Privacy Policy

Who we are

Jack Thompson, trading as Jax Thompson Coaching / EVOLVE, is a sole trader based in the United Kingdom and is the data controller for the information described on this page. You can reach us at any time at jaxthompson1997@gmail.com.

This policy covers our public website, our coaching app, our ads and lead forms on Facebook and Instagram, and the emails we send you.

What we collect

We only collect what the coaching actually needs. Depending on how you use EVOLVE, that can include:

• Contact details — your name, email address and, if you give it, your phone number.
• Enquiry details — the answers you give on a lead form, quiz or booking page, and which ad or page you came from.
• Account details — your login email, role, and the settings you choose in the app.
• Health and fitness information — your age, height, weight, body measurements, training history, injuries, food and drink logs, workouts, sleep, steps, check-in answers, and any blood test results you choose to enter.
• Photos — progress photos and any screenshots you upload for tracking.
• Community content — anything you post, comment or upload in the community feed.
• Technical information — IP address, device and browser type, and pages visited, collected automatically by our hosting and analytics.

Health data, and why we ask for consent

Most of what makes coaching work is health information, which UK and EU law treats as a "special category" and protects more strictly. We rely on your explicit consent to hold and use it, given when you complete your intake form and start using the app.

You can withdraw that consent at any time by emailing us or by deleting your account. Withdrawing it does not make anything we did beforehand unlawful, but it does mean we can no longer coach you, because the coaching cannot be delivered without it.

Why we use it

• To deliver coaching — building your programme, reviewing check-ins, tracking progress and giving feedback. (Legal basis: performance of our contract with you, plus your explicit consent for health data.)
• To run your account — signing you in, keeping the app working, and keeping it secure. (Legal basis: contract, and our legitimate interest in a secure service.)
• To answer enquiries and arrange calls. (Legal basis: steps taken at your request before entering a contract.)
• To send marketing emails, where you have opted in or are an existing client. Every one has a one-click unsubscribe. (Legal basis: consent, or legitimate interest for existing clients.)
• To measure and improve our advertising. (Legal basis: consent for advertising cookies, legitimate interest for aggregate measurement.)
• To meet legal and accounting obligations. (Legal basis: legal obligation.)

What we never do

• We do not sell your personal information, ever.
• We do not share your health data, photos or check-ins with advertisers.
• We do not post anything about you publicly — testimonials, before-and-after photos or results — unless you have specifically agreed to it in writing, and you can withdraw that agreement at any time.
• We do not use your data to train AI models.

Who we share it with

We use a small number of established service providers to run EVOLVE. Each one only receives what it needs, is bound by contract to protect it, and cannot use it for its own purposes. They are listed in full further down this page.

We may also share information where the law requires it, or to protect someone’s safety.

Where your data is held

Our providers may store or process data outside the UK, including in the United States. Where that happens, the transfer is covered by the safeguards UK and EU law requires — such as the UK International Data Transfer Agreement or Standard Contractual Clauses, together with the provider’s own certifications.

How long we keep it

• Your account and coaching data: for as long as you have an account, and up to 12 months after it closes, in case you come back.
• Enquiries that never became clients: up to 24 months.
• Marketing contacts: until you unsubscribe, and then a suppression record so we do not email you again by mistake.
• Invoices and financial records: six years, because tax law requires it.
• Deletion requests: we keep a minimal record that a request was made and honoured.

Your rights

Under UK and EU data protection law you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that is wrong.
• Delete your data — see the deletion page linked at the bottom of this page.
• Restrict or object to how we use it, including objecting to marketing at any time.
• Send your data to you, or to another provider, in a portable format.
• Withdraw consent you have previously given.

How to exercise your rights

Email jaxthompson1997@gmail.com and tell us what you want. We will respond within one month. There is no charge.

If you are not happy with how we have handled it, you can complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/ — though we would rather you told us first so we can put it right.

Cookies and tracking

The app uses cookies that are strictly necessary to keep you signed in and to remember settings such as your chosen theme. These cannot be turned off without breaking the app.

Our public marketing pages also load the Meta pixel, which measures whether an ad led to an enquiry. If you would rather it did not run, use your browser’s tracking protection, an ad blocker, or your ad preferences on Facebook and Instagram — nothing on the app side depends on it.

Children

EVOLVE is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us their information, email us and we will delete it.

Security

Data is encrypted in transit, access to the coaching database is restricted per-account at the database level, and only your coach can see your data. No system is perfect, but if a breach ever affected your rights we would tell you and the regulator within the timeframes the law sets.

Changes to this policy

If we change anything material we will update the date at the top of this page and, where the change affects how we use your data, tell you by email.

The services we use

These are every third party that can see any part of your data, and what each one does with it.

Supabase

Database, file storage and account authentication — this is where your account and coaching data actually live.

Vercel

Hosting for the website and app, including server logs and basic request data.

Brevo

Marketing and transactional email — newsletters, reminders and alerts.

Resend

Transactional email for in-app notifications such as check-in alerts.

Anthropic (Claude)

Reading screenshots and photos you upload — for example a food label or a workout screen — so the numbers can be filled in for you. Images sent for this purpose are not used to train models.

Calendly

Booking consultation calls, including the name and email you enter when booking.

Meta (Facebook/Instagram)

Advertising. The Meta pixel on our public pages measures which ads lead to enquiries.

Terra, Cronometer and other wearable providers

Only if you choose to connect them: steps, sleep, heart rate, workouts and nutrition data from the app or device you connect.

Vimeo, YouTube and Loom

Hosting the videos embedded in the site and in your courses.