Privacy Policy

1. Introduction

MicroCoach (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application. MicroCoach is based in Oakland County, Michigan, United States.

2. Information We Collect

We collect information you provide directly to us:

• Account information (name, email address, password)
• Profile information (timezone, coaching preferences)
• Check-in content (your One Big Thing, plans, progress, problems)
• Payment information (processed securely through Stripe)
• Communication preferences (reminder settings)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Generate AI coaching insights based on your check-ins
• Send you reminders and notifications
• Process your payments and subscriptions
• Respond to your comments and questions
• Analyze usage patterns to improve our service (in aggregate)

4. AI and Automated Processing

We use artificial intelligence to generate personalized coaching insights based on your check-in data. This AI processing analyzes your responses to provide relevant suggestions and identify patterns in your progress.

The AI is designed to support—not replace—your own decision-making. You can request human review of any AI-generated insights by contacting us.

We do not use your data to train AI models shared with other users; your check-in content remains private to your account.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our service:

• Essential cookies enable core functionality like authentication and session management
• Analytics — We use Vercel Analytics to understand how users interact with our service in aggregate. Vercel Analytics is privacy-focused and does not use cookies for tracking

You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our service.

6. Data Sharing and Disclosure

We do not sell your personal information to third parties. Beyond our third-party service providers (listed below), we may disclose your information only in the following circumstances:

• To comply with legal obligations or respond to lawful requests from public authorities
• To protect and defend our rights or property
• In connection with a merger, acquisition, or sale of assets (you would be notified of any change in ownership or control)

7. Third-Party Services

We use the following third-party services to help operate our platform. These services have their own privacy policies governing their handling of your information:

• Supabase — Database and authentication
• Stripe — Payment processing
• Resend — Email delivery
• Vercel — Hosting and analytics

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. Your check-in data is private and confidential.

We use industry-standard encryption for data in transit (TLS) and at rest, secure infrastructure, and access controls to protect your data. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services.

If you delete your account, we will delete your personal information within 30 days, though some anonymized aggregate data may be retained for analytics purposes. We may also retain certain information as required by law or for legitimate business purposes.

10. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing communications

To exercise any of these rights, please contact us at privacy@microcoach.io.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to correct inaccurate personal information
• The right to opt out of the sale or sharing of your personal information (note: we do not sell your personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@microcoach.io. We will respond to verifiable consumer requests within 45 days.

12. Children's Privacy

MicroCoach is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@microcoach.io, and we will take steps to delete such information.

13. International Data Transfers

MicroCoach is based in the United States, and your information is processed and stored in the United States. If you access our service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our service, you consent to this transfer.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date at the top. For significant changes that affect how we use your personal information, we will provide additional notice via email. We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: