← Nuwell CoachingTerms of Service

Privacy Policy

Last updated: 2026-10-09

1. Who we are

Nuwell Coaching ("Nuwell," "we," "us," "our") is a personal physique and bodybuilding coaching practice operated by Jacob Yaroshuk. This policy explains what personal information we collect when you use our coaching services through the client portal at app.nuwellcoaching.com, the public site at nuwellcoaching.com, the intake assessment form, and any related communications (collectively, "the Services").

If you have questions about this policy, contact: jacobyaroshukofficial@gmail.com.

2. What we collect

Information you provide directly:

  • Identity and contact info: your name, email address, and any other contact details you submit
  • Intake assessment responses: training history, body composition goals, health history, current medications and supplements, lifestyle factors
  • Daily check-in data: body weight, sleep duration and quality, mood, energy, hunger, training notes, nutrition adherence, biofeedback signals
  • Weekly review responses: wins, struggles, questions for your coach
  • Training logs: exercises, sets, reps, weights, RPE, notes
  • Progress photos you upload
  • Bloodwork PDFs and the structured lab values extracted from them
  • Free-text notes you share at any point in the portal or via email
  • Any compounds, dosages, or protocols you record on your timeline sheet or share with your coach in the course of coaching

Information collected automatically:

  • Sign-in session cookies from our passwordless email-code login (no third-party tracking cookies)
  • Server logs of page requests, error reports, and basic performance telemetry, used for debugging and uptime monitoring

We do not use advertising trackers, social media pixels, or analytics products that profile you across the web.

3. How we use your information

Your data exists to deliver coaching. Specifically:

  • Generate your weekly check-in feedback, training adjustments, and nutrition guidance
  • Surface trends across your check-ins, training log, photos, and bloodwork so your coach can spot what's working and what isn't
  • Power the AI briefing feature that summarizes your status before your coach reviews it
  • Extract structured markers from bloodwork PDFs you upload (using Anthropic's Claude API — see processors below)
  • Maintain your personal portal and respond to your questions
  • Send transactional messages (login links, welcome email, occasional coaching communications)

We do not sell your data. We do not share it with third parties for their own marketing.

4. Where your data is stored and who processes it

Your data is hosted on the following infrastructure providers, each of which acts as a "processor". They store and move data on our behalf under their own privacy commitments:

  • Supabase, Inc. (database, authentication, file storage): US-West (Oregon) region; data encrypted at rest and in transit
  • Netlify, Inc. (web application hosting): global edge network; data encrypted in transit
  • Google LLC (Google Drive folders, Sheets, Apps Script): your coaching sheets and progress photos live in Drive folders owned by Jacob; access is restricted to Jacob's authenticated Google account
  • Anthropic, PBC (Claude API for bloodwork PDF extraction and coaching briefings): bloodwork PDFs and a structured summary of your check-ins/bloodwork are sent to Anthropic for processing; Anthropic does not train models on this data per their commercial terms
  • Sentry, Inc. (error tracking): anonymized error reports may include the URL path and stack trace; no body content (no check-in answers, no bloodwork values) is sent. On a small share of portal visits, and whenever an error happens, Sentry also records a replay of the page with all text, typed input, and images masked. It shows clicks and layout. It does not show what you typed or read.
  • Resend (email delivery): sends your login codes, welcome email, and portal emails. It handles your email address and the text of those emails.
  • Pushover (phone alerts to your coach): when you send a check-in or upload something, Jacob's phone gets a short alert. The alert carries your name and what you sent (for example, "weekly check-in"), never the answers or values themselves.
  • Formspree (web forms): receives the inquiry form and the intake assessment when you submit them and passes them to us by email.
  • Calendly (call booking): holds your name, email, the time you booked, and your phone number if you choose text reminders.
  • Stripe (payments): processes coaching payments. Your card details go to Stripe directly. We never see or store your full card number.
  • Cloudflare, Inc. (DNS, and the "are you a person" check on the portal login page): the check sees your browser and network details for that moment only. It does not receive your coaching data.

Each processor maintains its own security and privacy posture; we choose providers with reasonable industry-standard practices but cannot guarantee any third-party system. Their privacy policies are publicly available.

5. How long we keep your data

  • While you are an active coaching client: indefinitely, as part of your ongoing record
  • After you cancel coaching: we retain your data for up to twenty-four (24) months as a reference in case you return, then archive or delete it on request
  • Bloodwork PDFs and extracted markers: retained with the rest of your record on the same schedule
  • Anonymous server logs: retained for up to ninety (90) days for debugging
  • Backups: the database is backed up daily. Backups are encrypted and kept for up to fourteen (14) days, then overwritten. When your data is deleted, it drops out of the backups as they roll over within those fourteen (14) days. We do not restore deleted data from backups.

You can ask us to delete your data sooner. See Section 7.

6. Security

We use industry-standard practices: encryption at rest and in transit, passwordless email-code sign-in (no passwords stored), database-level row security so that one client cannot read another's data, restricted access to the service-role credentials, and source-controlled infrastructure.

No system is perfectly secure. If we become aware of a data breach affecting your information, we will notify you within seventy-two (72) hours of confirmation and describe the scope and our response.

7. Your rights

You have the right to:

  • Access your own data — log into the portal and read everything we store about you
  • Correct inaccurate data — edit through the portal or email us
  • Delete your data — email us and we will remove your records within thirty (30) days, subject to legitimate retention requirements (e.g., financial or tax records related to past payments). See Data deletion for exactly what is removed, what is kept, and how long it takes
  • Export your data — we will provide a machine-readable copy (typically JSON or CSV) within thirty (30) days
  • Withdraw consent to coaching at any time, ending the data relationship going forward

To exercise any right, email jacobyaroshukofficial@gmail.com.

If you are in a jurisdiction with specific privacy law (Canada's PIPEDA, the EU's GDPR, California's CCPA, etc.), you may have additional rights under that law. We will honor those when applicable.

8. Children

The Services are not directed at children under eighteen (18). We do not knowingly accept clients under 18. If we learn we have collected information about a person under 18, we will delete it.

9. Sensitive health and PED-related information

Because of the nature of physique coaching, clients often share information about anabolic compounds, performance-enhancing drug use, restrictive diets, and other topics that may be sensitive in their jurisdiction. We treat this information as confidential coaching data. We do not disclose it to third parties except as required by valid legal process. We will not voluntarily report client compound use to any regulatory or law enforcement body.

Note: Compound legality varies by country. You are responsible for understanding the laws that apply to you. Sharing information with us is not legal advice and does not protect you from your jurisdiction's laws — see the Terms of Service for more.

10. International transfers

Your data is stored in the United States (Oregon, primarily). If you are accessing the Services from outside the U.S., you are consenting to international transfer of your information to U.S.-based processors, which may have different privacy protections than your home jurisdiction.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top tells you when. If we make material changes — for example, adding a new processor that handles your data — we will notify active clients by email at least fourteen (14) days before the change takes effect.

12. Contact

For privacy questions, data requests, or anything else covered in this policy:

Jacob Yaroshuk — Nuwell Coaching Email: jacobyaroshukofficial@gmail.com Site: nuwellcoaching.com