but never their Garmin data; Anthropic doesn't use that work to train its models.
- Garmin is the source of your watch data, if you connect it.
- Apple and Google deliver notifications to your phone, and Apple carries the texts sent from Eric's Messages account by iMessage. Notifications travel encrypted, and these services can't read them. Notifications never include your Garmin data.
- Google also provides the Places and Time Zone services (gym search and trips) and Google Drive, which holds Coach's encrypted backups. During the closed test those backups include Eric's own Garmin data, encrypted before it leaves Coach's server. Members' Garmin data will be backed up only within Coach's Google Cloud environment.
- Network providers carry Coach's encrypted traffic between your phone and Coach's servers. They can't read it.
- Pushover delivers notifications, only if you choose to use it. Its notifications never include your Garmin data.
- ElevenLabs transcribes spoken answers and reads Coach's replies aloud, only in a spoken intake interview.
- Your mobile carrier carries a text from Eric if it goes by SMS.
- Cloudflare forwards email sent to [email protected], and Google's Gmail holds it. Cloudflare also passes Garmin's deliveries through to Coach and stores none of them.
- Tailscale provides the connection between your phone and Coach's server, and Eric's private access to that server. It stores none of your data.
Coach will never use advertising or tracking services, and it uses no third-party analytics or error-reporting services.
Texts with Eric
Coach texts your private link from Eric's Messages account: by iMessage, or by SMS through his iPhone. Those texts, and anything you text him, stay in his Messages app and with Apple, and with your carrier for SMS.
How long we keep it
We keep your records while you are a member, and after you pause or end your membership so you can pick up where you left off, until you ask us to delete them. Your Garmin data is the exception: it is deleted 30 days after you disconnect Garmin, or 12 months after your membership ends, as described under Garmin data.
A few things are shorter-lived. A photo you attach in chat isn't stored. A Strong or JEFIT import waits up to an hour. Server logs are deleted after 30 days. Anthropic deletes what Coach sends it within 30 days, as described above. Drafts on your phone are cleared when you submit or send them.
Backups are made every night and kept as daily copies for a week, weekly copies for a month and monthly copies for six months. Anything deleted from Coach is gone from the backups within about seven months.
Deleting your data
To have your data deleted, tell Eric through the "What's up?" box on My Plan or at [email protected]. Pausing or ending your membership doesn't delete anything on its own.
Deletion removes your records from Coach's database (your account and profile, questionnaire and health answers, injuries, training records, Garmin data, chat, questions and answers, notification records and Eric's notes) and your uploaded reports. Coach then checks that none of your records are left in its member tables, and Eric tells you when it's done.
Some copies take longer, or sit outside Coach:
- Backups: gone within about seven months, as above.
- Server logs: deleted after 30 days.
- Anthropic: what Coach sends is deleted within 30 days, as above.
- Garmin: your data in Garmin Connect is held by Garmin under your Garmin account and isn't affected.
- Texts: your messages with Eric stay in his Messages app and with Apple. Ask, and Eric will delete the thread on his phone.
- Eric's alerts and chats: what Coach told Eric about you stays in his alert history and chats until he removes it, which he does when you ask.
Your choices and rights
- Copy. Ask for a copy of your data, including Eric's notes, and Eric will send it in a form you can read.
- Correct. Redo your questionnaire, or ask Eric to fix anything that's wrong.
- Delete. As described above.
- Disconnect Garmin. Disconnect Garmin in Coach or in Garmin Connect. Disconnecting stops new data, and your Garmin data is then deleted as described under Garmin data. Without a watch, Coach asks you how you slept and how your body feels if you chose the morning questions; otherwise your session runs as written.
- Notifications. Apart from your morning message at the time you chose, and an urgent change to today's session, Coach is set to send you nothing between 9 pm and 6 am in your time zone. You can turn notifications off in your phone's settings at any time.
- Pause. Ask to pause from the link on My Plan. Eric applies it: your morning sessions and Coach's reminders and weekly review stop, though Eric can still message you. Your data stays, and your connected apps keep syncing.
Wherever you live, you can use these rights by asking Eric, and we will answer within 30 days. If the law where you live gives you further rights, for example in California, the EU, the UK or South Korea, you can use them the same way.
Security
- Encryption. Everything between your phone and Coach travels over encrypted (HTTPS) connections, and Coach's backups are encrypted (AES-256) before they leave Coach's server.
- Access. Only Eric has operator access to Coach. Inside Coach's database, your records are kept apart from every other member's.
- Your private link. You open Coach with a private link that only you receive. Keep it private, because anyone who has it can open your Coach. If it may have been shared, tell Eric: he will send you a new one, and the old one stops working straight away.
- Incidents. If a security incident affects your data, we will tell you promptly and do what the law requires. If it involves Garmin data, we will also notify Garmin within 24 hours.
- Reporting a problem. To report a security problem, email [email protected] with "Security" in the subject.
Adults only
Coach is for adults 18 and older. Eric invites only adults, and the questionnaire won't accept an age under 18. If we learn that we hold data about anyone under 18, we will delete it.
Where your data is processed
Coach's servers and database are in the United States, and most of the companies above process data there. Anthropic stores what Coach sends it in the United States, but its AI may run in other countries. If you live in another country, your data is transferred to the United States, where privacy law may differ from the law where you live.
Selling and advertising
We will never sell your personal data, share it for advertising, or show you ads. We will never use your data to make decisions about credit, insurance or employment.
Changes to this policy
When our practices change, we will update this page and its date, and tell members in Coach when a change affects them. We will never use your data in a new way that needs your consent without asking for it first.
Contact
Cordella Systems LLC
Eric Wold
1001 S Main St, Ste 49
Kalispell, MT 59901, USA
[email protected]
Cordella Systems LLC
1001 S Main St, Ste 49
Kalispell, MT 59901, USA
[email protected]