Get Healthy App Privacy Policy

Effective date: August 30, 2026
Version: 2026.08.4

Overview

Get Healthy App / HealthyApp.Coach is a technology platform used by independent coaches and coaching businesses to deliver fitness, nutrition, recovery, wellness, performance, accountability, and related coaching services.

This Privacy Policy explains how TSB Consulting Group ("Get Healthy App," "Platform Operator," "we," "us," or "our") collects, uses, discloses, retains, and protects Personal Information through:

• the Get Healthy App and HealthyApp.Coach websites;
• our web and mobile applications;
• coach and client accounts;
• messages, check-ins, reminders, videos, and other platform features;
• demonstrations, onboarding, customer support, and business communications; and
• integrations or services that link to this Privacy Policy.

"Personal Information" means information that identifies, relates to, describes, or can reasonably be linked with a person or household. It may include information treated as personal data, sensitive data, or consumer health data under applicable law.

Our Relationship With Coaches and Clients

Independent coaches and coaching businesses use Get Healthy App as platform tenants. The coach or coaching business that invited a client determines the coaching relationship and is responsible for the coaching services it provides.

Depending on the activity and applicable law:

• the coach may determine why and how client information is used for coaching;
• Get Healthy App may process information for the coach to operate the platform;
• Get Healthy App may determine how information is used for account administration, security, fraud prevention, platform operations, legal compliance, and product improvement; and
• the coach and Get Healthy App may each have separate responsibilities for particular information.

Coaches may collect, export, or use information outside Get Healthy App. Those activities are governed by the coach's privacy practices and are not controlled by Get Healthy App. Clients should contact their coach with questions about information handled outside the platform.

Get Healthy App is a technology provider. We are not a physician, hospital, pharmacy, dietitian, therapist, health plan, emergency service, or other medical provider merely because we operate the platform. Coaching information and platform output are not medical advice.

Information We Collect

The information we collect depends on whether a person is a website visitor, prospective customer, coach, team member, or coaching client and on which features are used.

Account and Identity Information

We may collect:

• name, username, password, and account identifier;
• email address, telephone number, mailing address, and time zone;
• profile image, biography, preferences, and communication settings;
• age or date of birth when needed for eligibility or personalization;
• coach, coaching business, team, client, or tenant affiliation; and
• electronic agreement acceptance, consent choices, and authentication records.

Coaching, Fitness, Nutrition, and Wellness Information

Depending on the coaching program and enabled features, we may collect:

• goals, habits, routines, preferences, and check-in responses;
• workout plans, exercises, sets, repetitions, loads, performance, and completion history;
• food entries, photographs, barcode or voice food entries, calories, macros, meal plans, and dietary preferences;
• weight, body measurements, progress trends, photographs, and related observations;
• sleep, recovery, stress, energy, mood, readiness, and similar self-reported information;
• injuries, symptoms, medical conditions, allergies, medications, supplements, pregnancy status, or other information voluntarily submitted for coaching context;
• wearable, fitness-device, or health-app information when a user enables an integration;
• travel plans, locations, gyms, hotels, restaurants, events, birthdays, anniversaries, and scheduling information used for coaching personalization; and
• coach notes, assessments, program changes, and client progress records.

Some of this information may be considered sensitive Personal Information or consumer health data. We collect and use it as described in this Privacy Policy, as directed by the user or coach, and as otherwise permitted or required by law.

Messages, Content, Images, Video, and Voice

We may collect:

• messages between coaches, clients, and authorized team members;
• support requests, survey responses, and feedback;
• photographs, videos, audio, voice entries, transcriptions, and uploaded files;
• recordings or transcripts when participants receive required notice or provide required consent;
• comments, reactions, community content, and other submitted information; and
• AI-assisted drafts, summaries, personalized media, edits, approvals, and delivery records.

Group Communities

A coach or coaching business may create group communities and place clients in them — for example a challenge, a program cohort, or the business's whole client community. If a user participates in a group, we collect:

• posts, photographs, and videos the user shares with the group, and comments and reactions on group content;
• the display name the user chooses for groups (real name, first name and initial, or a nickname);
• the user's reading position in each group's feed and notification preferences for that group;
• the user's acceptance of the Group Community Guidelines, recorded with the exact text and version accepted; and
• reports the user submits about group content, blocks the user places on other members, and moderation actions taken on the user's own content.

Who can see group content. Content posted to a group is visible to every current member of that group. Depending on how the coaching business configures a group, its members may include clients of other coaches within the same business. Coaches assigned to a group, and administrators of the coaching business, can also see group content — including content in groups a coach has marked private to themselves, which remain subject to business-administrator oversight. Group content is never visible outside the user's coaching business.

Location metadata is removed. Photographs are re-encoded on the user's own device before upload, which removes embedded metadata such as GPS location, so a photograph taken at a gym or at home does not carry its location into the group.

Moderation. Any member may report a post or comment. Reported content is hidden from the group immediately, pending review, and a coach or administrator either restores it or permanently deletes it — the platform's stated commitment is review within 24 hours. The identity of the person who reported content is visible to the reviewing coaches and administrators so reports can be handled responsibly; it is not shown to the person whose content was reported. Blocking another member hides that member's content from the user and the user's content from that member, in both directions.

Removal. A user may edit or delete their own posts and comments, leave any group, and mute any group's notifications. Group content the user authored is deleted when the user deletes their account, on the same terms as the rest of their information.

Payment and Commercial Information

We may collect program, subscription, transaction, invoice, discount, refund, payment-status, billing, accounting, fraud-prevention, and dispute information.

Payments may be processed by a third-party payment processor. We generally do not receive or store complete payment-card numbers. The payment processor's handling of payment information is governed by its own privacy notice.

Device, Usage, and Technical Information

We may automatically collect:

• IP address, device identifier, browser type, operating system, app version, and language;
• login history, session information, timestamps, screens viewed, and feature interactions;
• crash reports, diagnostics, performance information, and security events;
• approximate location inferred from IP address; and
• cookie, local-storage, SDK, and similar technology information.

We do not collect precise geolocation unless a user enables a feature that requires it and receives any notice or choice required by law.

The Mobile Applications, Connected Health Data, and Device Permissions

The HealthyApp mobile applications for iOS and Android are companions to the web service. They sell nothing and contain no purchasing of any kind; coaching is purchased on our website before an application is ever installed.

Apple Health (HealthKit). If a user grants permission, the iOS application may read health and fitness information from Apple Health — such as body weight, steps, sleep, heart rate, and recorded workouts — and may write completed workouts back to Apple Health so they appear in the user's Fitness activity. Apple Health is read only with the user's explicit permission, and permission may be withdrawn at any time in the iOS Settings application or the Apple Health application, without affecting the rest of the coaching service.

Information obtained from Apple Health is used solely to deliver coaching: to show progress, to inform a coach's programming, and to keep the user's own records current. Specifically, and in addition to every other commitment in this Privacy Policy:

• we do not use Apple Health information for advertising, marketing, or any use-based data mining;
• we do not sell or share Apple Health information, and we do not disclose it to third parties for their own purposes;
• we do not store Apple Health information in iCloud; and
• we do not use Apple Health information to make decisions about employment, insurance, or credit.

Health Connect (Android). If a user grants permission, the Android application may read the following information from Health Connect, and nothing else: body weight, body fat percentage, steps, resting heart rate, heart rate variability, and sleep. It may also write completed workout sessions back to Health Connect so they appear alongside the user's other recorded activity.

Health Connect permissions are granted individually. A user may grant some and refuse others, may withdraw any of them at any time in Health Connect or in Android Settings, and the rest of the coaching service continues to work either way. The application requests only the permissions listed above; where a permission is refused, the corresponding information is simply not read.

Information obtained from Health Connect is used solely to deliver coaching, in the same way and for the same purposes described above for Apple Health. Specifically, and in addition to every other commitment in this Privacy Policy:

• we do not use Health Connect information for advertising, marketing, or any use-based data mining;
• we do not sell Health Connect information, and we do not transfer it to third parties for their own purposes, including for advertising or analytics;
• we do not use Health Connect information to make decisions about employment, insurance, or credit; and
• Health Connect information is retained and deleted on the same terms as the rest of a user's health information under this Privacy Policy, including deletion when the user deletes their account.

Information read from Apple Health or Health Connect is shown to the user and to the coach or coaching business the user has engaged. That coach is the other party to the coaching relationship the user joined, and is not a third party for the purposes of the commitments above.

Other device permissions. An application may ask for access to the camera and photo library for progress photographs, meal photographs, and barcode scanning; the microphone for voice food entries; and notification delivery, including the rest timer shown during a workout. Each is requested at the moment it is first needed, each is optional, and each may be changed later in iOS Settings or Android Settings. Declining a permission disables only the feature that depends on it.

Push notifications. If a user allows notifications, we store a device token supplied by Apple or Google in order to deliver messages from that user's coach, activity summaries from group communities the user has joined (on the schedule the user chooses), and reminders the user has asked for. The token identifies a device, not a person's activity elsewhere, and is deleted when the user signs out, disables notifications, or deletes their account.

Tracking. The applications do not track users across apps or websites owned by other companies. The iOS application does not request permission to do so under Apple's App Tracking Transparency framework, and the Android application does not request or use an advertising identifier.

Website, Demonstration, and Business Information

We may collect information submitted when someone requests a demonstration, joins a waitlist, contacts sales or support, attends an event, applies to become a customer or partner, or communicates with us through another business channel.

Sources of Information

We may receive Personal Information:

• directly from the person;
• from the person's coach, coaching business, or authorized team;
• automatically from browsers, devices, and platform use;
• from integrations the person or coach enables;
• from payment, identity, communications, hosting, analytics, security, and support providers;
• from referral partners or business contacts; and
• from public sources when permitted by law.

If a coach submits information about a client, the coach is responsible for having the authority and providing any notice required to do so.

How We Use Information

We may use Personal Information to:

• create, authenticate, administer, and support accounts;
• provide platform features and deliver information between clients and coaches;
• display programs, workouts, nutrition targets, check-ins, trends, messages, and personalized content;
• process transactions and maintain billing records;
• operate integrations enabled by the user or coach;
• generate reminders, notifications, progress summaries, and AI-assisted content;
• personalize and improve the platform;
• provide demonstrations, onboarding, training, and customer support;
• maintain reliability, security, and fraud prevention;
• keep records of agreements, consent, and important account actions;
• understand feature performance and develop services;
• communicate about the service, security, policy changes, and account matters;
• send marketing communications where permitted, subject to consent and opt-out rights;
• comply with law and legal process;
• establish, exercise, or defend legal claims; and
• protect users, coaches, Get Healthy App, and others.

We will not use sensitive Personal Information for materially different purposes without providing additional notice or consent when required.

Artificial Intelligence and Automated Features

Get Healthy App may use artificial intelligence, machine learning, and automated systems to:

• summarize workouts, nutrition entries, check-ins, progress, messages, or trends;
• identify patterns or information for a coach's attention;
• suggest draft coaching content, reminders, responses, or program adjustments;
• transcribe or organize voice, image, and written entries;
• help create personalized videos or other media;
• generate optional "future self" projection images, described below;
• improve search, support, fraud detection, security, and platform operations; and
• assist with product quality and development.

AI-assisted output may be incomplete, inaccurate, or inappropriate. It is not medical advice, diagnosis, treatment, or an emergency service.

When a feature is configured for coach approval, coaches are responsible for reviewing and approving client-facing content generated for them before delivery.

AI features may require information to be processed by contracted technology providers. We require providers to handle information for authorized purposes under applicable contractual restrictions.

We do not knowingly permit identifiable client Personal Information to be used to train a general-purpose AI model for unrelated third-party purposes unless we first provide any notice and choice required by law and this Privacy Policy.

We do not use solely automated decisions to make legal, medical, employment, credit, insurance, or similarly significant decisions about users.

Future-Self Projection Images

If your coach makes the feature available, you may ask the platform to generate projection images: computer-generated pictures showing one possible future appearance, produced from progress photographs you have already uploaded to a check-in.

You control whether this happens. Projections are generated only when you request one, and only from your own check-in photographs. Your coach can turn the feature off for their practice or for your account.

To produce a projection, the relevant progress photographs, together with the height, weight, age, biological sex, body-composition, and goal information needed to model the result, are sent to Google's Gemini generative-AI service, which acts as our contracted technology provider for this feature. Google processes this information to generate the images and returns them to us. We do not permit this information to be used to train Google's general-purpose models.

Projection images are computer-generated depictions, not photographs of you, and not a prediction, guarantee, or clinical assessment of any outcome. Every projection image carries a permanent visible marking identifying it as a projection. Projections are stored privately alongside your other progress media and are visible to your assigned coach only if you choose to keep one; a projection you discard is deleted, including the generated image files. You may delete a kept projection at any time.

If you would prefer not to use this feature, simply do not request a projection; ask your coach to disable it for your account if you would rather it not be offered.

How We Disclose Information

We do not sell or rent Personal Information. We do not distribute Personal Information to unrelated third parties for their own independent use, advertising, or marketing.

We may disclose information for the following purposes.

Coaches and Authorized Teams

We disclose client information to the client's coach, coaching business, and authorized team members so they can provide and administer coaching services. Access depends on platform permissions and the coaching relationship.

Members of Group Communities

Content a user chooses to post in a group community is disclosed to the other members of that group, as described in the Group Communities section above. The user controls what they post and the display name under which they appear.

Service Providers and Subprocessors

We may disclose information to providers that help us:

• host data and operate cloud infrastructure;
• process payments;
• provide authentication, communications, notifications, and support;
• provide analytics, error monitoring, fraud prevention, and cybersecurity;
• provide AI, transcription, image generation, video, voice, or content-processing features;
• manage contracts, records, accounting, and business operations; and
• provide legal, audit, insurance, and compliance services.

These providers may process information only to perform authorized services or as otherwise permitted by their agreements and applicable law.

User-Directed Integrations and Recipients

We may disclose information when a user or coach requests an integration, directs us to send information to another recipient, or provides consent. Third-party integrations are governed by their own terms and privacy practices after receiving information.

Legal, Safety, Security, and Rights

We may preserve or disclose information when we reasonably believe it is necessary to:

• comply with applicable law, legal process, or valid governmental requests;
• protect the safety, rights, property, or security of users, coaches, Get Healthy App, or others;
• investigate fraud, abuse, security incidents, or agreement violations;
• respond to emergencies or an imminent risk of serious harm; or
• establish, exercise, or defend legal claims.

Business Transactions

We may disclose or transfer information during due diligence, financing, insurance, merger, acquisition, reorganization, bankruptcy, sale of assets, or a similar corporate transaction. Where required, we will provide notice and require the recipient to honor applicable privacy obligations.

Deidentified or Aggregated Information

We may create and use aggregated or deidentified information that cannot reasonably be linked to a person. We will not attempt to reidentify information treated as deidentified under applicable law except to test deidentification or as otherwise permitted by law.

Consumer Health Information

Fitness, nutrition, body measurement, symptom, condition, recovery, sleep, or similar information may qualify as consumer health data in some jurisdictions even when HIPAA does not apply.

We collect, use, and disclose consumer health data as described in this Privacy Policy, as necessary to provide requested services, with required consent, or as otherwise permitted by law. We do not sell consumer health data or use it for third-party targeted advertising.

Where required, a separate Consumer Health Data Privacy Notice and additional controls will supplement this Privacy Policy.

HIPAA-Informed Privacy and Security Approach

HIPAA does not automatically apply to every health, fitness, wellness, or coaching application. Whether HIPAA applies depends on the entities, relationships, and processing involved.

Regardless of whether HIPAA applies to a particular activity, we intend to design and harden relevant privacy and security practices with reference to principles found in the HIPAA Privacy, Security, and Breach Notification Rules where appropriate. Our approach includes reasonable administrative, physical, and technical safeguards designed for the nature and sensitivity of the information we process.

This HIPAA-informed framework does not mean that:

• Get Healthy App, every coach, or every service is legally subject to HIPAA;
• Get Healthy App has been certified by the government as HIPAA compliant;
• every HIPAA requirement applies to every platform activity; or
• any security program can guarantee that information will never be accessed, disclosed, altered, or lost without authorization.

If we enter a legally required business associate agreement for a covered service, we will handle the applicable protected health information according to that agreement and applicable law.

Security

We use reasonable safeguards designed to protect Personal Information against unauthorized access, acquisition, destruction, loss, misuse, alteration, or disclosure. Depending on the system and risk, safeguards may include:

• access controls and role-based permissions;
• authentication and account-security measures;
• encryption in transit and at rest where appropriate;
• logging, monitoring, backups, and vulnerability management;
• vendor review and contractual restrictions;
• workforce confidentiality and security practices;
• incident-response and business-continuity procedures; and
• periodic review and improvement of security controls.

No transmission, storage, or security method is completely secure. Users should protect their passwords, use unique credentials, enable available security features, and promptly report suspected unauthorized access.

Data Retention

We retain Personal Information only as long as reasonably necessary to:

• maintain an active account or coaching relationship;
• provide requested features;
• preserve coaching records requested by the tenant coach;
• complete transactions and maintain tax or accounting records;
• meet contractual, insurance, legal, security, and dispute requirements;
• prevent fraud and enforce agreements; and
• maintain backups according to established cycles.

Retention depends on the information, relationship, tenant instructions, legal requirements, risk, and technical considerations. When information is no longer required, we may delete it, deidentify it, or securely isolate it until deletion is reasonably practicable.

Account deletion may not immediately remove information from backups, legal holds, transaction records, security logs, or records a coach lawfully maintains outside the platform.

Privacy Rights and Choices

Depending on location and applicable law, a person may have rights to:

• know whether we process Personal Information;
• access or obtain a copy;
• correct inaccurate information;
• delete information;
• obtain information in a portable format;
• withdraw consent for certain processing;
• limit or opt out of certain sensitive-information uses;
• opt out of sale, targeted advertising, or certain profiling;
• appeal a privacy-request decision; and
• receive equal service without unlawful discrimination for exercising a right.

Because we do not sell Personal Information or use it for unrelated third-party targeted advertising, we do not currently offer a sale opt-out for those activities.

Submit requests to privacy@healthyapp.coach or through mailto:privacy@healthyapp.coach. Clients may also contact their coach regarding information controlled by the coach.

We may verify identity and authority before completing a request. Authorized agents may submit requests where permitted by law. We will respond within the legally required time. If we deny a request, we will explain the reason and available appeal process.

Some information may be exempt from a request, including information required for legal compliance, security, fraud prevention, transactions, legal claims, or protection of another person's rights.

Account and Communication Choices

Users may update certain profile information, manage available notifications, choose whether to enable optional integrations, decline optional submissions, and contact their coach regarding program participation.

Users may unsubscribe from marketing email through the unsubscribe link and opt out of marketing text messages as described in the message. We may continue sending non-marketing communications about accounts, transactions, security, legal notices, and requested services.

Cookies and Similar Technologies

We may use cookies, local storage, SDKs, and similar technologies for authentication, preferences, security, diagnostics, performance, analytics, and communications.

We do not use Personal Information for unrelated third-party targeted advertising. Where required, we will provide controls for nonessential technologies and respond to legally recognized opt-out preference signals.

Blocking certain technologies may affect platform functionality.

Children

The platform is not intended for children under 18 unless we launch a specifically authorized program with appropriate parent or guardian consent and protections.

We do not knowingly collect Personal Information directly from a child under 13 without legally sufficient parental consent. A parent or guardian who believes a child submitted information improperly should contact us.

Coaches may not invite a minor unless Get Healthy App has enabled a compliant minor account and required consent and onboarding procedures have been completed.

International Use and Data Transfers

Get Healthy App is operated from the United States. Information may be processed in the United States and other countries where contracted providers operate.

Privacy laws in those countries may differ from the laws where a user lives. Before intentionally offering the platform in a jurisdiction requiring specific transfer measures or a local representative, we will implement the required measures.

Current service territory: United States

Third-Party Services and Links

The platform may link to or integrate with websites, apps, devices, payment processors, social platforms, or other services we do not control. Their privacy practices are governed by their own policies.

Changes to This Privacy Policy

We may update this Privacy Policy as our services, practices, or obligations change. We will post the updated version and revise the effective date.

If a change materially affects how we collect, use, or disclose previously collected information, we will provide additional notice and obtain consent when required. Material changes to data practices, AI use, or client rights may require renewed platform acceptance.

Contact Us

Questions, privacy requests, complaints, and appeals may be directed to:

TSB Consulting Group
Attn: Privacy
515 East Grant Street
Phoenix, Arizona 85301
Email: privacy@healthyapp.coach
Privacy request form: mailto:privacy@healthyapp.coach

Clients may also contact the coach or coaching business identified in their account regarding coaching records or the coach's independent privacy practices.