← Nuwell CoachingTerms of Service

Privacy Policy

Last updated: 2026-06-03

1. Who we are

Nuwell Coaching ("Nuwell," "we," "us," "our") is a personal physique and bodybuilding coaching practice operated by Jacob Yaroshuk. This policy explains what personal information we collect when you use our coaching services through the client portal at app.nuwellcoaching.com, the public site at nuwellcoaching.com, the intake assessment form, and any related communications (collectively, "the Services").

If you have questions about this policy, contact: jacobyaroshukofficial@gmail.com.

2. What we collect

Information you provide directly:

  • Identity and contact info: your name, email address, and any other contact details you submit
  • Intake assessment responses: training history, body composition goals, health history, current medications and supplements, lifestyle factors
  • Daily check-in data: body weight, sleep duration and quality, mood, energy, hunger, training notes, nutrition adherence, biofeedback signals
  • Weekly review responses: wins, struggles, questions for your coach
  • Training logs: exercises, sets, reps, weights, RPE, notes
  • Progress photos you upload
  • Bloodwork PDFs and the structured lab values extracted from them
  • Free-text notes you share at any point in the portal or via email
  • Any compounds, dosages, or protocols you record on your timeline sheet or share with your coach in the course of coaching

Information collected automatically:

  • Magic-link authentication cookies (session-only; no third-party tracking cookies)
  • Server logs of page requests, error reports, and basic performance telemetry, used for debugging and uptime monitoring

We do not use advertising trackers, social media pixels, or analytics products that profile you across the web.

3. How we use your information

Your data exists to deliver coaching. Specifically:

  • Generate your weekly check-in feedback, training adjustments, and nutrition guidance
  • Surface trends across your check-ins, training log, photos, and bloodwork so your coach can spot what's working and what isn't
  • Power the AI briefing feature that summarizes your status before your coach reviews it
  • Extract structured markers from bloodwork PDFs you upload (using Anthropic's Claude API — see processors below)
  • Maintain your personal portal and respond to your questions
  • Send transactional messages (login links, welcome email, occasional coaching communications)

We do not sell your data. We do not share it with third parties for their own marketing.

4. Where your data is stored and who processes it

Your data is hosted on the following infrastructure providers, each of which acts as a "processor" — they store and move data on our behalf under their own privacy commitments:

  • Supabase, Inc. (database, authentication, file storage) — US-West (Oregon) region; data encrypted at rest and in transit
  • Netlify, Inc. (web application hosting) — global edge network; data encrypted in transit
  • Google LLC (Google Drive folders, Sheets, Apps Script) — your coaching sheets and progress photos live in Drive folders owned by Jacob; access is restricted to Jacob's authenticated Google account
  • Anthropic, PBC (Claude API for bloodwork PDF extraction and coaching briefings) — bloodwork PDFs and a structured summary of your check-ins/bloodwork are sent to Anthropic for processing; Anthropic does not train models on this data per their commercial terms
  • Sentry, Inc. (error tracking) — anonymized error reports may include the URL path and stack trace; no body content (no check-in answers, no bloodwork values) is sent
  • Cloudflare, Inc. (DNS only — does not store your data)

Each processor maintains its own security and privacy posture; we choose providers with reasonable industry-standard practices but cannot guarantee any third-party system. Their privacy policies are publicly available.

5. How long we keep your data

  • While you are an active coaching client: indefinitely, as part of your ongoing record
  • After you cancel coaching: we retain your data for up to twenty-four (24) months as a reference in case you return, then archive or delete it on request
  • Bloodwork PDFs and extracted markers: retained with the rest of your record on the same schedule
  • Anonymous server logs: retained for up to ninety (90) days for debugging

You can ask us to delete your data sooner — see Section 7.

6. Security

We use industry-standard practices: encryption at rest and in transit, magic-link authentication (no passwords stored), database-level row security so that one client cannot read another's data, restricted access to the service-role credentials, and source-controlled infrastructure.

No system is perfectly secure. If we become aware of a data breach affecting your information, we will notify you within seventy-two (72) hours of confirmation and describe the scope and our response.

7. Your rights

You have the right to:

  • Access your own data — log into the portal and read everything we store about you
  • Correct inaccurate data — edit through the portal or email us
  • Delete your data — email us and we will remove your records within thirty (30) days, subject to legitimate retention requirements (e.g., financial or tax records related to past payments). See Data deletion for exactly what is removed, what is kept, and how long it takes
  • Export your data — we will provide a machine-readable copy (typically JSON or CSV) within thirty (30) days
  • Withdraw consent to coaching at any time, ending the data relationship going forward

To exercise any right, email jacobyaroshukofficial@gmail.com.

If you are in a jurisdiction with specific privacy law (Canada's PIPEDA, the EU's GDPR, California's CCPA, etc.), you may have additional rights under that law. We will honor those when applicable.

8. Children

The Services are not directed at children under eighteen (18). We do not knowingly accept clients under 18. If we learn we have collected information about a person under 18, we will delete it.

9. Sensitive health and PED-related information

Because of the nature of physique coaching, clients often share information about anabolic compounds, performance-enhancing drug use, restrictive diets, and other topics that may be sensitive in their jurisdiction. We treat this information as confidential coaching data. We do not disclose it to third parties except as required by valid legal process. We will not voluntarily report client compound use to any regulatory or law enforcement body.

Note: Compound legality varies by country. You are responsible for understanding the laws that apply to you. Sharing information with us is not legal advice and does not protect you from your jurisdiction's laws — see the Terms of Service for more.

10. International transfers

Your data is stored in the United States (Oregon, primarily). If you are accessing the Services from outside the U.S., you are consenting to international transfer of your information to U.S.-based processors, which may have different privacy protections than your home jurisdiction.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top tells you when. If we make material changes — for example, adding a new processor that handles your data — we will notify active clients by email at least fourteen (14) days before the change takes effect.

12. Contact

For privacy questions, data requests, or anything else covered in this policy:

Jacob Yaroshuk — Nuwell Coaching Email: jacobyaroshukofficial@gmail.com Site: nuwellcoaching.com