Legal

Privacy Policy

Effective date: April 21, 2026

1. Who We Are

Practice.coach is an AI coaching platform operated by Practice.coach (https://www.practice.coach). We are the data controller for personal data we process in accordance with applicable privacy laws including GDPR.

Contact: [email protected]

2. Data We Collect

We collect only data necessary to operate the platform:

  • Identity data: name and email address (via Google or email login)
  • Coaching data: session records, transcripts, ICF competency evaluations, journal entries
  • Technical data: IP address, browser type, access timestamps (server logs)
  • Payment data: processed exclusively by Stripe — we never store card numbers or payment details

3. How We Use Your Data

  • Operating and personalizing the platform (AI sessions, LorelAI feedback, ICF tracking)
  • Communicating with you (transactional emails, notifications)
  • Improving service quality (anonymized analytics)
  • Fulfilling legal obligations

We never sell your coaching data to third parties or use it to train AI models without your explicit consent.

4. Legal Basis for Processing

  • Contract performance — processing necessary to deliver the service
  • Legitimate interest — security, fraud prevention, analytics
  • Consent — marketing communications (withdrawable at any time)

5. Google Sign-In (OAuth)

When you sign in with Google, we receive only: your name, email address, and profile picture. We do not request access to your Google Drive, Gmail, or any other Google services beyond basic authentication.

Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Sharing

We share your data only with trusted service providers necessary to operate the platform:

  • Stripe — payment processing
  • Google Calendar API — calendar sync (with your consent only)
  • Manus — platform infrastructure and hosting

All processors are contractually bound to protect your data.

7. Data Retention

We retain your data for the duration of your account and 30 days after deletion (for recovery purposes). Payment records are retained for 7 years per tax regulations. You may request earlier deletion at any time.

8. Your Rights (GDPR)

  • Right to access your data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to data portability
  • Right to object to processing
  • Right to lodge a complaint with your supervisory authority

To exercise your rights, contact: [email protected]

9. Cookies

We use only technically necessary cookies for authentication (session cookie). We do not use tracking cookies or third-party advertising cookies.

10. Security

Data is encrypted in transit (TLS/HTTPS) and at rest. Access to personal data is restricted to authorized personnel on a need-to-know basis.

11. Changes to This Policy

We will notify you of material changes by email at least 14 days in advance. The current version is always available at https://www.practice.coach/privacy.