Last updated August 31, 2026
Privacy Policy
How Jean-Pierre Perez handles information in WhiteBoard. A gym's records include other people's training data, so this matters more than the usual boilerplate.
What we collect
Account details. Name, email address, the gym you belong to, your role, and your gym’s timezone. Passwords are hashed by our authentication provider — we never see them.
Training data. Programs and workouts you write, exercises and targets, athlete one-rep maxes, logged sets, reps, loads and times, and which athlete was on which board on which day.
Uploads. Photos of handwritten programs, and videos you submit for clipping, along with the clips produced from them.
Billing. Your plan, subscription status and billing period. Card details go directly to Stripe and never reach our servers.
Technical. Ordinary server logs — IP address, browser, pages requested — kept briefly for security and debugging. We do not use advertising trackers, and we do not sell anything to anyone.
Athletes: who can see your training
Athletes cannot see each other. Your logged results, your maxes and your assigned work are visible to you and to the coaches at your gym — never to another athlete. This is enforced by row-level security rules in the database, not merely hidden in the interface.
One deliberate exception: a board displayed on a screen at your gym shows the workout and the names of the people on it, because that is what a whiteboard on a wall is for. Anyone standing in the room can read it.
How we use it
To run the service — showing your boards, saving your logs, tracking your history — to bill you, to answer support requests, to keep the service secure, and to meet legal obligations. We do not use your training data to train AI models.
AI features, specifically
When you run a photo scan, a video clip build, a cue suggestion or a generated program, we send only what that request needs — the image you chose, frames sampled from the video you uploaded, or the workout text you asked to extend — to our AI provider, Anthropic, to produce the result.
We do not send your athlete list, logged results or billing details. Anthropic processes the request under its commercial terms and does not use it to train its models. If you never use an AI feature, nothing of yours goes to it.
Who else touches your data
These are the only companies involved, and what each one does:
| Company | Role | What it holds |
|---|---|---|
| Supabase | Accounts, database and file storage | Holds your gym's programs, athletes, logged results and uploaded files. |
| Vercel | Hosting | Serves the application and keeps short-lived request logs. |
| Anthropic | AI features | Receives the photos and video frames you submit to a scan, plus the workout text you ask it to extend. |
| Stripe | Payments | Handles card details and subscriptions. We never see or store your card number. |
Beyond these, we share information only when the law requires it, or to protect someone from harm. We never sell personal information.
How long we keep it
Account and training data is kept while your account is open. Source videos you upload for clipping are deleted once the clips are cut — only the short clips are kept, and clips no longer used by any workout or board are removed periodically.
If you close your account, we delete your data within 30 days, except anything we must keep for tax or legal reasons (invoices, typically for seven years).
Your rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Write to support@coachwhiteboard.com and we will respond within 30 days.
If you are an athlete, your gym holds your training records. You can ask us directly, and we will act on it — we may check with your gym first where the request concerns records they created.
Depending on where you live you may have further rights — to object to processing, to data portability, or to complain to a data protection authority. We honour these.
Children
WhiteBoard is for adults. Accounts are not intended for anyone under 18, and we do not knowingly collect their information. If a coach adds a minor as an athlete, the gym is responsible for holding the necessary parental consent. Tell us if you believe a child has an account and we will remove it.
Security
Data is encrypted in transit and at rest by our infrastructure providers, access between gyms is separated at the database level, and administrative access is limited to what is needed to operate the service. No system is perfectly secure; if a breach affects your data, we will tell you and the relevant authorities as the law requires.
Where your data lives
Our providers store and process data in the United States. If you are elsewhere, using WhiteBoard means your information is transferred there under the safeguards those providers maintain.
Changes and contact
We will update this policy as the product changes, and email account owners before any material change. This policy is governed by the laws of California, United States.
Questions, or a request about your data: support@coachwhiteboard.com.