A-Z
A to Z FitnessCoaching Solutions
Data Governance

Privacy Policy & Health Data Protection

Effective Date: October 15, 2026 • Policy Version 1.0.0

1. Our Core Privacy Commitment

At A to Z Fitness Solutions ("we", "our", "us"), protecting your personal, biometric, and health data is our highest priority. We believe your physiological information belongs solely to you. We do not sell, rent, monetize, or share your data with advertisers or third-party data brokers under any circumstances.

2. Information We Collect

We collect and process the following categories of data strictly to deliver personalized coaching services:

  • Account Data: Full name, email address, phone number, and authentication identifiers.
  • Biometric & Body Composition Data: Body weight, height, body fat estimates, circumferential measurements, and optional progress check-in photos.
  • Health & Intake Screening Data: Dietary habits, food allergies, intolerances, physical activity readiness (PAR-Q responses), orthopedic injury history, and exercise limitations.
  • Audit & Security Metadata: Login timestamps, IP hashes for bot protection, and append-only consent tracking logs.

3. Health Data Consent & Isolation

Processing of health and physical readiness data requires explicit, informed consent prior to entering the onboarding flow. Health consent records are stored in an append-only database table with cryptographic timestamps and policy version tracking.

All client rows in our database are isolated by Postgres Row Level Security (RLS). A client can only read and write their own data. Trainers can only access clients explicitly assigned to them.

4. Storage & Image Security

Client progress photos are uploaded to private, encrypted cloud storage buckets. Access is governed by time-limited signed URLs that expire after 15 minutes. EXIF metadata (including geolocation and device hardware identifiers) is stripped upon upload.

5. Data Subject Rights (Export & Deletion)

Export My Data

You can export your complete profile, measurement history, and workout logs as a standardized JSON package directly from your account settings at any time.

Account Deletion

You may request complete account erasure. Upon confirmation, all personal biometrics, check-in photos, and questionnaire responses are permanently purged.

6. Contacting the Privacy Officer

For privacy inquiries, data export requests, or erasure requests, email our technical governance lead at info@atozfitnesssolutions.com or our coaching desk at info@atozfitnesssolutions.com.