Privacy Policy

Information we collect

• Your name, email address, and optional phone number when you provide it through the quiz or an application.
• Quiz answers, including age, sex, height, weight, goals, activity and training experience, training location, barriers, coaching preferences, and health-screening answers. We also save calculated BMI, program recommendations, and campaign information from the link you used.
• The medical-condition or restricted-activity checkbox, your checkout acknowledgment, and any clearance requests.
• Program and account details, including your program version, start date, and coaching status.
• Check-in answers, including weight, workouts, sleep, energy, nutrition, hunger, stress, soreness, pain, optional cycle or postpartum information, and any notes you choose to send.
• Questions sent to Ask Dr. Andreou, their topics, answers, coaching responses, and related safety-review records.
• Application and waitlist details you submit, including goals and any competition history.
• Order details, including the program purchased, amount, payment or session reference, purchase date, and enrollment status. Stripe handles card data; we never store your card number or security code.

Our service providers may also process technical information, such as IP addresses, device information, and service logs, to operate and secure their services.

Why we use your information

We use it to recommend and deliver your program, create and manage your account, enroll you in the training app, process payments, send sign-in links and program communications, provide support and coaching replies, screen for safety concerns, and keep required business and payment records. Check-in and question answers may be screened automatically to provide educational responses and flag items for Dr. Andreou to review. This is not a medical diagnosis or an emergency-monitoring service.

We use campaign information to understand how people find the programs. If you opt in to marketing communications, we may use your contact details for those communications; you can ask us to stop.

Services that process information

We do not sell personal data. We provide information to the services needed to operate your program:

• Stripe: payment processing, checkout, and payment records.
• Lovable Cloud and its hosting and database providers: website operation, accounts, and storage of quiz, coaching, and order records.
• Our email sender: sign-in links and service emails. Staff safety-alert emails contain a client name, rule reference, and review link, rather than full check-in answers.
• Kahunas: the training app and your training-program enrollment. Information you provide directly in Kahunas is also subject to its privacy policy.
• Google Sheets and Zapier: limited enrollment information to create your client account in Kahunas: name, email, package ID and name, and plan start date. The sheet also carries an order reference and the time the row was added to track enrollment and avoid duplicates. We do not send health information, quiz answers, check-ins, questions, card data, or payment amounts through this enrollment sheet.

We may also disclose information when legally required or reasonably necessary to protect rights or safety. Providers may process information in the United States or other countries where they operate.

How long we keep information

We keep information for as long as reasonably needed to deliver and support your program, manage safety reviews, and meet legal, accounting, dispute-resolution, and recordkeeping obligations. There is no single fixed retention period for all records. Payment and legally required records may need to remain after an account is closed. Deleted information may remain in provider backups until those backups cycle out under the provider’s practices.

How we protect information

Account sign-in is required for private coaching records. Access controls limit clients to their own records and restrict staff review records and private coach notes to authorized admins. Service credentials are kept server-side, and enrollment exports are limited to the fields described above. These safeguards reduce risk, but no online service can guarantee complete security. Please protect your email account and do not share sign-in links.

Access, corrections, and deletion

To request access to your information, correct it, or ask for deletion, email drsunnyandrews@gmail.com. We may need to verify your identity before acting on a request. Some information must be retained for legal or business-record obligations; we will explain any applicable limits. Removing information needed for coaching may prevent us from continuing your program. Information held independently by Stripe or Kahunas may also require a request to that provider.

Florida and United States law

This policy is intended for a United States-based coaching business and is governed by Florida law and applicable United States federal law, without taking away privacy rights or protections that cannot legally be waived.

We may update this policy as the service changes and will update the effective date. Questions about this policy can be sent to drsunnyandrews@gmail.com.