Effective and last updated: August 17, 2026
1. Information collected
Academy collects required member-intake details including verified email address, full legal name, full date of birth, phone number, physical address, and years of training. Members may optionally provide a preferred name, emergency contact, training goals, injuries or limitations, height, bodyweight, available equipment, preferred training days, additional coaching information, referral source, and separate text-message or marketing-email choices. Academy also may collect a password hash, membership status, versioned agreement and electronic-signature records; Adult Election records linked to the exact Pain event; completed sets, actual reps, actual loads, execution status (Solid, Challenging, Needs Work, or Pain), pain intensity, context, change, effect on function, urgent-symptom indication, response level, coach-review decisions, parent-consent and medical-release confirmations, recovery check-ins, notes, videos or links, records, and program position; member-created community posts, replies, encouragements, reports, and moderation records; consultation details; billing identifiers and subscription status; and technical security data. RPE is not required or retained as a core workout field. Academy does not store full payment-card numbers.
2. How information is used
Information is used to create and secure accounts; confirm adult eligibility for self-service membership and a Pain-related continuation election; administer membership; communicate about the account; understand training background and coaching context; calculate and deliver training; retain history; determine progression and lane-specific repeats from actual workout evidence; review training-safety signals; record an eligible adult’s election to continue the current session; provide coaching, challenges, and the optional private member community; moderate member-created content and respond to reports; process membership access; send transactional messages; respond to inquiries; prevent abuse; troubleshoot and improve the service; keep legal acceptance records; and comply with law.
3. Legal bases and sensitive information
Depending on location, processing may be necessary to perform a contract, based on consent, required by law, or supported by legitimate interests such as service security. Date of birth, physical address, emergency-contact information, recovery information, limitations, pain trends, and Adult Election to Continue data may be sensitive. Academy is not a healthcare provider; optional limitations are used only as coaching context, and the service must not be used for urgent, emergency, or comprehensive medical records.
4. Service providers
Academy uses service providers to operate the website and database, process subscriptions, and deliver email. These providers process information under their own contracts and privacy terms. Current infrastructure is designed for Cloudflare-hosted application, database, and private object-storage services, Stripe payment services, and Resend email delivery. Academy-hosted form-review videos are stored privately and streamed only through authenticated, authorized Academy requests. Historical external video links remain subject to the linked provider’s privacy practices.
5. Sharing
Academy does not sell personal information or share it for cross-context behavioral advertising. Required and optional intake information is available only to the Head Coach and coaches assigned to that member, plus service providers as needed to operate the service. Information also may be shared with professional advisers under appropriate duties; in a business transaction; to protect users, Academy, or others; or when required by valid legal process. The community board is available only to signed-in members with current access. A community post or reply is shared only when the member deliberately submits it and displays the member’s first or preferred name, the submitted text, its category, date, optional challenge connection, replies, and encouragement count. Private workout logs, contact information, Pain reports, recovery data, and coach notes are never posted automatically.
6. Cookies
The member system uses a secure, HTTP-only authentication cookie to keep signed-in sessions. It is required for account access and is not an advertising cookie. Browsers may allow you to remove it, which signs you out.
7. Retention
Account, membership, training, and agreement records are retained while the account is active and afterward as reasonably needed to provide history, resolve disputes, meet legal and accounting obligations, and protect the service. Expired security tokens and rate-limit records may be deleted sooner. Academy will delete or de-identify information when it is no longer reasonably needed, subject to legal obligations and backup cycles.
8. Security
Academy uses measures designed to protect information, including password hashing, restricted session cookies, request-origin checks, rate limiting, database access controls, and transport security. No online system can guarantee absolute security. Contact Academy promptly if you suspect account misuse.
9. Your choices and rights
Text-message and marketing-email consent, challenges, and community participation are optional and are not conditions of membership. Members may remove their own visible posts and replies, withdraw optional communication choices, update training settings, manage billing, and request access, correction, deletion, or a copy of personal information through the contact form. California residents may also have rights to know, correct, delete, or limit certain uses and to receive equal service for exercising applicable rights. Academy will verify requests and may retain information where permitted or required by law, including moderation and safety records.
10. Children
Self-service membership is limited to adults 18 and older, and the intake prevents an under-18 date of birth from proceeding. Youth training, if offered, requires a separate supervised enrollment process through Coach Kirtus. Academy does not knowingly collect a child’s personal information through self-service registration. Contact Academy if you believe a child submitted information.
11. Changes
Academy may update this policy as the service changes. Material changes will be communicated appropriately, and signed-in members may be asked to acknowledge a new version.
Contact
Questions or legal notices may be submitted through the Academy contact form. Academy of Strength LLC is based in Irvine, California.