What we collect
If you use Baseline or Folio, this is what we have:
- Account info. Your email address. Sign-in is passwordless (a one-time link), so we never have a password to lose.
- Health and fitness data you give us. Weight, body measurements, training history, logged meals and photos of meals, goals, any injuries or conditions you mention, and answers to the intake questions used to build your plan.
- Data from services you choose to connect. If you link Strava or Whoop, we receive activity or recovery data from them through their own sign-in process. Nothing is pulled from either unless you explicitly connect it, and you can disconnect at any time from your settings.
- Basic usage data. Which pages and features you use, device and browser type, and IP address — standard web operation and security information, not used to build an advertising profile.
- For Folio specifically: the client information a coach enters. A coach's own clients' names, contact details, session and package records, and notes. That information belongs to the coach's relationship with their client — we store and process it on the coach's behalf, the same way any practice-management software would, rather than treating it as ours to use independently. See "If you're a coach" below.
- For Folio specifically: subscription and billing status. Whether a coach's account is on trial or an active subscription, and the renewal date. We don't collect or store card numbers ourselves — that goes directly to Stripe. See "Folio subscription & billing" below.
How we use it
- To build and update your training and nutrition plan, including sending relevant parts of your intake and check-in history to Anthropic's Claude API so it can generate and explain your plan. Anthropic's own terms govern how they handle data sent through their API.
- To send you email — sign-in links, a saved copy of your blueprint, and occasional re-engagement notes if you've gone quiet. All transactional email is sent through Resend.
- To sync activity or recovery data from Strava or Whoop, only if you've connected them.
- To understand, in aggregate, how the product is used and where it breaks, so we can improve it.
- To operate the coach directory and referral feature, if you choose to use it — see the directory-specific note below.
What we don't do
- We do not sell your data, to anyone, ever.
- We do not use your health or fitness data for advertising, yours or anyone else's.
- We do not share your information with a coach unless you've actually connected with one (through a join code, an invite, or the coach directory) — browsing or building a blueprint on Baseline alone is not visible to any trainer.
Text messages
If your coach texts you through Folio, we use your phone number only to deliver that message and your replies — we do not sell or share your mobile number with any third party for marketing purposes, and it's never used for anything outside the coaching relationship you're already in. Message frequency depends on how often your coach reaches out; message and data rates may apply from your carrier. Reply STOP at any time to stop receiving texts, or HELP for help.
Who else sees it
A short, complete list of the outside services in the loop, and why each one is there:
- Netlify — hosts the app and the database everything above lives in.
- Anthropic — generates your plan and check-in insights from the data described above.
- Resend — delivers the emails described above.
- Twilio — delivers the text messages described above, if your coach texts you. Twilio sees your phone number and the message content solely to route the message; it doesn't use either for its own purposes.
- Stripe — processes Folio's own subscription payments (coaches paying us, not their clients). Stripe sees a coach's payment details and billing email; it doesn't see anything about Baseline users or a coach's client data.
- Strava / Whoop — only if you connect your account to either.
None of these are permitted to use your data for their own purposes beyond providing the service we use them for.
If you're a coach (Folio)
The client records you build in Folio are yours to manage as part of your own coaching practice. You're responsible for getting whatever consent your own clients expect before entering their information, and for your own compliance with any rules that apply to you as a fitness professional handling client health data. We act as the tool and the storage layer for that relationship, not as an independent party using your clients' data for anything else.
Folio subscription & billing
Folio is a paid subscription, billed to the coach. Payment is handled entirely by Stripe — when you subscribe, you enter your card details on a Stripe-hosted page, not on ours. We never receive or store your full card number. What we do keep on our side is your subscription status (trial, active, past due, canceled) and renewal date, so Folio knows whether to let you in. Managing or canceling your subscription happens through a Stripe-hosted billing portal linked from Folio's settings.
The coach directory and referrals
If you're a coach and opt into the public directory, your name, business name, specialty, and bio become visible to anyone who visits it — nothing about your existing client roster does. If a Baseline user reaches out to you through it, their name, email, and whatever they wrote get added to your Folio as a new prospect, and we send you a notification email so you can follow up directly.
Cookies and local storage
We use your browser's local storage to keep you signed in, remember your light/dark preference, and (for coaches) hold some page state between visits. None of it is used for third-party advertising tracking, and none of it leaves your device except what's needed to keep your session working.
How long we keep it
We keep your data as long as your account is active. You can ask us to access, correct, or delete your personal information at any time by emailing us — see below. Some records may be kept in de-identified or aggregate form as part of a coach's business history (for example, so a coach can still see how long a past client trained with them), even after a deletion request for the identifying details.
Not for anyone under 18
Baseline and Folio are built for adults making their own training and nutrition decisions. Neither product is intended for anyone under 18, and we don't knowingly collect information from anyone under that age.
Security
We take reasonable steps to protect your information, including passwordless sign-in (nothing to phish or leak in a breach) and encrypted connections throughout. No system is 100% secure, and we can't guarantee absolute protection against every possible attack.
Changes to this policy
If this changes in a way that matters, we'll update the date at the top and, for any significant change, let you know directly.
Contact
Questions, access requests, or deletion requests all go to the same place: tj@hibaseline.com.