Privacy Policy
Caleb — a personal coaching app by Caleb Foundry
Last updated: June 3, 2026 Effective date: June 3, 2026
This Privacy Policy explains what personal information we collect when you use the Caleb mobile app and the website at calebfoundry.com (together, “Caleb” or the “Service”), why we collect it, who we share it with, and the rights you have. It is part of, and should be read with, our Terms and Conditions.
Caleb is operated by Caleb Foundry, an individual sole proprietor operating under the trade name “Caleb Foundry,” based in Honduras. For the purpose of data-protection laws, Caleb Foundry is the data controller. You can contact us at any time at calebfoundry@gmail.com.
Caleb is for adults only — you must be 18 or older to use it. We do not knowingly collect data from anyone under 18. See Section 9.
A note on health-related data. Some of what you share with Caleb — your body weight, injuries, physical limitations, and how you feel during training — relates to your health and physical condition. We treat this as sensitive information and describe below how it is used and protected. Caleb is a fitness tool, not a medical service, and this information is used to generate training suggestions, not to diagnose or treat any condition.
1. The short version
- We collect the information you give us to coach you (profile, fitness data, training history, and your messages to the coach), plus basic account and analytics data.
- To generate your coaching, relevant parts of your information are sent to our AI provider, Anthropic, to produce the coach’s responses.
- We use Supabase to store your data, Anthropic to generate coaching, PostHog for product analytics, and Apple / Google for app distribution and subscription billing. We do not see or store your payment-card details.
- We do not sell your personal information, and we do not use it for third-party advertising.
- You can access, correct, and delete your data, and you can contact us at calebfoundry@gmail.com to exercise your rights.
2. Information we collect
2.1 Information you give us
- Account information: your name (or chosen name) and the email address or sign-in identifier used to create your account.
- Profile information: age, body weight, and any injuries or physical limitations you choose to describe (free text), and your training goals.
- Fitness inputs: your equipment inventory; self-reported baselines (for example, maximum push-ups or pull-ups, recent run or ruck); your coach-tone preference; and your training availability.
- Session and debrief data: your full training history, which sessions you completed, and your debrief feedback after each session — perceived exertion (RPE), energy, any pain or movement flags, and free-text notes.
- Messages to the coach: the free-text messages you send to the AI coach and the coaching replies generated for you.
- Accountability data: streak counts and missed-session history.
- Notify-me email: if you join our pre-launch or launch notification list, the email address you provide for that purpose.
- Support communications: anything you send us by email.
2.2 Information collected automatically
- Usage and analytics data: how you interact with the app — screens viewed, features used, events such as completing a debrief — collected through PostHog to help us understand and improve the Service.
- Device and technical data: basic technical information such as device type, operating-system version, app version, language, and similar diagnostic data.
2.3 Information from the app stores
When you subscribe, Apple or Google processes your payment and shares with us limited information needed to manage your subscription (for example, that a subscription is active, the plan, and renewal/cancellation status). We do not receive your full payment-card number.
3. How we use your information
We use your information to:
- provide the Service — create your account, generate Mission Briefs and coach replies, run the debrief-and-adjust loop, track phases, goals, and streaks;
- personalize your coaching — tailor sessions to your profile, equipment, baselines, limitations, history, and stated goals;
- operate AI coaching — send relevant parts of your information to our AI provider to generate responses (Section 5);
- manage your subscription — confirm subscription status received from Apple or Google;
- communicate with you — respond to support requests, send service-related messages, and (if you opted in) send launch-notification emails;
- improve and secure the Service — analyze usage trends, debug, prevent fraud and abuse, and keep the Service safe and reliable;
- comply with the law — meet legal obligations and enforce our Terms.
We do not use your personal information to serve you third-party advertising, and we do not sell it.
4. Legal bases (for users in the EU/EEA, UK, and similar regimes)
Where data-protection law requires a legal basis, we rely on:
- Performance of a contract — to provide the Service you signed up for (most processing of your profile, fitness inputs, sessions, and coach messages).
- Consent — for the launch-notification email list, for any analytics where consent is required, and for processing of health-related/sensitive data where consent is the applicable basis (see Section 4.1). You may withdraw consent at any time.
- Legitimate interests — to secure, debug, and improve the Service and prevent abuse, balanced against your rights.
- Legal obligation — where we must process data to comply with the law.
4.1 Sensitive / health-related data
Some information you provide (body weight, injuries, physical limitations, pain flags) relates to your health. Where this is treated as a special category of personal data under applicable law, we process it on the basis of your explicit consent, given when you choose to provide it in order to receive coaching, and solely to generate your training. You can withdraw this consent by removing the information or by deleting your account; doing so may limit how well the coach can adapt to you.
5. AI processing — how coaching is generated
To generate your sessions and coach replies, relevant parts of your information — which may include your profile, injuries and limitations, training history, debrief notes, and chat messages — are transmitted to Anthropic, PBC (“Anthropic”), the provider of the AI model that powers the coach, and processed on its infrastructure to produce a response that is returned to you.
Anthropic acts as our processor/subprocessor for this purpose. We use Anthropic’s API under terms intended for business use; under Anthropic’s commercial API terms, inputs and outputs are not used to train its models and are retained only as needed to provide the service and meet legal and safety obligations. We send only what is reasonably needed to generate useful coaching.
AI-generated coaching is general information and may be inaccurate or unsuitable; it is not professional or medical advice. See our Terms (Sections 8–9).
6. Who we share information with
We share your information only with the service providers needed to run Caleb, and only as needed:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Backend database and account authentication (data hosting) | Account, profile, fitness inputs, sessions, debriefs, messages |
| Anthropic | Generating AI coaching responses | Relevant profile, limitations, history, debrief, and chat content (Section 5) |
| PostHog | Product analytics to understand and improve the app | Usage/analytics and device data; pseudonymous identifiers |
| Apple / Google | App distribution and subscription billing | Subscription and store account data they process as billing provider |
These providers are authorized to use your information only to perform services for us, not for their own purposes. We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a transfer of the Service (in which case we will require the recipient to honor this Policy). We do not sell your personal information and we do not share it for cross-context behavioral advertising.
7. International data transfers
We operate from Honduras, and our providers (including Supabase, Anthropic, and PostHog) may store and process data on servers located in the United States or other countries. This means your information may be transferred to, and processed in, countries whose data-protection laws differ from those of your own country.
Where we transfer personal data of users in the EU/EEA, the UK, or other regions that restrict international transfers, we rely on appropriate safeguards where required — such as the European Commission’s Standard Contractual Clauses (or the UK equivalent) with the relevant provider — or another lawful transfer mechanism. You may contact us for more information about these safeguards.
8. Data retention
We keep your personal information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or anonymize your personal information within a reasonable period, except where we need to retain certain data to comply with legal obligations, resolve disputes, or enforce our agreements, and except for limited copies that may persist in routine backups for a short period before being overwritten. Analytics data may be retained in aggregated or pseudonymized form. If you join only the notify-me email list without an account, we keep that email until you unsubscribe or ask us to remove it.
9. Children
Caleb is intended only for adults. You must be 18 or older to use the Service. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from someone under 18, we will delete it and terminate the account. If you believe a minor has provided us information, contact us at calebfoundry@gmail.com.
10. Security
We take reasonable technical and organizational measures to protect your information, including access controls and encryption in transit, and we rely on the security practices of established providers such as Supabase. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your login credentials and device secure.
11. Your rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Correction — correct inaccurate or incomplete information (much of this you can edit directly in the app).
- Deletion — request deletion of your information, or delete your account.
- Portability — request your information in a portable format.
- Objection / restriction — object to or ask us to restrict certain processing.
- Withdraw consent — withdraw consent where we rely on it (for example, the email list or sensitive-data processing), without affecting processing already carried out.
- Lodge a complaint — complain to your local data-protection authority.
To exercise any of these rights, email calebfoundry@gmail.com. We will respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.
11.1 For California residents (CCPA/CPRA)
If you are a California resident, you have the rights to know, access, correct, and delete the personal information we collect, and to limit the use of sensitive personal information. The categories we collect are described in Section 2; the purposes, in Section 3; and the providers we disclose to, in Section 6. We do not sell your personal information and we do not share it for cross-context behavioral advertising, including of consumers we know to be minors. You may exercise your rights, or use an authorized agent to do so, by emailing calebfoundry@gmail.com, and we will not discriminate against you for doing so.
11.2 For users in the EU/EEA and the UK (GDPR / UK GDPR)
The legal bases for our processing are in Section 4, international transfers in Section 7, and retention in Section 8. The controller is Caleb Foundry (contact: calebfoundry@gmail.com). You have the rights listed above and the right to lodge a complaint with your national supervisory authority.
11.3 For users in Mexico, Colombia, and other Latin American countries
If you are in Mexico, you have the “ARCO” rights — Access, Rectification, Cancellation, and Opposition — and the right to limit the use or disclosure of your data, under Mexico’s federal data-protection law. If you are in Colombia, you have the rights to know, update, rectify, and delete your data and to revoke any authorization, under Law 1581 of 2012. In both countries, processing of sensitive data (including health-related data) is based on your consent. To exercise these rights, or to revoke consent, email calebfoundry@gmail.com.
12. Third-party links and services
Caleb may reference or link to third-party services (such as the app stores). We are not responsible for the privacy practices of those services; their own policies apply.
13. Changes to this Policy
We may update this Privacy Policy from time to time. If we make a material change, we will take reasonable steps to notify you, such as an in-app notice or by updating the “Last updated” date above. Continuing to use Caleb after a change takes effect means you accept the updated Policy.
14. Contact us
If you have questions, requests, or complaints about this Policy or your information:
Caleb Foundry Email: calebfoundry@gmail.com Web: calebfoundry.com
This Privacy Policy is provided for the operation of the Caleb app and does not constitute legal advice. It has not been reviewed by a licensed attorney. Before public launch you should have it reviewed by a lawyer qualified in the relevant jurisdictions, and confirm that the data flows it describes (Supabase, Anthropic, PostHog, Apple/Google) match your final implementation — especially the App Store and Google Play data-disclosure forms, which must be consistent with this Policy.