Privacy Policy

Effective November 6, 2026

James Nunan (247 Hybrid)

247 Hybrid is a coaching service. To coach you well, we read health data you choose to share from Apple Health and store it securely so your coach can review it. We do not sell your data, we do not use it for advertising and we do not share it with anyone outside the people directly coaching you. This page explains exactly what we collect, where it lives and how you can take it back at any time.

1. Health Data We Collect

With your permission, the CBP iOS app reads the following data types from Apple Health. All access is read-only. We never write to Apple Health.

  • Sleep Analysis: time in bed, total sleep and sleep stages (Awake, REM, Core, Deep)
  • Heart Rate: individual heart rate samples throughout the day
  • Resting Heart Rate
  • Heart Rate Variability (HRV SDNN)
  • Steps
  • Active Energy (active calories burned)
  • Exercise Minutes
  • Stand Hours
  • Workouts: workout type, start/end time, duration, heart rate zones and calories

2. How We Collect It

When you first open the app, iOS shows you an Apple Health permission prompt listing each data type above. You choose which ones to share. You can change those choices at any time. If you deny a data type, the app simply skips it.

3. How We Store It

Health data is stored in a Supabase Postgres database hosted in the United States. Data is encrypted at rest (AES-256) and in transit (TLS). Row-level security policies ensure each user's data is isolated to their own account. Health data is never stored in iCloud and never leaves our Supabase database except to be displayed to you or your coach.

4. Who Can Access It

Only two parties can see your health data:

  • You, through the iOS app and the coaching portal
  • Your assigned 247 Hybrid coach

No other staff, no third parties, no business partners, no analytics vendors and no advertisers have access.

5. What We Never Do With Your Health Data

  • We never use it for advertising or marketing
  • We never use it for data mining, profiling or training machine learning models
  • We never sell it to third parties
  • We never share it with insurers, employers or data brokers
  • We never use it for any purpose beyond delivering your coaching

6. Revoking Access

You can stop the app from reading Apple Health at any time:

  1. Open the iOS Settings app
  2. Tap Privacy & Security → Health
  3. Tap Cold Brew Performance
  4. Toggle off any data types you no longer want to share

Uninstalling the app also stops all future data collection.

7. Requesting Data Deletion

To have all of your stored health data permanently deleted, email james@247hybrid.com from the email address on your account. We process deletion requests within 30 days and send you a confirmation when the data has been removed.

8. Data Retention

We retain your health data while your coaching engagement is active. If you end your engagement, your data is deleted within 90 days unless you ask us to delete it sooner. Deletion requests are honored at any time, active engagement or not.

9. Account, Application and Training Data

Besides the Apple Health data listed above, we collect the following personal information:

  • Account data: your name and email address, collected through Supabase Auth to log you in.
  • Coaching application (the form at /apply): first name, goals, what success looks like for you, role and company, current training status, coaching history, what has frustrated you about your fitness, whether you have an iPhone and Apple Watch, where you train, your weekly availability, how often you travel, when you would like to start, a yes/no answer on whether any health condition affects how you exercise (no details), email, phone number and texting preference (optional), city or time zone, good times for a call, how you heard about us and your answer to the pricing question.
  • Client onboarding (the form at /onboard): full name, email, training history and current training, injuries or limitations, gym access, age, height, weight, whether you want help with nutrition (yes or not right now), average sleep, medications and supplements, how busy your week is, whether you have an Apple Watch, the days and times you can train and anything else you choose to tell us.
  • Training data you log in the app: the sets, weights and reps you record and any notes you leave for your coach.

Application and onboarding answers are submitted through Netlify Forms and stored by Netlify. When you submit the application form, your answers are emailed to your coach through Resend, and your name and email are used to send you a confirmation. When you submit the onboarding form, your coach receives an email with your name only; your health answers are not included in email. The onboarding form asks for your explicit consent before you share health information, and no analytics run on the onboarding pages. Training data you log in the app is stored in our Supabase database under the same protections described in section 3.

We use this information only to evaluate your application, build and adjust your program and communicate with you about your coaching. Your email is used for login, scheduling and transactional messages (application confirmations, password resets, deletion confirmations). We do not send marketing email. Form submissions are kept for six months, and you can ask us to delete them at any time using the process in section 7.

10. Third-Party Services

We rely on a small number of vendors to operate the service:

  • Supabase: database and authentication
  • Vercel: hosting for the coaching portal
  • Netlify: hosting for this marketing website and storage of application and onboarding form submissions (Netlify Forms)
  • Resend: transactional email delivery, including application confirmations and form notifications to your coach
  • Stripe: payment processing for coaching subscriptions. Card details go directly to Stripe; we never see or store them.
  • Google Workspace: business email, including messages you send us and form notifications
  • Google Analytics: aggregate traffic measurement on the marketing website (see section 11)

These vendors act as data processors under our instructions. They do not use your health data or form submissions for their own purposes.

11. Cookies & Tracking

The marketing website (247hybrid.com) uses Google Analytics for aggregate traffic measurement. Analytics are not loaded on the client onboarding pages. The iOS app contains no third-party trackers or analytics SDKs. The coaching portal uses only the cookies required for your authenticated session.

12. Children's Privacy

247 Hybrid is for adults. You must be 18 or older to apply or become a client, and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has provided us with data, contact us and we will delete it.

13. Changes to This Policy

If we make material changes to how we handle your data, we will email active clients and update the effective date at the top of this page.

14. Contact

247 Hybrid
Email: james@247hybrid.com
Web: 247hybrid.com