CompositeATHLETE

Privacy Policy

Effective Date: July 5, 2026 · Updated October 15, 2026 (book waitlists and advertising measurement; partner program and referral cookies)

This Privacy Policy explains how Composite Athlete, a brand owned and operated by Harvey Brands LLC(“we,” “us,” or “our”) collects, uses, shares, and protects information when you use our website, applications, and services (the “Platform”). By using the Platform you agree to this Policy. It should be read alongside our Terms & Conditions.

1. Information we collect

  • Account information - your name, email address, and a securely hashed password.
  • Health & fitness information you provide - onboarding and check-in responses (goals, training history, a pre-participation health screen, injury/pain reports), body measurements, heart-rate zones, and your logged training and nutrition. This is sensitive information (see Section 3).
  • Media you upload - progress photos, form-check videos, and any medical-clearance documents you choose to share.
  • Messages - communications you send to a coach or to us through the Platform.
  • Payment information - subscriptions are processed by Stripe. We do not collect or store your full card number; Stripe handles card data and shares only limited billing status with us.
  • Usage & technical data - information such as IP address, device/browser, and activity on the Platform, used to operate and secure the service.
  • Website analytics - we measure site traffic with a self-hosted, privacy-focused analytics tool (Umami) running on our own servers. It sets no cookies, collects aggregated and anonymized page/interaction data only, does not identify individual visitors, and shares nothing with third parties.
  • Cookies - we use cookies that the Platform needs to work (for example, to keep you signed in), the referral cookies described below, and, on the workbook store and book pages only, the Meta Pixel cookies described in the next item. We do not use cookies for anonymous analytics.
  • Waitlists - if you join the waitlist for a book that is not out yet, we keep your email address, your first name if you give it, which page you signed up on, the campaign details of the link you arrived from (such as utm codes or an ad click ID), the site that referred you, your browser details and when you signed up. We use them to email you when the book is available and to measure which pages and ads lead to sign-ups. We do not send other marketing to that address. To be removed from a waitlist, contact us (Section 12).
  • Advertising measurement - our workbook store pages (/programs) and book pages (/books) use the Meta Pixel, and when you buy a workbook or join a book waitlist we send Meta a purchase or sign-up event from our server (the Meta Conversions API). This tells us which Facebook and Instagram ads lead to sales and sign-ups. Meta may set cookies on those pages and receive your IP address, browser details, the products you view or buy and their price, and a one-way hashed copy of your checkout or waitlist email. It is not used on the training app, coaching or health pages, and we never send Meta any health or fitness information. You can limit ad tracking in your Facebook and Instagram ad settings or by blocking third-party cookies in your browser.

Campaign codes. Campaign codes in a link may be kept in session storage for the current browser tab and attached to an account created in that tab. We use these codes to evaluate acquisition channels.

Referral cookies. When you arrive through a link from one of our partners (a link with ?ref= or ?via=, or a partner page at /with/) or from an affiliate network we work with (Awin), we set first-party cookies that record which partner or network link referred you and when you clicked it: ca_aff for our own partner program (kept for 60 days), ca_awc for Awin and ca_imreffor impact (each kept for that network’s referral window, 60 days unless we state otherwise). These cookies cannot be read by scripts on the page, and we use them only to credit the right partner when you buy. If you create an account while one is set, the referring partner is saved on your account, so a purchase within 60 days of the click, on any device, is still credited to them. You can delete these cookies in your browser at any time; doing so does not change your price.

We do not give referral partners access to your account, training, nutrition or health data. A partner sees that a sale they referred happened, its amount and its status, so they can be paid. These records are separate from anonymous website analytics.

2. How we use your information

  • To provide the Platform - generate and adapt your training and nutrition programs, deliver sessions, and enable coach–athlete coaching.
  • To connect athletes and coaches you have chosen to work with, subject to your consent (see Section 4).
  • To operate safety features - for example, surfacing a pain or health flag to your coach and prompting you to seek professional care.
  • To process payments and manage subscriptions (via Stripe).
  • To communicate with you - account, session, and support emails.
  • To secure, maintain, and improve the Platform and to comply with legal obligations.

3. Health & fitness data

The health and fitness information you provide is used to personalize your programming and to power conservative safety responses. It is not medical advice, diagnosis, or treatment (see our Terms). We restrict access to this data (Section 6), and coaches can see it only within the scope you consent to.

4. How we share information

  • With coaches - only after you request and consent to a coaching connection, and only within the sharing scope you set. You can revoke access, which ends the coach’s ability to see your data going forward.
  • With service providers that operate the Platform on our behalf: Stripe (payments), Mailgun (transactional email), Meta (advertising measurement on the store and book pages - see Section 1), an AI/LLM provider (to generate programming and draft coach feedback - see Section 5), Tolt (our partner program platform: when a purchase is credited to a partner, we send Tolt the buyer’s email address, an account reference, the amount and product, and which partner is credited, so the partner can be paid; partners’ own details are covered in Section 10), Awin (an affiliate network: for one-time purchases we send Awin the order reference, amount, currency, any discount code and Awin’s own click reference, never your name or email address), and our hosting provider (Hetzner). These providers process data only to provide their service to us.
  • For legal reasons - to comply with law, enforce our Terms, or protect the rights, safety, and property of our users or the Company.
  • We do not sell your personal information.

5. AI processing

We use a third-party large-language-model provider to generate training programs and draft coach feedback. To do this, relevant program inputs (for example, your sport, goals, and constraints) are sent to that provider’s API for processing. We do not use your data to train our own models, and we do not authorize the provider to train on it. AI-generated programming is educational and is not a substitute for professional medical or nutritional advice.

6. Data security

We host on a dedicated, firewalled server with a self-hosted database that enforces row-level securityand least-privilege access, so each account’s data is isolated at the database layer. Traffic is served over TLS/HTTPS, and backups are encrypted and stored off-site. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

7. Data retention

We retain your information for as long as your account is active and as needed to provide the Platform, comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal data (see Section 8); some records may be retained where the law requires.

8. Your rights and choices

  • Access, correct, or update much of your information from your account.
  • Revoke a coaching connection to stop future sharing of your data with that coach.
  • Request a copy or deletion of your personal data by contacting us (Section 12). Depending on where you live, you may have additional rights under applicable privacy laws.

9. Children’s privacy

The Platform is intended for adults. You must be at least 18 to create an account; individuals under 18 may use the Platform only with the consent and supervision of a parent or legal guardian. We do not knowingly collect personal information from children under 13.

10. Partner program applicants and partners

If you apply to our partner program, or become a partner, this section also applies to you.

  • What we collect - your name, email address, the link name you choose, where you post, coach or meet, what you tell us about your audience (including its size, if you give it), any message you send, when you agreed to the partner terms and rules and which versions, and, if you came from one of our invitations, a reference to that invitation. Once you are a partner we also keep your codes, the sales credited to you and our reviews of your public posts.
  • How we use it - to review your application, to email you about it, to run the partner program (your links, codes, partner page and free access), to credit and pay commissions, and to check that partner posts follow the disclosure rules. If you came from one of our invitations, we use your application to stop sending you follow-up invitation emails.
  • Who sees it - the Composite Athlete team members who run the program. When you are approved we create your partner account at Tolt, our partner program platform, with your name, email address and link name. Payout and tax details (such as a W-9 or W-8 form) are collected by Tolt in its partner portal, not by us. Emails are sent through Mailgun. If you choose to have a partner page, your name and the plans you recommend are public on it.
  • How long we keep it - for as long as you are a partner and afterwards for as long as we need it for tax, accounting and payment records and to resolve disputes. We keep applications that were not approved so we can recognize a re-application, unless you ask us to delete yours.
  • Your choices - you can ask for a copy of your application or partner record, correct it, or ask us to delete it by contacting us (Section 12). Records we must keep for tax or legal reasons are kept as the law requires.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the “Effective Date” above. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

12. Contact us

Questions about this Policy or your data? Email support@compositeathlete.com or write to us at 2425 Grand Pine Ln, Clemmons, NC 27012.