Paragon Strength Nutrition ("we", "our", "us") operates the Paragon web and Android application (the "App"). This Privacy Policy explains how we collect, use, store, and protect your personal information across both 1:1 coaching and team / group coaching services. By using the App, you consent to the practices described herein.
Account Information: Name, email address, password, and your client / coach role when you create an account.
Health & Fitness Data: Body weight, body fat percentage, progress photos, body measurements, check-in notes, nutrition logs, workout data (sets / reps / weight / videos), supplement usage, bloodwork results, body scan data, and injury information you provide to your coach.
1:1 Messaging Data: Direct messages exchanged between you and your assigned 1:1 coach are stored to provide the coaching service. Messages are visible only to you and your coach.
Team Coaching Data (if you join a team): If you join a coach's team / group coaching program, additional data is collected and shared as described in Section 4 below. This includes team membership status, team chat messages, personal records (PRs) that may be visible to your team, earned badges, and workout completion status visible to teammates.
Subscription & Billing Information: If you subscribe to a paid 1:1 or team coaching plan, we collect billing-related metadata (subscription status, trial start / end dates, last four card digits surfaced by Stripe). We never see or store your full card number, CVV, or banking credentials — all payment data is collected and stored by our PCI-DSS-compliant payment processor, Stripe.
Usage Data: We collect basic analytics about how you use the App to improve the service.
Device Information: Push notification tokens (if you opt in) and basic browser / device type for compatibility.
Wearable Device Data (Fitbit, Garmin): If you connect Fitbit or Garmin via OAuth, we sync steps, calories burned, distance, exercise sessions, heart rate, weight, and sleep data. Used solely for coaching and shared only with your assigned coach (never with teammates). Disconnect at any time in App Settings.
Google Health Connect Data (Android only): If you grant permission on the Android app, we read steps, active calories burned, total calories burned, distance, exercise sessions, heart rate, weight, and sleep from Google Health Connect. Synced solely to share with your assigned coach (or for team-coaching clients, aggregated into your private training metrics that only you and your coach can see). We do not sell or share Google Health Connect data with any third party, do not use it for advertising, and do not use it to train ML models. Revoke at any time through Android Settings → Apps → Health Connect → Permissions.
Your health, fitness, and 1:1 messaging data is shared only with your assigned coach (and, for team-coaching clients, additionally with the team members specified in Section 4). We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.
We use the following third-party service providers:
Independent Coaches: Coaches are independent professionals, not Paragon employees. Your assigned coach has access to your coaching data (per Section 4) for the duration of your coaching relationship. Coach access is revoked within 24 hours if you leave their roster or team.
If you join a coach's team / group coaching program, the following is shared with other members of YOUR specific team (and only that team — never across teams or to the public):
NEVER shared with teammates: 1:1 coach messages, body weight, body fat percentage, progress photos, bloodwork, food logs, individual workout-log details, check-in entries, payment information, or contact details (email, phone).
Leaving a team: Your previously-posted chat messages remain visible to the team unless you delete them first. PRs and badges are removed from the team feed within 24 hours.
Team chat is user-generated content:
Progress photos, bloodwork PDFs, and body scan documents are stored in Supabase Storage and accessible only to you and your assigned coach. Form-check videos are stored on Bunny Stream and accessible only via short-lived signed URLs scoped to your coach. Permanently deleted when you delete your account.
Bloodwork results, body composition data, and medical notes are:
Important: Paragon is a fitness coaching platform, not a healthcare provider. We are not subject to HIPAA. Consult a licensed healthcare professional for medical decisions.
Your data is retained for as long as your account is active. You may request deletion at any time:
Upon deletion: all personal data (progress photos, check-ins, messages, health records, files, team chat messages, PRs, badges) is permanently removed within 30 days. Active subscriptions are canceled. Stripe may retain payment transaction records for ~7 years per financial regulations. Aggregated, anonymized analytics may be retained indefinitely.
California (CCPA / CPRA): Right to know, delete, opt out of sale/sharing (we do not sell or share for advertising), and not be discriminated against. Email admin@paragon-strength.com.
EU/EEA / UK (GDPR): Lawful basis is consent and legitimate interest. Rights include data portability, restriction, objection, and complaint to your local data protection authority.
We use browser local storage for theme preference, session token, and small UI state. No tracking cookies, advertising cookies, or cross-site identifiers.
This App is intended for individuals aged 18 and older. We do not knowingly collect personal information from anyone under 18. Under COPPA, we do not collect or knowingly retain personal information from children under 13. Parents / guardians: contact admin@paragon-strength.com to request deletion.
Primary servers are in the United States. By using the App from outside the U.S., you consent to data transfer to the U.S. For EU/EEA users, we rely on Standard Contractual Clauses with our processors.
Material changes will be communicated through the App or via email at least 14 days before they take effect.
Privacy inquiries (data access, deletion, CCPA / GDPR rights, abuse reports): admin@paragon-strength.com