FCFresh Chapter
    

Legal

Privacy Policy

This full Privacy Policy explains how Fresh Chapter collects, uses, shares, protects and retains personal data across our platform, including account, coaching, community and payment information.

Who is responsible for your data

The seller's legal business name is Fresh Chapter. Fresh Chapter is the data controller responsible for the personal information described in this policy and decides how and why it is processed. You can reach our privacy officer at privacy@freshchapterapp.com or our support team at support@freshchapterapp.com. This policy covers the whole platform, including account, coaching, community, technical, billing and payment-related information; it is not limited to health information.

Encryption in transit and at rest

All traffic uses TLS, and records are stored encrypted at rest by our hosting provider.

Automatic session locks

After 15 minutes of inactivity you are prompted, then signed out, and anything cached on the device is cleared.

Least-privilege access

Coaches see only notes for clients assigned to them. Administrators can never read journal text or direct messages.

Immutable audit trail

Every read, write, and deletion of client data is recorded with the account, action, resource, timestamp, and IP address. Records cannot be edited or deleted.

What we collect and why

Account details
Name and email, used to sign you in and to attribute activity in the audit trail.
Journal entries
Private to you. No coach or administrator can read them through the app or the database.
Coach session notes
Visible to the coach who wrote them and, when they mark a note as shared, to that client only.
Wellness intakes
Owned by you and readable by the coach you are actively assigned to.
Billing and purchase details
Your plan, subscription status, renewal dates, order history and the country used for tax. Full card numbers never reach Fresh Chapter — they are collected and stored by our payment provider.
Technical and usage data
IP address, device and browser type, approximate location and page views, used for security, fraud prevention and improving the product.
Direct messages
Readable only by the sender and the recipient.

Our legal basis for processing

  • Performance of a contract — creating your account, matching you with a coach, delivering sessions, and processing your orders and renewals.
  • Legitimate interests — keeping the platform secure, preventing fraud and abuse, and improving the product using aggregated usage data.
  • Consent — health-related information, coaching records, optional marketing emails and non-essential cookies. You can withdraw consent at any time.
  • Legal obligation — tax, accounting and record-keeping duties, and responding to lawful requests.

Who we share data with

  • Paddle.com — our Merchant of Record and reseller for all Fresh Chapter orders. Paddle receives your name, email, billing address and country, and the details of what you purchased, in order to take payment, calculate tax, issue invoices, manage subscriptions and handle refunds. Paddle processes that data as an independent controller under its own privacy notice.
  • Stripe — used only to pay coaches; it receives payout and identity details from coaches, not member health data.
  • Infrastructure and service providers — hosting, database, email delivery, and video-session providers acting on our instructions.
  • Analytics providers — aggregate traffic measurement only, with sensitive content excluded.
  • Professional advisers and authorities — legal and accounting advisers, or authorities where the law requires it.

We never sell your personal information. Where data is transferred outside your region, we rely on standard contractual clauses or an equivalent safeguard.

How long we keep it

  • Account and profile data — for as long as your account is open, then deleted or anonymised within 90 days of closure.
  • Journal entries, messages and intake answers — until you delete them, or within 90 days of account closure.
  • Coaching session notes — 7 years, in line with professional record-keeping expectations, then deleted.
  • Billing and transaction records — 7 years, because tax and accounting law requires it.
  • Security and audit logs — 6 years, and they cannot be edited during that period.

What we never send to third parties

Journal text, session notes, intake answers, and message contents are excluded from all analytics, telemetry, crash reporting, and application logs. Diagnostics record the type of resource touched and its identifier — never its contents.

Your rights

  • Request a copy of the information we hold about you.
  • Correct inaccurate details in your profile or intake answers.
  • Delete your journal entries at any time from your account.
  • Withdraw consent, which ends coach access to your shared records going forward.
  • Ask for an accounting of disclosures drawn from the audit trail.
  • Object to or restrict certain processing, or ask us to port your data to another service.
  • Complain to your local data protection authority if you are unhappy with our response.

We respond to rights requests within one month. Requests about a payment or invoice may be forwarded to Paddle, who holds those records as Merchant of Record.

To exercise any of these rights, or to report a security concern, email the Fresh Chapter privacy officer at privacy@freshchapterapp.com (or support@freshchapterapp.com). You can also raise a request from inside your account.

Cookies

We use essential cookies to keep you signed in and to secure the checkout, and optional analytics and advertising cookies to understand traffic and support the site. You can refuse or clear non-essential cookies in your browser settings at any time; essential cookies are required for the platform to function.

Ready to continue? Review and accept your consent forms.