Privacy Policy
Effective Date: June 16, 2026. Learn how we secure, process, and protect your digital wellness profile.
1. Information We Collect
Wellness Era collects personal and health-related information to provide a premium coaching and data-tracking experience. This includes:
- Account Data: Name, email address, password hashes (secured), and role specification (Client or Professional).
- Wellness & Health Data: Workouts, training logs, exercise sets, RPE targets, weight logs, measurements, and nutrition/meal plans.
- Progress Assets: Historical photos uploaded for progress tracking and neural comparisons.
- Coach Verification Documents: Diplomas and certificates uploaded by Professionals for compliance checks.
- Communication Logs: Chat messages sent via our real-time Socket.IO chat system.
2. AI Matchmaking & Processing
To connect Clients with the most suitable Professional, Wellness Era utilizes an advanced matchmaking system.
AI Integration
If enabled, Client profiles (goals, budget ranges, and location preferences) are analyzed by Google's Gemini AI to generate personalized matching insights and compatibility scores. We transmit only the necessary metadata required for this match analysis. Your data is not stored or used by external models for training purposes.
In cases where the AI service is unavailable, the Platform utilizes a deterministic fallback matching engine calculated entirely on our local secure database servers.
3. Information Access & Sharing
We prioritize data minimization. Your information is shared only as necessary to facilitate coaching services:
Coach-Client Relationships: When a Client matches and schedules an appointment with a Professional, that Professional is granted access to the Client's active profile, training sessions, nutrition plans, and progress logs to tailor their coaching.
Administrative Auditing: Platform administrators have access to dashboard logs, coach credentials, and messages for safety, fraud prevention, and credential verification. We never sell or lease your personal, health, or credential data to third-party advertisers.
4. Security & Data Protection
Wellness Era implements robust security safeguards to guard your personal and sensitive data:
- Password Hashing: All passwords are encrypted on the server side using a high-cost function before DB storage.
- Binary Upload Safeguards: Uploaded coach credentials undergo server-side magic-bytes inspection to verify signatures (JPEG, PNG, WEBP, PDF) and prevent executable code injection.
- Session Security: Session tokens signed with secure algorithms, stored in HTTP-only, SameSite=Strict cookies.
- Path Traversal Prevention: System paths are sanitized using strict baseline protections to prevent illegal access.
5. Your Rights (GDPR & CCPA)
You hold complete control over your data. Depending on your jurisdiction, you have the following rights:
You may request access to, correction of, or deletion of your personal and fitness history logs at any time. Clients can export or download their technical progress assets directly from the progress dashboard.
If you wish to delete your account permanently, you can do so by contacting support. Upon account deletion, all personal profiles, credentials, and relationship history are purged from our active databases, subject to regulatory preservation requirements.