Privacy Policy

This Privacy Policy explains how Yellow Brick Ventures LLC (“Coachline,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our SMS-based AI running coach service, including our website at coachline.ai and related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

• Account information: name, phone number, email address.
• Onboarding information: running experience, goals, training history, injury history, availability, and other athlete profile details you share with us or with our AI coach.
• Communications: the content of SMS messages you exchange with Coachline, including responses to check-ins, questions, and coaching conversations.

1.2 Information from Connected Third-Party Services

If you connect a Strava account (or other fitness platform we may support), we collect activity data such as:

• Run distance, pace, duration, elevation, and route data
• Activity timestamps and frequency
• Other performance metrics made available through the platform's API

We only access what you authorize through the third-party's consent screen, and you can revoke this access at any time (see Section 8).

1.3 Information Collected Automatically

• SMS delivery data: message logs, delivery status, and timestamps processed through our messaging provider (Twilio).
• Usage data: how you interact with the Service, response patterns, and engagement timing.
• Device/carrier data: limited technical data necessary to deliver SMS (e.g., carrier information required for message routing).

1.4 Health and Fitness-Adjacent Information

Coachline may collect information related to training load, fatigue, injury flags, or self-reported physical status in order to personalize coaching and adjust training plans. Coachline is not a medical provider, and this information is not treated as clinical health data in the traditional sense. However, certain state laws (such as Washington's My Health My Data Act) define “consumer health data” broadly enough that some of this information may fall within scope. We handle this information with the same safeguards described in this policy, do not sell it, and do not share it for advertising purposes. See Section 11 for more on this distinction.

2. How We Use Your Information

We use collected information to:

• Deliver personalized coaching plans and SMS messages
• Adjust training plans based on your activity, feedback, and stated goals
• Detect patterns that may indicate injury risk, overtraining, or the need for a plan adjustment
• Operate, maintain, and improve the Service
• Communicate with you about your account, updates, or support requests
• Comply with legal obligations and enforce our Terms and Conditions
• Process payments and manage subscriptions

We do not sell your personal information.

3. Website Cookies and Tracking

Our website at coachline.ai may use cookies and similar tracking technologies (such as those provided by Cloudflare for performance and security, and basic analytics tools) to understand site usage and improve the website experience. These are separate from the SMS coaching product and do not include your training or coaching data.

You can control cookies through your browser settings. Disabling cookies may affect some website functionality but will not affect your ability to use the SMS coaching Service.

4. AI-Generated Coaching and Automated Processing

Coachline's coaching plans, check-in responses, and plan adjustments are generated using an AI system (currently built on models provided by Anthropic), based on the information you provide and, where connected, your Strava activity data.

• Your messages are processed by our AI system to generate personalized responses; they are not reviewed by a human coach as a routine part of the Service, except when necessary for troubleshooting, safety review, or quality assurance.
• Automated pattern detection (e.g., identifying potential overtraining or injury risk) informs the messages you receive, but does not constitute a clinical or diagnostic determination.
• You may request more information about how a specific recommendation was generated by contacting us at admin@coachline.ai.

5. SMS / Text Messaging Disclosures

Because Coachline operates primarily via SMS, the following disclosures apply:

• Consent: By providing your phone number and opting in, you consent to receive recurring automated text messages from Coachline, including coaching check-ins, plan updates, and motivational or informational messages.
• Message frequency: Message frequency varies based on your training plan and engagement (typically several messages per week).
• Message and data rates: Message and data rates may apply, depending on your mobile carrier and plan.
• Opt-out: You may opt out at any time by replying STOP to any message. You may reply HELP for assistance. After opting out, you will receive a confirmation message and no further messages, except as necessary to confirm opt-out.
• Carriers: Carriers are not liable for delayed or undelivered messages.
• Consent is not shared: Your phone number and consent to receive messages will not be shared with third parties for their own marketing purposes.

Messages are delivered using Twilio as our SMS infrastructure provider. Twilio processes message content and metadata on our behalf, subject to our data processing agreement with them.

6. How We Share Information

We share information only in the following circumstances:

• Service providers: With vendors who help us operate the Service, including Twilio (SMS delivery), our hosting/infrastructure providers, and AI model providers used to generate coaching responses. These providers are contractually restricted from using your data for their own purposes.
• Strava/third-party platforms: Only to the extent necessary to sync data you've authorized us to access.
• Legal requirements: If required by law, subpoena, or to protect the rights, safety, or property of Coachline or our users.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

We do not share your training data, injury history, or message content with advertisers.

6.1 Service Providers (Subprocessors)

We use the following third-party providers to operate the Service. Each processes data only as necessary to perform their function on our behalf:

Provider	Purpose
Cloudflare	Website hosting and security
Stripe	Payment processing
Squarespace	Domain registration
Anthropic	AI model provider for generating coaching responses
Twilio	SMS message delivery
Railway	Database hosting and backend infrastructure
GitHub	Source code hosting (not used to store user data)
Resend	Transactional and account-related email delivery

This list may be updated as our infrastructure evolves. We will update this Privacy Policy when we add or change subprocessors that materially affect how your data is handled.

7. Data Retention

We retain your information according to the following schedule:

• Active account data (profile, training history, message history, connected app data): retained for as long as your account remains active.
• Post-cancellation: if you cancel your subscription, your training history, coaching conversations, plans, connected-app data (Strava, etc.), and other domain-specific information are retained until the end of the calendar month following the end of your final paid billing period. At that end-of-month cutoff, this data is permanently deleted from our production systems. Your basic account record (name, phone, email, and Stripe customer identifier) is retained afterward so that a future re-subscription can be linked back to your identity; you can request full deletion of that record at any time by contacting us.
• Payment methods on file: at the time of the end-of-month wipe described above, any payment methods on file with our payments processor (Stripe) are detached from your customer profile so they cannot be charged again without you re-entering them.
• SMS consent and opt-out records: retained for 4 years after you opt out, in order to maintain proof of consent and compliance with SMS/TCPA regulations, even after other account data has been deleted.
• Payment records: handled directly by Stripe under its own retention practices; Coachline does not separately store full payment card data.
• Subprocessor-held data: some data held by our subprocessors (e.g., SMS delivery logs held by Twilio) follows their independent retention policies, which may differ from ours.

8. Your Rights and Choices

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information
• Withdraw consent to SMS communications (reply STOP at any time)
• Disconnect third-party integrations (e.g., revoke Strava access via your Strava account settings or by contacting us)
• Request a copy of your data in a portable format
• Object to or restrict certain processing

To exercise these rights, contact us at admin@coachline.ai.

8.1 California Residents (CCPA/CPRA)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale/sharing of personal information. Coachline does not sell personal information.

8.2 Other U.S. State Privacy Rights

Depending on your state of residence, other state-specific privacy laws may apply — including but not limited to those of Colorado, Connecticut, Utah, Virginia, and Texas. Where applicable, these laws may grant you rights similar to those described above, including access, correction, deletion, and opt-out of certain processing. Coachline does not sell personal information or use it for targeted advertising. To exercise any state-specific privacy right, contact us at admin@coachline.ai and identify the state whose rights you wish to invoke.

8.3 International Users

Coachline is currently offered only to individuals located in the United States (see our Terms and Conditions for details), and this Privacy Policy is written with U.S. law as the primary framework. If we expand availability outside the United States in the future, we will update this Privacy Policy to reflect applicable frameworks such as the GDPR, and will provide appropriate notice at that time.

9. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach that affects your personal information, we will notify you and applicable regulators as required by law and without undue delay, describing the nature of the breach and the steps we are taking to address it.

10. Children's Privacy

Coachline is not directed to individuals under 16 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Not Medical Advice

Coachline provides AI-generated training guidance based on the information you provide. It is not a substitute for professional medical advice, and the health/injury-related information we collect is used solely to personalize training recommendations, not for diagnostic or treatment purposes. Always consult a qualified healthcare provider for medical concerns. See Section 4 of our Terms and Conditions for the full assumption-of-risk terms that apply when you use the Service.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via SMS or email, and update the “Last Updated” date above.

13. Contact Us

Questions about this Privacy Policy can be directed to: