Privacy Policy

Effective date: July 16, 2026 · Notice version 2026-07-16 · Applies to the Daily Coach Android app

Daily Coach ("the app", "we", "us") is a fitness coaching and accountability app operated by Nicolas Lopez. This policy explains what data the app handles, why, where it goes, and how you can delete it. We try to keep this in plain language.

For health-related data specifically, see our separate Consumer Health Data Privacy Policy, which supplements this policy for consumer health data laws.

The short version

Data the app collects

Information you provide during setup and use:

• A display name or nickname (anything you choose; a real name is not required)
• Fitness goal, experience/activity level, workout location, and available equipment
• Schedule preferences (workout days, session length, check-in time)
• Optional body stats: biological sex (for the calorie formula), age, height, and weight
• Areas to protect (required — you select which body areas to protect during exercise, such as shoulder, knee, or back; you may choose "None" if you have no concerns)
• Optional health context: a free-text limitations note where you may describe injuries, medical conditions, physical restrictions, or other health-relevant context you want the coach to consider. This field is optional and may contain health-related information — it is treated as sensitive health-adjacent data under our GDPR and consumer health data provisions.
• Meals you log, weight entries you add, and personal records (PRs) you enter
• Calendar events and reminders you create (for example travel days, planned rest days, weigh-in reminders) — including ones you ask the AI coach to create
• Notes you attach to your plan
• Messages you send to the AI coach
• Feedback and support messages you choose to send through the in-app feedback feature — the text you write, plus basic context (such as your app version and anonymous account ID) that helps us respond and reproduce issues. Please do not include information you would not want us to have. As described in our Terms, we may use feedback and suggestions to improve the app.

Information created as you use the app:

• Generated workout plans (including any per-day customizations you request) and workout completion logs, including your post-workout difficulty ratings and any per-set weights and reps you log
• Calorie goals and nutrition summaries
• Daily check-ins, streaks, XP, levels, badges, daily-quest completions, and cosmetic reward selections
• Coach chat history (the app keeps only your latest 40 messages)

Identifiers and technical data:

• A Firebase anonymous account identifier (a random ID linked to your app install, not to your identity)
• Standard server request logs and per-user rate-limit records (timestamps and your anonymous ID) used to protect the AI backend from abuse
• If you later choose to sign in with Google or email (optional features being added), we will also process your email address and a Google-provided account identifier to secure and restore your account. We will update this policy and the in-app disclosures before that sign-in option ships, and email is not required to use the app.

The app does not collect your precise location, contacts, photos, advertising ID, or any data from other apps.

No biometric data. The app does not collect biometric identifiers or biometric information as defined by the Illinois Biometric Information Privacy Act (BIPA) — it does not scan or store fingerprints, face geometry, retina/iris scans, or voiceprints. Body stats such as height, weight, and age are self-reported numbers, not biometric identifiers.

How we use your data

• To build and adapt your personal workout plan and calorie target
• To power the AI coach chat and AI meal estimates
• To show your progress (streaks, badges, weight trend, weekly reports)
• To schedule the local reminder notifications you turn on
• To secure the service (authentication, rate limiting, abuse prevention)
• To review, respond to, and act on feedback and support requests you send us

We do not use your data for advertising, and we do not sell or rent it to anyone.

We never use your health or fitness data to make decisions about your employment, insurance, or credit, and we never post or share it on your behalf or to social networks.

AI processing

When you use coach chat or AI meal estimates, the app sends your message plus a compact summary of relevant app context (such as your plan, your weekly training volume by muscle group, recent meals, weight trend, and adherence) to our backend running on Google Firebase. The backend forwards it to Anthropic (the maker of the Claude AI models) to generate the reply. API keys stay on the server; the AI provider is never contacted directly from your device. Anthropic processes this data to provide the response and, under its commercial API terms, does not use it to train its models by default.

The AI coach can take actions on your data. In addition to replying in chat, the AI coach can act on your behalf when you ask it to — for example, it may log a meal you describe, record your body weight, change your workout split or training goal, edit a single day of your plan (including building a day around specific muscles you name), set your calorie mode, rebuild your weekly plan, or add, change, and remove calendar events and reminders. These actions write directly to your saved app data and take effect immediately. Chat is interpreted automatically and a message can occasionally be misread as a request — you can review, correct, or undo any entry in the app at any time.

AI responses are automated estimates and coaching suggestions. They can be wrong and are not medical advice. See our Safety Disclaimer.

Where your data is stored

• On your device: the app is offline-first and keeps your data in local app storage, protected by your device's operating system. Local data is not currently wrapped in additional app-level encryption.
• In the cloud: when sync is available, data is mirrored to Google Cloud Firestore (Firebase) in the United States (us-central1), in a space scoped to your anonymous account ID. Security rules prevent any other user from reading or writing your data.

Who we share data with

Only service providers (processors) that the app needs to function:

• Google Firebase / Google Cloud — authentication, database, cloud functions, and request logging
• Anthropic — AI model responses for coach chat and meal estimates

We may also disclose data if required by law. There are no other recipients, no data sales, and no advertising partners.

Retention

• Nutrition logs: the app keeps a rolling one-week window (weekly fuel summaries are computed from these logs, not stored separately)
• Coach chat: the latest 40 messages
• Profile, plans, workout logs, weight logs, personal records, check-ins, calendar events, plan notes, quest completions, and progress: kept until you delete them or delete your account
• Backend request logs: retained by Google Cloud Logging for about 30 days
• Rate-limit records: short-lived technical records containing only your anonymous ID and timestamps
• Feedback submissions: kept for as long as needed to review and act on them and to maintain a record of the product decisions they informed

Deleting your data

Open Settings → Delete my account & data in the app. This deletes your synced cloud data, deletes your anonymous account, and clears all data on the device. If you can no longer access the app, use our account deletion request page or email openctest9992@gmail.com.

Your privacy rights

Wherever you live, you can:

• Know / access what data the app holds — most of it is visible in the app (your profile, logs, plans, weight, and chat). For anything else, email us.
• Correct your data — edit your profile, body stats, meals, and weight in the app at any time.
• Delete your data — Settings → Delete my account & data, or the deletion page.
• Export a copy — email us and we will provide your data in a portable format.
• Withdraw consent — stop using the AI features, turn off notifications, or delete your account at any time.

We will never deny you service or charge you differently for exercising these rights. To make a request, email openctest9992@gmail.com; because accounts are anonymous, we may ask for details that help us locate your data. We aim to confirm receipt promptly and to respond to verifiable requests within the time required by applicable law — generally within 45 days for California residents (extendable once by a further 45 days) and within one month under the GDPR/UK GDPR (extendable by two further months for complex requests), and we will tell you if we need more time.

California residents (CCPA/CPRA)

We do not sell your personal information and do not share it for cross-context behavioral advertising (as "share" is defined by the CPRA), and we have not done either in the past 12 months. California residents have the rights to know, access, correct, delete, and to non-discrimination, as described above.

EU / UK / EEA residents (GDPR/UK GDPR)

The data controller is Nicolas Lopez (contact below). Most of what you enter — weight, meals, workouts, body stats, and coach chat about your health and fitness — is data concerning health, a special category of data under Article 9 of the GDPR. We process that health data only with your explicit consent, which you give when you set up and use these features and can withdraw at any time by stopping use of the feature or deleting your account. For basic account operation we rely on performance of the service you requested (building your plan and coaching), and for security (authentication, rate limiting, and abuse prevention) on our legitimate interest. We do not rely on legitimate interest to process your health data. You also have the rights to object to or restrict processing, to data portability, and to lodge a complaint with your local data protection authority.

International users and data transfer

The app's backend and database run in the United States (Google Cloud, us-central1), and AI processing is performed by Anthropic in the United States. If you use the app from outside the US, your data is transferred to and processed in the US. For transfers from the EU/EEA, UK, and Switzerland we rely on the EU-US Data Privacy Framework (Google is certified) and on Standard Contractual Clauses in our data-processing agreements with Google and Anthropic. Where neither mechanism applies, we rely on your explicit consent under Article 49 of the GDPR, having informed you that US law may not provide a level of data protection equivalent to that of your home country.

Security

• All traffic between the app, our backend, and our providers uses TLS encryption (in transit)
• Cloud data is encrypted at rest by Google Cloud, and scoped per user and protected by Firebase security rules with shape validation
• AI provider keys are stored in Google Secret Manager and never shipped in the app
• Backend requests require a valid Firebase authentication token and are rate limited

Data breach notification

We maintain reasonable security measures to protect your information. If a breach affecting your personal information occurs, we will notify affected users in the most expedient time possible and without unreasonable delay, describing the information involved, the timing, and the steps we are taking. Where required by the Illinois Personal Information Protection Act (815 ILCS 530) or other applicable law, we will also notify the Illinois Attorney General. Where the federal FTC Health Breach Notification Rule applies, we will also notify affected individuals and the Federal Trade Commission (and the media where required) of a breach of unsecured health information.

Consumer health data (Washington and Nevada residents)

Some of the data you enter — weight, body stats, meals, and workout activity — may be "consumer health data" under Washington's My Health My Data Act and Nevada's SB 370. We collect this data only to provide the planning and coaching features you ask for. We share it only with the service providers that operate the app on our behalf (Google Firebase for storage and authentication, and Anthropic for AI coaching). We do not sell it and do not use it for advertising. You can review, delete, or withdraw consent for this data at any time by deleting your account in Settings or at our deletion page, or by contacting us below.

Age policy

Daily Coach is for adults. You must be 18 or older to use the app. We do not knowingly collect data from anyone under 18; if you believe a minor has used the app, contact us and we will delete the data.

The app is a general-audience product and is not directed to children under 13, and we do not knowingly collect personal information from children under 13 as defined by the U.S. Children's Online Privacy Protection Act (COPPA).

Analytics, ads, and payments

The app currently contains no third-party analytics, advertising, or payment SDKs, and no crash-reporting SDK. If that changes, we will update this policy before the change ships.

When paid subscriptions are offered, payment will be collected and processed by Google Play under your Google Play account. We will receive only your subscription status (for example: active, trial, expired) and a purchase token used to verify it — never your payment card details, billing address, or Google account identity.

Changes to this policy

We will post any changes at this URL and update the effective date above. Material changes will also be noted in the app.

Contact

Questions, privacy requests, or concerns: openctest9992@gmail.com