Privacy Policy

Account and contact details: your name, email address, phone number, and date of birth when you create an account or book as a guest.

Health information you choose to share: your answers to our health screening (injuries, cardiovascular conditions, physical limitations, physician-clearance status), your training goals, and the wellness check-ins you submit after sessions (how you feel, soreness, tiredness, and pain levels). We collect this to train you safely — it is the most sensitive data we hold and we treat it that way.

Your signed waiver: when you sign our liability waiver we record your typed signature name, the date and time, the waiver version you saw, and the IP address the signature came from, so the signature can be verified later.

Bookings and payments: your session history, package balances, and payment records. Card payments are processed by Stripe — your card number never touches our servers; we store only Stripe’s reference identifiers, amounts, and payment status.

We use a login cookie to keep you signed in, and — if you arrive through a client’s referral link — a referral cookie that remembers who referred you for up to 60 days so the referral discount and credit can be applied. That’s it. We do not use advertising cookies or third-party behavioral tracking, and because we don’t track you across other websites, our site behaves the same whether or not your browser sends a “Do Not Track” signal.

We do count page views, using Cloudflare Web Analytics, so we can tell which pages are actually useful to people. It sets no cookies and stores nothing on your device, it does not follow you to other websites, and it does not build a profile of you — we see how many people opened a page, never who they were.

To schedule and deliver training sessions, tailor your program, keep you safe (screening and wellness data), process payments and refunds, send booking confirmations and reminders, run the referral program, respond to you, and meet our legal and tax obligations. We do not use your information for anything unrelated to training and running this business.

Only the service providers that make the site work: Stripe (payment processing), Resend (transactional email delivery), and our hosting and database providers (Vercel and Neon), each of which processes data on our behalf. We share information beyond that only if the law requires it or to protect our legal rights. We never sell, rent, or trade your information.

While your account is active, we keep your data so we can train you. If your account is deleted, your bookings, package balances, check-ins, progress records, referral history and any doctor’s clearance document are permanently removed — with two exceptions we keep for legal protection and bookkeeping: a copy of your signed liability waiver and your wellness reports is retained in a secure internal audit log (they are the record of what you agreed to and what was reported, which we may need if a claim is ever made), and payment records are retained as required for tax and accounting purposes.

Health information also doesn't outlive its purpose: if you haven't trained with us for 3 years, we erase your health details automatically — screening answers, emergency contact, injury notes, and any clearance document — without you having to ask.

One honest limit: if you have ever paid us, we cannot delete the account outright, because California requires us to keep the underlying transaction records for tax purposes. What we do instead is close the account so it can no longer be used or booked, and erase the health information we are not required to keep — your screening answers, emergency contact, injury notes and any clearance document. Ask us and we will tell you exactly what was removed and what had to stay.

Your health screening answers, injury notes, emergency contact and any doctor’s clearance document are the most sensitive things we hold. California law treats information about a person’s health as a special category, and we handle it that way regardless of whether we are legally obliged to:

• It is used for one purpose only — training you safely. It is never used for marketing, never sold, and never shared with anyone outside T.H.T.
• Only your coach can see it. It is not visible to other clients.
• It is never written into our system logs, and never sent anywhere by email except to your coach’s own inbox.
• Doctor's clearance documents are stored encrypted — even the storage provider holding the file cannot read it.
• You can delete it yourself at any time, even if you keep your account — the “Erase my health information” button in your account settings does it immediately, no email needed. Training with an injury or condition we do not know about is riskier, so you'll be re-screened before booking again — but it is your call.

You can see and update most of your information from your account, and both “Erase my health information” and “Delete my account” are self-service buttons in your account settings. You can also ask us at any time to access, correct, or delete your data by emailing [email protected] — we’ll act on it promptly, subject to the retention exceptions above. California residents may request the categories of information we hold about them; since everything we collect is listed on this page, that answer is short.

Accounts are for adults 18 and older. Minors train only through a parent or legal guardian as described in Section 1 of our Terms & Conditions, and we do not knowingly collect information from children online.

If we change this policy, we’ll update the effective date above; material changes will be flagged to you directly. Questions? Email [email protected] or call (415) 926-3363.