Privacy Policy

Last Updated: 7 August 2026

Welcome to CoachAI. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we look after your personal data when you visit our website (https://coachai.uk) and tells you about your privacy rights.

1. Who We Are

CoachAI Ltd ("we", "us", or "our"), a company registered in England and Wales under company number 16867415, is the controller responsible for your personal data. If you have any questions about this privacy policy, please contact us at contact@coachai.uk.

2. The Data We Collect

We may collect, use, store and transfer different kinds of personal data about you:

• Identity Data: Full name.
• Contact Data: Email address.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, and operating system (via Vercel Analytics).
• Usage Data: Information about how you use our website, session generator, and dashboard.

3. How We Use Your Data

We only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To register you as a new customer (via Supabase Auth).
• To process your session generation requests (via Anthropic).
• To manage payments and subscriptions (via Stripe).
• To improve our website and services (via Vercel Analytics).

4. Third-Party Services

We share data with specific third-party providers to run our service:

• Supabase: For secure user authentication and database storage.
• Anthropic: To generate the coaching session content. (Only anonymized session parameters are sent; personal data is not shared).
• Stripe: For processing payments. We do not store your credit card details.
• Resend: For delivering transactional emails (like password resets).
• Vercel: For hosting and anonymous web analytics.

5. Business Transfers

If we are involved in a merger, acquisition, financing, reorganisation, bankruptcy, or the sale of all or part of our business or assets, your personal data may be disclosed to and transferred to the prospective or actual buyer or successor entity as part of that transaction. We rely on our legitimate interests in running and developing our business as the lawful basis for this.

Where this happens:

• Any personal data shared during due diligence will be kept to the minimum necessary, and will be anonymised or aggregated wherever possible. The recipient will be bound by a confidentiality agreement.
• Any buyer or successor entity will be required to handle your personal data in a manner consistent with this privacy policy, or to notify you before it materially changes how your data is used.
• We will notify you by email, or by a prominent notice on our website, before your personal data is transferred and becomes subject to a different privacy policy.
• Your rights under section 7 below, including the right to object or to request erasure, continue to apply both before and after any such transfer.

6. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees and third parties who have a business need to know.

7. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to request access, correction, erasure, or transfer of your personal data. To exercise any of these rights, please email us at contact@coachai.uk.