Privacy

The short version

We collect what we need to coach you and nothing else. We do not sell your information and we do not share it for advertising. We count visits to the site so we know whether anyone is reading it, and that counter is set up so it is never told who you are. Ask us to delete your information and we will.

Heroes Training Systems LLC, based in Golden, Colorado, is responsible for the information described here.

What we collect

When you get in touch. Your name, email address, phone number and what you tell us about your goal.

Your training profile. Your goals, your training history, your schedule, the equipment you have, and what has been giving you trouble, which includes injuries and long term health. This is the most personal thing we hold and it exists for one reason: your program is built from it.

Your weekly check ins. Your weight, nights you slept on target, days you hit your macros, days you took your supplements, how the training felt, and anything you choose to write.

Your progress photos, if you choose to add them. They are optional, they are never a condition of coaching, and they are for clients 18 and over. Only you and Zach can ever see them. They are stored privately, they are never used for marketing, never shared and never sold, and if Zach ever wanted to show one he would ask you first, in writing. We never run face recognition, face grouping, tagging or any other identification on them, ever. They never appear in an email, in an export, or on any page that is not your own account. You can delete any photo, or all of them, any time, and it is immediate and permanent for both of you. If you leave Heroes your photos are deleted within 90 days, or straight away if you ask.

Your account and billing. Your plan, whether it is monthly or annual, your billing status and renewal date. Payment card details go straight to Stripe and never reach us.

If someone introduced you. The code they shared, so they get the credit they are owed.

When you book a call. Your name, email address, phone number, whether you want to talk on video or by phone, anything you choose to tell us in advance, and the time you picked. You can cancel or move it yourself from the link in your confirmation, and cancelling takes it off the calendar.

Why we are allowed to hold it

Because you asked us to coach you and we cannot do it otherwise, and because we have to keep records of what we were paid. Health information is different and we treat it that way: you give it to us deliberately, for the single purpose of building your program, and you can withdraw it by asking us to delete it.

Who else sees it

Six companies, and this is what each of them does:

• Stripe takes the payments and holds the card details we never see.
• Resend delivers our email, so it handles your address and the contents of what we send you.
• Neon hosts the database and Vercel runs the site.
• TrainHeroic delivers your program, so your name and email reach it when we set you up.
• Google holds the calendar our coaching calls sit on. When you book a call it goes on that calendar so it shows up on Zach’s phone, carrying your name, email, phone number and anything you told us in advance. Cancel it and it comes off. Google also counts visits to this site for us, which is a separate job and a much smaller one: it is told a page address with anything personal taken out of it, and never who you are. There is more on that under Cookies below.

That is the complete list. We do not sell your information, we do not trade it, and nobody buys advertising against it. We will hand information to the authorities only where the law actually requires it.

The page where you pick a time is ours. It used to be Google’s own booking page shown inside a frame on ours, which meant Google loaded in your browser and could set its own cookies while you were still only looking at the times. That is gone. Google is told nothing about you unless you actually book, and then it is told by our server rather than by you. The only thing of Google’s that runs in your browser on that page is the visit counter described under Cookies, which is told the page address and never what you typed into it. That is less of your information reaching a third party than before, not more.

Cookies

We set two of our own, both strictly necessary and neither used to track you across the internet. One keeps you signed in. One remembers the introduction code you arrived with, for ninety days, so the person who introduced you still gets credit if you buy later.

We also count visits, using Google Analytics, which sets cookies of its own so it can tell a returning visitor from a new one. We use it to see how many people find the site and which pages they read.

It is deliberately told as little as we could arrange. The page address it receives has every personal part removed before it is sent: a signed link to your training profile arrives at Google as “/onboarding/[token]” and never as the real link, and the same is true of your account, your check in, your invitation and your booking. It is never sent your name, your email address, your phone number or anything you typed into a form, none of what it collects is attached to your record with us, and we do not use it for advertising. It does get the ordinary things any visit counter gets: which page, what browser and device, and roughly what part of the world you are in. The admin side of this site is not counted at all. There are no advertising cookies here.

How long we keep it

While you are a client, and afterwards only for as long as there is a reason: records of payments have to be kept for tax, usually seven years. Your training profile and check ins are deleted when you ask, or within two years of your last activity if you do not.

Progress photos are the exception and they are kept for less time on purpose. If you stop being a client they are deleted within 90 days, automatically, and you can have them deleted immediately by asking or by tapping delete yourself.

Email you get from us

While you are a client we email you about your own coaching: your account, your check ins, your billing. Those are part of the service and you cannot opt out of them without leaving, because they are how the product works.

Anything else, including us getting in touch after you have stopped training with us, only happens if you ticked the box asking for it, and every one of those emails has an unsubscribe link. Turning that off never affects the emails about your own account.

What you can ask for

A copy of everything we hold on you. A correction. Deletion. That we stop emailing you. You do not need a reason and it costs nothing. Email zach@heroestrainingsystems.com and we will deal with it within 30 days. If you are in Colorado you have these rights under the Colorado Privacy Act and can appeal a refusal; we would rather you just told us we got it wrong.

Children

Coaching is sold to adults. Where Zach coaches a young athlete it is arranged with a parent or guardian, who signs up and holds the account. We do not knowingly collect information directly from children under 13.

Security, honestly

Traffic is encrypted, your account opens from a signed emailed link rather than a password we could leak, and access to the admin is limited to Zach. No system is perfect. If we ever have a breach that puts you at risk we will tell you rather than hope you do not notice.

Changes

If we change this in a way that matters we will email you before it takes effect. See also our terms.