Privacy Policy

1. Introduction

averagethamizhan ("we," "us," "our," or "Coach") is committed to protecting your privacy and ensuring you have a positive experience on our website and services. This Privacy Policy explains what information we collect, how we use it, and the steps we take to protect it.

This Privacy Policy applies to all information collected through our website, fitness coaching platform, apps, and related services. By using our services, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

We collect information in several ways to provide and improve our fitness coaching services:

2.1 Information You Provide Directly

• Account Registration: When you sign up, we collect your name, email address, phone number (WhatsApp), age, gender, and fitness goals
• Fitness Information: You may provide detailed fitness history, current fitness level, dietary preferences, medical conditions, injuries, and specific goals
• Progress Tracking: Weight, body measurements, fitness metrics, performance data, and progress photos
• Communications: Messages, feedback, and inquiries you send through our platform
• Payment Information: Payment details processed through Stripe (credit card, billing address). We do not directly store card data

2.2 Information Collected Automatically

• Analytics: Google Analytics 4 (GA4) tracks pages visited, time spent, user interactions, and browsing behavior
• Tracking Pixels: Meta Pixel (Facebook) and Microsoft Clarity are embedded on our website to track conversions, user behavior, and heatmaps
• UTM Parameters: We use UTM tracking codes to attribute traffic sources and measure campaign effectiveness from ads, emails, and social media
• Session Recordings: Microsoft Clarity records session replays and heatmaps showing how you interact with our site (clicks, scrolls, form entries)
• Device Information: Browser type, operating system, device type, IP address, and location data
• Cookies: Small data files stored on your device for session management, preferences, and tracking (see Cookies section below)

2.3 Information from Third Parties

• Payment Processor: Stripe provides payment confirmation and billing data
• Social Media: If you use social login, we may receive profile information from Facebook, Instagram, or Google
• Referral Sources: Information about how you found us (ads, search engines, social media, referral links)

3. Data Collection Summary Table

Data Category	Collection Method	Purpose
Personal (name, email, phone)	User registration	Account creation, communication, support
Fitness data (goals, metrics, photos)	User submission	Personalized coaching, progress tracking
Payment information	Stripe integration	Billing and subscription management
Browsing behavior	GA4, Meta Pixel, Microsoft Clarity	Analytics, improvement, marketing attribution
Session behavior	Clarity heatmaps/recordings	UX optimization, user experience improvement
Location/Device data	Automatic collection	Platform optimization, fraud prevention

4. How We Use Your Information

We use the information we collect for legitimate business purposes:

• Service Delivery: Creating and managing your account, delivering fitness coaching, creating personalized workout plans, and tracking progress
• Communication: Sending coaching updates, progress reports, billing notifications, and customer support responses
• Marketing & Analytics: Understanding user behavior, measuring campaign effectiveness, improving website functionality, and personalizing your experience
• Performance Improvement: Analyzing how users interact with our platform to optimize features, design, and content
• Billing & Payment: Processing subscription payments, managing billing cycles, and preventing fraud
• Legal Compliance: Fulfilling legal obligations, responding to law enforcement requests, and protecting our rights
• Marketing Campaigns: Creating targeted ads based on browsing history, engagement, and interests (via Meta and Google)
• Anonymized Data: Using aggregated, anonymized data for research and improvement (cannot identify you personally)

5. Third-Party Services & Data Sharing

We partner with trusted third-party services to deliver our platform and marketing efforts. These services may access certain information:

5.1 Payment Processing

Stripe (stripe.com): Our payment processor handles all billing and subscription management. We do not directly store your credit card information—Stripe securely encrypts and manages it. Stripe complies with PCI DSS (Payment Card Industry Data Security Standard) and stores minimal information to fulfill billing obligations.

5.2 Analytics & Tracking

• Google Analytics 4: Tracks user behavior, traffic sources, and engagement metrics. Google's Privacy Policy governs this data: https://policies.google.com/privacy
• Meta Pixel (Facebook): Collects conversion data and user behavior for Facebook/Instagram ad targeting and retargeting. Meta Privacy Policy: https://www.facebook.com/privacy/explanation
• Microsoft Clarity: Records session replays and heatmaps to understand user experience. Privacy Policy: https://clarity.microsoft.com/

5.3 Email & Communication (if applicable)

If we use email marketing platforms, they may process your email address and engagement data per their privacy policies.

6. Cookies & Tracking Technologies

Cookies are small files stored on your device that help us provide a better experience. We use:

• Essential Cookies: Required for login, security, and platform functionality
• Analytics Cookies: Track user behavior for improvement (GA4, Clarity)
• Marketing Cookies: Enable retargeting ads on other platforms (Meta Pixel)
• Preference Cookies: Remember your settings and choices

You can control cookies through your browser settings. Disabling cookies may limit site functionality. Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Disable cookies entirely

7. UTM Tracking & Marketing Attribution

We use UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content) in links to track how you arrived at our platform. This information helps us:

• Measure marketing campaign effectiveness
• Identify which ads or promotions drive conversions
• Optimize our marketing spend
• Improve targeting for future campaigns

UTM data is associated with your session and stored alongside GA4 analytics.

8. Data Retention

We retain different types of data for different periods based on necessity and legal requirements:

• Account Information: Retained while your account is active and for 1 year after account deletion or termination
• Fitness Data & Progress: Retained for the duration of your coaching relationship plus 1 year after cancellation
• Payment Records: Retained for 7 years for tax and legal compliance (as required by law)
• Analytics Data: GA4 automatically retains data for 14 months; older data is automatically deleted
• Session Recordings: Microsoft Clarity retains recordings for 30 days by default
• Communications: Retained for customer service purposes and legal protection, then securely deleted

9. User Rights & Data Access

You have the following rights regarding your information:

9.1 Right to Access

You can request a copy of all personal data we hold about you. Contact us at averagethamizhan@gmail.com to submit an access request.

9.2 Right to Deletion

You can request deletion of your account and associated personal data. We will delete your data within 30 days, except where legally required to retain it (e.g., tax records, fraud prevention).

9.3 Right to Correction

You can update or correct your account information at any time through your account settings or by contacting us.

9.4 Right to Opt-Out of Marketing

You can unsubscribe from marketing emails by clicking the "unsubscribe" link in emails or updating preferences in your account settings. You can also opt-out of Meta Pixel and GA4 tracking through your browser settings or ad preference tools.

9.5 Right to Data Portability

You can request your data in a portable, machine-readable format. We will provide this within 30 days of request.

10. GDPR Compliance

While averagethamizhan is based in India, we respect the rights of users in the European Union under the General Data Protection Regulation (GDPR). For EU users:

• We collect data based on your consent or legitimate interests
• You have the right to access, delete, and port your data
• You can withdraw consent at any time
• We do not sell your data to third parties
• We implement data protection safeguards and conduct impact assessments
• You have the right to lodge a complaint with your local data protection authority

Our Data Protection Officer (or designated contact) can address GDPR inquiries. Please contact us at averagethamizhan@gmail.com.

11. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws different from your home country. By using our services, you consent to such transfers. We implement safeguards such as:

• Standard Contractual Clauses (SCCs) with third-party processors
• Data encryption in transit and at rest
• Secure authentication mechanisms

12. Data Security

We implement industry-standard security measures to protect your data from unauthorized access, alteration, or loss:

• SSL/TLS encryption for all data in transit
• Secure authentication (passwords, 2FA if available)
• Regular security audits and vulnerability testing
• Limited access to personal data by authorized personnel only
• Secure payment processing via Stripe (PCI DSS compliant)

However, no security measure is 100% foolproof. We cannot guarantee absolute security, and you use our services at your own risk. Please report any security concerns to averagethamizhan@gmail.com.

13. Children's Privacy

Our services are not directed to users under 18 years of age. We do not knowingly collect information from minors. If we become aware that we have collected data from someone under 18, we will delete it immediately. Parents or guardians who believe we have collected information about a minor should contact us at averagethamizhan@gmail.com.

14. Third-Party Links

Our website may contain links to third-party websites and services (social media, payment processors, etc.). We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party site before providing your information.

15. Marketing & Promotional Communications

We may send you marketing emails about new services, promotions, fitness tips, and updates. You can opt-out by:

• Clicking "unsubscribe" in email footer
• Updating your notification preferences in your account
• Emailing us at averagethamizhan@gmail.com with "unsubscribe" in the subject

Opting out of marketing emails will not affect transactional messages (billing, account alerts, coaching updates).

16. Data Breach Notification

In the event of a data breach or unauthorized access to your personal information, we will:

• Investigate the breach promptly
• Notify affected users via email without unreasonable delay (typically within 30 days)
• Provide information about the breach and steps you can take to protect yourself
• Comply with legal notification requirements in your jurisdiction

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending a notification email for significant changes

Your continued use of our services after changes constitute your acceptance of the updated policy.

18. Contact Us

For questions about this Privacy Policy, to exercise your rights, to report security issues, or to inquire about your personal data, please contact:

Email: averagethamizhan@gmail.com

We will respond to inquiries within 14 days. For GDPR-related requests, we will respond within 30 days.

19. California Consumer Privacy Act (CCPA) - Optional Disclosure

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). You have the right to:

• Know what personal data is collected, used, and shared
• Delete personal data we have collected
• Opt-out of the sale or sharing of personal data
• Non-discrimination for exercising your rights

We do not sell or share personal information for marketing purposes as defined by CCPA. Contact us to exercise these rights.

20. Your Privacy Matters

Your privacy is important to us. We are committed to being transparent about our data practices and giving you control over your information. If you have any concerns or questions, please do not hesitate to reach out.