Privacy Policy

This policy covers Coach Potato (getcoachpotato.com). Coach Potato is a registered business name operated by Areej Shalwani, an Ontario sole proprietor. This policy explains what personal information we collect, how we use it, and the choices you have. Questions go to getcoachpotato@gmail.com.

Everyone with an account

• Your name, email address, and phone number if you give one.
• Your password. When you sign up, sign in or reset it, it is sent over an encrypted connection, through our website, to our sign-in provider, Supabase, which stores it only in hashed form. We don’t store or log passwords in our own database, and we can’t look up your password.
• Whether you’re a student or a coach, and a profile photo if you add one.
• Messages you send to, and receive from, coaches or students.

Students

• Your sports and level, and your preferred area.
• Your bookings: the coach, time, place, price, any note you send with a request, cancellations, and any problem you report.
• Your participation waiver: the name you typed as your signature, what you confirmed, when you signed, and a short description of the browser you signed with. We don’t record your IP address with it.
• Reviews you leave for a coach.

Coaches

• Your profile: bio, playing and coaching experience, credentials, rates, teaching locations and facility fees, availability and time off.
• Group lessons you create, where offered, and the students who book them.
• Private notes and session plans you keep about your students.
• Your Stripe account’s ID and status, such as whether payouts are enabled. Stripe collects your identity and banking details directly, and we don’t receive them.
• Your commission rate and payout records.
• Whether you agreed to make your profile public before it’s listed (section 4), and when.

Payments

Card payments are processed by Stripe. Your card number is entered into Stripe’s own payment form and goes to Stripe, not to us. We keep payment, refund, payout and dispute records: amounts, status, dates and Stripe’s reference numbers.

The waitlist

If you join the waitlist, we keep the phone number or email you give, whether you’re a player or a coach, and the sport you’re waiting for.

Technical information

• If you turn on notifications, we store your browser’s push subscription and a description of the browser.
• Delivery records for the emails we send you, such as delivered or bounced.
• Our hosting provider processes technical information, such as IP addresses and browser type, to serve and protect the site.

• To create and run your account, and keep it secure.
• To list coaches, take bookings and run group lessons where they’re offered.
• To process payments, refunds and coach payouts, and to handle disputes.
• To send messages about your account and bookings, by email and by push notification if you turn them on. We don’t send marketing emails.
• To review coach profiles before they’re listed.
• If an approved coach agrees, to show their profile at its own web address before it’s listed, so they can give it as their business website, for example to Stripe.
• To look into reported problems, prevent fraud and misuse, and enforce our terms.
• To keep the records that accounting, tax and legal obligations require.

We don’t sell personal information, and we don’t use it for advertising.

Delivering a lesson means sharing some of your information with the person on the other side of the booking:

• Public: a listed coach’s profile, including their name, photo, experience, rates, locations and availability. Reviews are shown on the coach’s profile with the rating, comment and month, without the student’s name.
• Public before listing, only if the coach agrees: once we’ve approved a coach’s profile, and while they finish setting up payouts or before they’re listed, anyone with the link can see their name, photo, sport, area, rates, experience, credentials, what we verified, the levels they teach and their teaching locations, marked “Bookings opening soon”. It isn’t shown in search or the coach directory, and it has no availability, reviews, messaging or booking until the coach meets the requirements to be listed, including completing Stripe payouts. Until they’re listed, the coach can make it private again at any time. Once they’re listed, their profile is public as described above for as long as they stay listed; a coach who stops being listed is no longer shown.
• Your coach sees your name and photo, and any note you send, when you request a lesson or book a group spot. They also see your messages to them and your signed waiver for lessons booked with them.
• While a private lesson is confirmed, you and your coach can access each other’s email address, and phone number if one was given, through your accounts. That access ends once the lesson is completed or cancelled. Group lessons don’t share contact details with the coach or with other students. Before a lesson is confirmed, the app blocks contact details in messages.
• Profile photos are stored at public web addresses, so anyone with the link can see them.

Besides the coaches and students you book with (section 4), we share personal information with the service providers that run Coach Potato, only so they can do that work:

• Supabase: account sign-in, the database, and photo storage.
• Vercel: hosting for the website.
• Stripe: card payments, refunds and disputes, and identity verification and payouts for coaches. Stripe also uses some of this information under its own privacy policy, for example to prevent fraud.
• Resend: sending our emails.
• Anthropic: if a coach uses the optional “Help me shape this” writing helper on their profile, we send the text they entered to Anthropic’s AI model to suggest wording. Nothing is sent unless the coach uses the helper.
• Push services: if you turn on notifications, your browser’s push service (for example, Apple, Google or Mozilla) delivers them.

We may also disclose information where the law requires it, or to protect someone’s safety.

Outside Canada: our database, website hosting and email provider are in the United States, and our other providers may process information in the United States and other countries. It may be accessible to authorities there under their laws.

• We use cookies to keep you signed in, and to carry a booking, a sign-up or a password reset through to its next step.
• Your browser’s local storage remembers small things on your device, like a banner you dismissed or a message you haven’t sent yet.
• Stripe’s payment form, on the payment pages only, uses its own cookies to process payments and prevent fraud.
• We don’t use analytics or advertising cookies.

Different information is kept for different lengths of time:

• Payment, tax and accounting records (payments, refunds, payouts, commissions, and the bookings they belong to): generally six years from the end of the tax year they relate to, as tax law requires, even after an account is closed.
• Signed waivers: kept with the booking records they cover, for at least as long as those records, and longer if a claim about a lesson is made or expected.
• Reported problems and disputes: kept until they’re resolved, then with the booking records they concern.
• Your profile, photos, notes and messages: kept while your account is open, and deleted when you ask us to delete your account (below). This information isn’t subject to the six-year period. A profile photo you replace stays in storage, still reachable by anyone with its link, until your account is deleted or you ask us to remove it.
• Waitlist details: kept until we contact you about launch, or until you ask us to remove them.

Deleting your account

Account deletion isn’t automated. Email us from the address on your account, and we’ll handle it by hand and confirm when it’s done. We close your sign-in, remove your profile photos from storage, and delete or de-identify your profile details, messages, notes and notification settings. We keep only the records described above, with the name and email address on them, until their retention period ends.

You can update most of your profile in the app. You can also email getcoachpotato@gmail.com, from the address on your account, to:

• ask what personal information we hold about you, and get a copy;
• correct information that’s wrong;
• delete your account, except the records we have to keep (section 7);
• withdraw a consent you gave, such as to notifications or, for a coach, to a public profile before listing (which you can also do yourself on the payouts step until you’re listed; a listed profile is public while it stays listed, section 4); or
• ask any other question about your privacy.

We’ll respond within 30 days. If you aren’t satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Access to personal information is limited to the people and services that need it. Database rules restrict what each account can read, and connections to the site are encrypted. No system is perfectly secure, but we’ll tell you, and the regulator where the law requires it, if a breach puts your information at real risk.

Booking a lesson requires confirming you are at least 18 years old. Coach Potato is not meant for children.

We’ll update this policy when what we collect or how we use it changes. When it changes, we publish a new version here with its effective date at the top. See also our Terms of Service.