Privacy Policy

Effective as of May 16, 2026
Last updated on October 26, 2026

1. Who We Are

TurnKey Coach (“TurnKey Coach,” “we,” “us,” or “our”) is a software-as-a-service coaching platform operated by Barbell Logic, Inc., a Missouri corporation with its principal place of business at 2333 Dearborn Street, Springfield, Missouri 65807, United States of America.

For the purposes of the EU General Data Protection Regulation (“GDPR”) and U.S. state privacy laws, Barbell Logic, Inc. is the data controller for personal information collected through the Platform.

This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit our websites (turnkey.coach and any subdomain, including app.turnkey.coach), use our coaching application (collectively, the “Platform”), or otherwise interact with our Services.

Contact us about privacy at: help@turnkey.coach or write to the address above.

2. Our Commitments

• We do not sell or rent your personal information to any third party.
• We use commercially reasonable security measures to protect your information.
• We give you meaningful control over the information you share with us, including the ability to access, correct, export, and delete your data.
• We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

3. Information We Collect

3.1 Information you provide

• Account information: name, email address, phone number, password (hashed), profile photo, role (coach, client, admin), company affiliation.
• Coach intake information: professional qualifications, certifications, payout details (collected and held by Stripe — see Section 6).
• Client intake information: training goals, training history, injury history, body measurements, demographic information you choose to share.
• Coaching content: workouts, programs, exercise videos, written notes, and messages between coaches and clients.
• Payment information: processed and stored by Stripe; we never store full card numbers on our servers. We retain only billing metadata necessary to operate subscriptions.
• Support communications: information you provide when you contact us for help.

3.2 Information collected automatically

• Device and usage data: IP address, device type, operating system, browser type, screen size, app version, language, time zone.
• Log data: pages and features accessed, timestamps, error events, referring URL.
• Cookies and similar technologies: see Section 9.

3.3 Information from third parties

• OAuth providers (e.g., Google, Apple) when you choose to sign in with them.
• Stripe for payment status and payout events.
• Authorized third-party applications that you connect to your TurnKey Coach account (see Section 7).
• Apple Health (iOS) and Health Connect (Android), if you choose to connect them; see Section 13.

4. How We Use Information

We use personal information to:

• Provide, maintain, and operate the Platform and Services.
• Authenticate users and secure accounts.
• Process payments and manage subscriptions.
• Match prospective clients with coaches through our Client Experience Team.
• Personalize your experience (e.g., remembering preferences, customizing workouts).
• Send transactional communications (account, billing, support, security).
• Send marketing communications about new features, content, and promotions, where you have opted in or where permitted by law (you can opt out at any time).
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service.
• Comply with legal obligations and enforce our agreements.
• Improve the Platform through analytics and aggregated usage research.

We process personal information on the following lawful bases (where GDPR applies): performance of a contract, our legitimate interests in operating and improving the Platform, your consent (which you may withdraw at any time), and compliance with legal obligations.

5. How We Share Information

We share personal information only as described below. We do not sell personal information, and we do not “share” personal information for cross-context behavioral advertising as those terms are defined under California law.

5.1 Within the coach-client relationship

When you join the Platform as a client, your account is associated with a coach (or coaching company). That coach has access to your training data, workouts, body measurements, and messages with them, as required to deliver coaching services to you.

When you join as a coach or coaching-company admin, you have access to the data of the clients assigned to you, on the same basis.

5.2 With service providers (sub-processors)

We use trusted third-party service providers (“sub-processors”) to operate the Platform. These providers are contractually obligated to use personal information only for the purposes we specify and to protect it with appropriate safeguards.

A current list of material sub-processors includes (without limitation):

Sub-processor	Purpose	Region
Amazon Web Services	Cloud hosting, storage, compute (the only sub-processor that receives Apple Health or Health Connect data; see Section 13)	United States
Stripe	Payment processing, payouts	United States
Twilio (formerly SendGrid)	Transactional and marketing email	United States
Twilio	Text message delivery	United States
Honeybadger	Error monitoring	United States
Hotjar	Product analytics, session insights	European Union
OneSignal	Mobile push notifications	United States
Firebase	Mobile push notifications	United States
Zoom Video Communications, Inc.	Video meeting creation (only when a coach authorizes the Zoom integration)	United States

5.3 With authorized third-party applications

If you authorize a third-party application (such as ChatGPT, Claude, or another OAuth/MCP client) to access your TurnKey Coach account, we will share with that application the data necessary to fulfill the access you have granted. See Section 7 for full details.

5.4 For legal and safety reasons

We may disclose personal information when we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our Terms of Service, including investigation of potential violations; (c) detect, prevent, or otherwise address fraud, security, or technical issues; or (d) protect the rights, property, or personal safety of TurnKey Coach, our users, or the public.

5.5 In a business transfer

If TurnKey Coach is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you (and provide a choice where required) before personal information becomes subject to a different privacy policy.

6. Payment Information

Payments are processed by Stripe, Inc. Stripe collects and stores card details directly; TurnKey Coach receives only the billing metadata necessary to operate your subscription (such as transaction status, last four digits, card brand, expiration). Stripe’s handling of payment data is governed by Stripe’s own privacy policy.

7. Third-Party Application Integrations

This section covers two distinct types of integrations: (a) inbound integrations, where a third-party application accesses TurnKey Coach on your behalf via our API or MCP endpoint, and (b) outbound integrations, where TurnKey Coach calls a third-party service (such as Zoom) on your behalf using credentials you have authorized us to use.

7.1 Inbound: Third-Party Applications That Access TurnKey Coach (OAuth, API, and MCP Clients)

TurnKey Coach offers an API and a Model Context Protocol (MCP) endpoint that authorized third-party applications — including AI assistants such as OpenAI’s ChatGPT and Anthropic’s Claude — can use to access your account on your behalf.

When you connect a third-party application:

• You initiate the connection through an OAuth authorization flow. We do not share your data with any third-party application unless you explicitly authorize it.
• The application receives an access token that allows it to read and (where you authorize) write data in your TurnKey Coach account on your behalf. The scope of access is limited to the permissions you grant during the authorization flow.
• The third-party application’s handling of your data is governed by its own privacy policy and terms. TurnKey Coach is not responsible for the privacy practices of third-party applications. We encourage you to review them before connecting.
• You can revoke any authorized application at any time from your account settings (Settings → Connected Apps). Revocation invalidates the access token and stops future requests from that application; data already shared with the third party remains subject to that party’s policies.
• What data is exposed: depending on the scopes you authorize, this may include your profile, your client roster (if you are a coach), individual client overviews, workouts, messages, and the ability to send messages on your behalf. The application’s listing — for example, in the OpenAI App Directory or Anthropic Connectors Directory — describes the specific tools the application uses.

We log API and MCP requests for security, debugging, and abuse prevention. Logs are retained as described in Section 11.

7.2 Outbound: Services TurnKey Coach Connects To On Your Behalf

7.2.1 Zoom Integration

When a coach authorizes the Zoom integration in TurnKey Coach, we use Zoom’s OAuth flow to obtain authorization to create scheduled meetings on that coach’s Zoom account when they publish a community event.

From Zoom, we receive and store, on the connecting coach’s user record:

• The Zoom user identifier (zoom_uid)
• An OAuth access token, refresh token, and access-token expiry timestamp

These credentials are stored in our PostgreSQL database (hosted on Amazon Web Services) and are used only to call Zoom’s API on the connecting coach’s behalf — specifically POST /users/me/meetings to create scheduled meetings tied to community events the coach publishes, and GET /users/me once during the OAuth callback to capture the coach’s Zoom user identifier.

The full Zoom scopes we request are meeting:write:meeting and user:read:user.

We do not store, process, or transmit Zoom meeting content, recordings, transcripts, chat messages, or participant lists.

Zoom credentials are immediately and permanently cleared from our database when the coach disconnects Zoom from TurnKey Coach, when Zoom rejects a token-refresh request, or when the coach deletes their TurnKey Coach account.

We do not share Zoom credentials with any third party.

Coaches can disconnect Zoom at any time from their TurnKey Coach account settings, or revoke TurnKey Coach’s access from the Apps section of zoom.us.

8. Your Privacy Rights

8.1 All users

You may at any time:

• Access the personal information we hold about you.
• Correct information that is inaccurate or out of date.
• Export a copy of your account data in a portable format.
• Delete your account and associated personal information (subject to legal-retention obligations described in Section 11).
• Opt out of marketing communications via the unsubscribe link in any marketing email or by emailing help@turnkey.coach. Transactional messages (billing, security, support) are not affected.

To exercise these rights, log in to your account or email help@turnkey.coach. We will respond within the timeframes required by applicable law (typically 30 days; up to 45 days for U.S. state-law requests, with one 45-day extension available where permitted).

8.2 European Union, EEA, United Kingdom, and Switzerland

If you are a resident of the EU/EEA, UK, or Switzerland, you have additional rights under the GDPR or equivalent UK and Swiss law, including the rights to: access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, and objection to processing.

Where we rely on your consent, you may withdraw consent at any time.

You also have the right to lodge a complaint with your local supervisory authority.

International data transfers from the EEA/UK/Switzerland to the United States are made under appropriate safeguards, including the European Commission’s Standard Contractual Clauses where applicable.

8.3 California, Virginia, Colorado, Connecticut, Utah, Texas, and other U.S. state-law residents

Subject to the applicable state law, you have rights to:

• Know / Access the categories and specific pieces of personal information we have collected about you.
• Delete personal information we have collected about you.
• Correct inaccurate personal information.
• Opt out of sale or sharing for cross-context behavioral advertising. TurnKey Coach does not sell personal information and does not share it for cross-context behavioral advertising.
• Limit the use of sensitive personal information to the purposes for which it was provided.
• Non-discrimination for exercising any of these rights.

You may exercise these rights through the methods described in Section 8.1. We will verify your identity before fulfilling a request. You may designate an authorized agent to act on your behalf in accordance with applicable law.

If we deny your request, you may appeal by replying to our denial response. If you are a Virginia, Colorado, or Connecticut resident and your appeal is denied, you may contact your state Attorney General.

9. Cookies and Similar Technologies

We and our service providers use cookies, web beacons, and similar technologies to operate the Platform, remember your preferences, and analyze usage. You can control cookies through your browser settings. Disabling certain cookies may affect Platform functionality.

We use Hotjar to better understand how users interact with the Platform and to identify friction points. Hotjar collects behavioral data (clicks, taps, scrolls), technical data (device type, screen size), and limited identifiers. For more information, see Hotjar’s Trust Portal and Privacy Policy. You can opt out of Hotjar at the link in their privacy policy.

We do not use third-party advertising networks, advertising cookies, or web beacons for advertising purposes.

10. Children’s Privacy

The Platform is not directed to children under 13 (or under 16 in the EU/EEA), and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact help@turnkey.coach and we will delete it promptly. Coaches who work with minor athletes must obtain verifiable parental or guardian consent and assume responsibility for compliance with laws applicable to minors.

11. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Services.

After account deletion:

• Account profile and content are deleted within 30 days upon request, except where retention is required for legal, tax, accounting, fraud-prevention, or dispute-resolution purposes.
• Payment and billing records are retained for at least 7 years to comply with U.S. tax and accounting obligations.
• Backup copies may persist for a limited period after deletion before being deleted or overwritten.
• Aggregated, de-identified data may be retained indefinitely for analytics and service improvement.
• API and MCP request logs are retained for a limited period for security and debugging.
• Apple Health and Health Connect data: data already synced is kept in your account until you delete your account (including copies in change history), or until you ask us to delete it at help@turnkey.coach; disconnecting stops new syncing but does not delete synced data. After account deletion, residual copies in backups are kept for a limited period before being deleted or overwritten. See Section 13.
• Third-party OAuth credentials (e.g., Zoom tokens) are immediately and permanently cleared upon disconnection, token-refresh rejection, or account deletion — no retention period applies.

If you would like us to expedite deletion or have questions, contact help@turnkey.coach.

12. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS), encryption at rest for sensitive fields, role-based access controls, audit logging, and routine security reviews. No system is perfectly secure; we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

13. Health-Related Information

The Platform allows users to record and share health-related information such as bodyweight, training load, injury history, and recovery indicators. TurnKey Coach is not a HIPAA-covered entity, and the Platform is not intended to receive Protected Health Information (“PHI”) as defined under HIPAA. Do not submit PHI through the Platform. Coaches and clients should consult a qualified healthcare professional before beginning any training program; nothing on the Platform is medical advice.

Apple Health and Health Connect. If you choose to connect Apple Health (iOS) or Health Connect (Android) in the TurnKey Coach app, we read only the data types you approve: steps, body weight, sleep, and resting heart rate. On Android, with your permission, this may include historical data recorded before you connected. We only read this data; we never write data to Apple Health or Health Connect. We do not use iCloud to store your health data. Your device’s own backups (iCloud or Google) may include limited app data, such as settings and cached content.

We use this data only to provide TurnKey Coach’s fitness and coaching features: displaying it to you and to the coach you work with inside TurnKey Coach. We do not use it for advertising or marketing, for data mining or profiling, for the analytics, research, and personalization purposes described in Section 4, or to train artificial-intelligence or machine-learning models. We never sell it, never transfer it to advertising platforms, data brokers, or information resellers, and never use it to determine credit, insurance, employment, or lending eligibility.

We do not share Apple Health or Health Connect data with third parties, except: – (a) Service providers. Infrastructure providers that host and operate the Platform on our behalf (for example, our cloud hosting provider), as described in Section 5.2, only on our instructions, only to provide the service, and under contractual confidentiality and data-protection obligations. – (b) Apps you choose. If you authorize a third-party app (including an AI assistant) to access your TurnKey Coach account, it will not receive Apple Health or Health Connect data unless you separately turn on health-data sharing for that app on a screen that names the app and the data types. Apps connected before this setting was available start with health-data sharing turned off. Coaches can disconnect an AI assistant at any time in Settings > Integrations > [assistant name] > Connected assistants > Disconnect; anyone else can ask us to revoke an app’s access by contacting help@turnkey.coach. We do not control how that app uses the data after it receives it; its own privacy policy governs. – (c) Legal requirements. Where we are required to by law, as described in Section 5.4. – (d) Business transfers. As part of a merger, acquisition, or sale of assets, as described in Section 5.5. We will require the recipient to continue to handle the data in accordance with this section and to obtain your consent before any materially different use.

We protect this data with reasonable administrative, technical, and organizational safeguards, including encryption in transit. You can stop syncing at any time in Settings > Integrations > Apple Health / Health Connect in the TurnKey Coach app, and you can revoke access in your Apple Health or Health Connect settings. When you disconnect, we stop reading new data; data already synced remains in your TurnKey Coach account until you delete your account, as described in Section 11, or until you ask us to delete it by contacting help@turnkey.coach. After account deletion, residual copies in backups are kept for a limited period before being deleted or overwritten.

14. Linked Websites

The Platform may contain links to websites and services operated by third parties. This Privacy Policy applies only to TurnKey Coach. We encourage you to review the privacy policies of any third-party site you visit. We are not responsible for the privacy practices of third parties.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by a prominent notice within the Platform before the changes take effect. The “Last Updated” date at the top of this policy reflects the most recent revision.

16. Text Messages

If you turn on text messages in the TurnKey Coach app, you choose which texts you want from your coach’s business: coaching texts about your training, and, only if you separately check a box, promotional texts such as program announcements and offers. We collect your mobile number and a record of each consent you give (the wording you agreed to, which options you chose, the business you agreed to hear from, the date and time, your IP address and browser or app details). Your coach’s business is the sender of these messages; TurnKey Coach (Barbell Logic, Inc.) delivers them on its behalf. For example, a coaching business that uses TurnKey Coach can send its clients texts this way under its own business name. One-time verification codes are sent by TurnKey Coach (Barbell Logic, Inc.).

We use this information only to send you the texts you asked for, to honor your opt-out, to apply sending-time limits, and to keep a record of your consent.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text message originator opt-in data and consent are excluded from every category of sharing described in this policy (including Sections 5.3 and 5.5) and will not be shared with any third parties, except (a) the text message provider that delivers messages for us (Section 5.2), (b) the coach’s business you opted in to, which can see whether your texts are on, and (c) where required by law. Your consent to texts from one coach’s business is never used to send you texts from any other business.

Reply STOP to any text, or turn texts off in your account settings, to opt out at any time; reply HELP for help. See our SMS Terms & Conditions.

17. Contact

Questions, comments, or requests regarding this Privacy Policy should be directed to:

TurnKey Coach (Barbell Logic, Inc.)

2333 Dearborn Street

Springfield, Missouri 65807

United States of America

Email: help@turnkey.coach