Who we are
Phab Phit is the women's fitness and nutrition coaching practice of Phelicia Gomez, based in Corpus Christi, Texas, serving the Coastal Bend in person and clients anywhere online. In this policy "we" and "us" mean Phab Phit, and "you" means anyone who uses phab.fitness or the client app.
Questions about anything here go to hello@phab.fitness.
What we collect
If you only browse the site
Almost nothing. We run no analytics, no advertising pixels and no third-party trackers. There is no Google Analytics on this site, nothing follows you to other sites, and there is no cookie banner because there are no tracking cookies to ask you about. Our host keeps short-lived server logs, including IP address, for security and reliability.
If you contact us or join the newsletter
The name, email address and whatever you write in the message. The newsletter is separate from coaching and you can leave it at any time using the unsubscribe link in any email.
If you become a coaching client
The client app is where the sensitive material lives. Depending on your plan and what you choose to record, that can include:
- Account: name, email address, notification preferences, and sign-in records.
- Coaching profile: your goal, height, starting and goal weight, injuries, dietary notes, and Phelicia's coaching notes about you.
- Body measurements: weight, waist, hips, chest, arm and thigh, over time.
- Progress photos, if and only if you upload them. They are optional and coaching works without them.
- Training and habit data: workouts completed, sets, reps and weights logged, and daily habit ticks for water, protein, steps, sleep and supplements.
- Weekly check-ins: your answers about energy, sleep, what went well and what got in the way, plus Phelicia's replies.
- Nutrition: your macro targets and meal or grocery selections.
- Billing: your subscription status and the customer reference our payment processor assigns you.
Some of this is health information. We treat it that way. Note that Phab Phit is a coaching practice, not a healthcare provider, so this data is not medical records and we are not a HIPAA covered entity. Coaching is not medical advice.
Card details, which we never see
Payments are processed by Stripe. Your card number is entered on Stripe's systems and never reaches ours. We can see that a payment succeeded or failed and which plan you are on. We cannot see your card.
How we use it
- To coach you: build your programme, adjust it, and reply to check-ins.
- To run your account, sign you in, and send transactional email.
- To take payment and manage your subscription.
- To send the newsletter, if you asked for it.
- To keep the service secure and working.
We do not sell your personal information, and we do not share it for advertising. We do not use your data to train AI models. Your progress photos and measurements are never used in marketing, testimonials or social posts unless you have given separate, explicit, written permission for a specific image, which you can withdraw.
Who else touches it
We keep the list of companies involved deliberately short. Each is a service provider acting on our instructions, not a party we sell data to.
| Provider | What for | What they get |
|---|---|---|
| Stripe | Payments and subscriptions | Your name, email and card details, which they hold, not us |
| Neon | Database hosting | Your account and coaching data, encrypted at rest |
| Cloudflare R2 | Progress photo storage | The photo files, in a private bucket |
| Resend | Sending email | Your email address and the message content |
| Vercel | Website hosting | Request logs, including IP address |
We may also disclose information if the law requires it, or to protect someone's safety. If Phab Phit is ever sold or merged, your data may transfer with it, and we will tell you before that happens.
How progress photos are protected
These deserve their own section because they are the most sensitive thing here.
- The storage bucket is private. There is no public URL for any photo.
- Every time a photo is displayed, the app checks you are allowed to see it and then mints a signed link that expires within minutes.
- The database stores only a reference to the file, never the image, so a leaked database row is not a leaked photo.
- Only you and Phelicia can see your photos. No other client can.
- They are optional. You can delete any of them, at any time.
Cookies
We use one cookie, phab_session, and only after you sign in. It keeps you signed in and does nothing else. It is strictly necessary, so there is nothing to opt into or out of. Signing out clears it.
Sign-in links and session records are stored only as hashed values, so even a copy of our database cannot be used to log in as you.
How long we keep it
- Active clients: for as long as you are coaching with us, because the history is the point.
- After you cancel: we keep your coaching data for 12 months, in case you come back and want your history. Ask us and we will delete it sooner.
- Progress photos: deleted within 30 days of your request, or with the rest of your account.
- Payment records: kept as long as tax and accounting law requires, typically seven years. This is the one category we cannot delete on request.
- Newsletter: until you unsubscribe.
Your rights
Wherever you live, we will honour these. Texas residents have them under the Texas Data Privacy and Security Act, California residents under the CCPA, and residents of the EEA and UK under the GDPR, but we are not going to make you prove which one applies to you.
- Get a copy. The client app has a built-in export, so you can do this yourself without asking.
- Correct anything that is wrong.
- Delete your account and its data, subject to the payment-record exception above.
- Withdraw consent for progress photos while continuing to coach.
- Object to a use you are not comfortable with.
- Not be penalised for exercising any of this. Your coaching does not change because you asked.
Email hello@phab.fitness and we will confirm within 10 days and complete it within 45. If a request is genuinely complicated we may take another 45 days, and we will tell you before the first 45 are up. We may need to check you are who you say you are before handing over coaching data.
We do not sell personal information or share it for cross-context behavioural advertising, so there is no "Do Not Sell or Share" link to give you. There is nothing to opt out of.
Under 18
Coaching is for adults. We do not knowingly collect information from anyone under 18. If a minor has been signed up, contact us and we will delete the account.
Where your data lives
Our providers operate primarily in the United States. If you are contacting us from outside the US, your information will be processed there.
Changes
If we change this policy we will update the date at the top. If a change materially affects how we handle coaching data, we will email active clients rather than quietly editing the page.
Contact
hello@phab.fitness — or see our Terms of Service.