Privacy Policy

Effective September 20, 2026

Clark Coach is a training app that records your workouts, body measurements and programs, and provides a conversational assistant. This policy explains what personal information we collect, why, who we share it with, and how you exercise your rights.

We do not sell your personal information. We show no advertising. The app contains no behavioural analytics and no advertising trackers.

1. Who we are

Clark Coach is operated by Groupe Justin, established at 2620 boulevard Graham (Québec, Canada). For the purposes of Québec's Act respecting the protection of personal information in the private sector ("Law 25"), Groupe Justin is the enterprise that collects your personal information and is responsible for it.

2. Privacy officer

3. Information we collect

3.1 Information you give us

• Account and identity: email address, name, and — if you provide them — gender, date of birth, experience level, training objective, language, time zone, measurement units and theme preference.
• Body measurements and morphology: height, weight, arm span, torso length, femur length, and your morphological traits. We keep a history of these so you can see your progress. This information is sensitive and receives heightened protection.
• Training data: sessions, exercises, sets, loads, repetitions, RIR, durations, and — for cardio exercises you log yourself — distance, speed, incline, cadence, power, floors, steps, calories and average heart rate. Those last two are entered manually by you: the app reads neither Apple Health (HealthKit) nor Google Fit nor any sensor.
• Content you write: session and exercise notes, answers to between-set questions, the names of your gyms and their available equipment, and the programs and workout templates you create.
• Photos attached to your notes: a photo taken with the camera, inside the app, and attached to an exercise note. It is kept in private, non-public storage and it follows your note: if you are linked to a coach, that coach sees it (section 6.7). Location metadata (EXIF) is not retained.
• Assistant conversations: the text of your messages and the assistant's replies.

3.2 Information from third parties

If you sign in with Apple or Google, the provider sends us your identifier, your email address and, where applicable, your name. We never receive your password. If a coach creates an account for you, they give us your name and email address (see section 6.7).

3.3 Information collected automatically

When the app crashes or slows down, our diagnostics tool (Sentry) sends a technical report: error type, stack trace, app version, device model, and a pseudonymous account identifier. Your name and email address are stripped from the report on the device, before it is sent; the tool is configured not to record your IP address. Requested addresses lose their query string, which could otherwise carry measurements.

Sentry also records, on a sample of sessions and on sessions where an error occurs, a session replay: a reconstruction of your screens. All text, images and vector graphics in it are masked — the replay shows screen structure and your gestures, never your measurements, your notes or your conversations. The content of your assistant conversations is never attached to a diagnostic report.

3.4 Website waitlist

If you ask for a beta spot on clarkcoach.com, we collect the email address you enter and the language of the page. This collection is separate from the app: it creates no account and is not linked to any training data. We keep the address with our email provider until you unsubscribe or the beta ends, then we delete it. You can ask to be removed at any time by replying to one of our emails or writing to us.

3.5 What we do not collect

• No access to your photo library: a photo attached to a note is taken with the camera, inside the app; we never browse your albums.
• No location: a "gym" is a name you choose plus a list of equipment, not a GPS position.
• No data from Apple Health or Google Fit.
• No remote push notification token: rest reminders are scheduled locally on your device.
• No contacts, microphone or calendar access.

4. Why we use it

We do not use this information for other purposes without your consent, except where the law requires or permits it.

5. Consent

You consent to the collection described above by creating an account and using the app. Consent to the collection of your body measurements (sensitive information) is given separately: those fields are optional and you choose to enter them. You may withdraw your consent at any time by ceasing to use the app and deleting your account (see Delete your account); withdrawal has no retroactive effect on processing already carried out.

Diagnostic reports (section 3.3) are necessary to the reliability of the service and are pseudonymised. The app does not currently offer a switch to disable them individually.

6. Sharing with third parties

We share your information only with the providers below, only for the purposes described, and only to the extent necessary. None of them is permitted to use it for their own commercial purposes.

We may also disclose information where the law requires it, to enforce our rights, or in connection with a business transaction, in accordance with the law.

6.7 Your coach

If you are linked to a coach in Clark Coach, that coach can view and modify your profile, your body measurements and morphology, your programs, your sessions and sets, your personal notes and your preferences.

Your conversations with the assistant remain private: no coach has access to them.

A coach can create an account on your behalf by providing your name and email address. It is their responsibility to obtain your agreement first. If an account was created for you without your agreement, write to justin.halaby@groupejustin.com and we will delete it.

7. Communication outside Québec

The database holding your information is hosted by Supabase in the AWS Canada (Central) region, in Montréal, Québec.

Some processing nevertheless takes place outside Québec: the providers listed in section 6 as "Outside Québec" process there the information sent to them. Before communicating personal information outside Québec, we conduct a privacy impact assessment under section 17 of Law 25, weighing the sensitivity of the information, the purposes of its use, the contractual and technical protections in place, and the legal framework of the destination jurisdiction.

We conclude that the information so communicated receives adequate protection. You may request a summary of that assessment at justin.halaby@groupejustin.com.

8. Retention and destruction

We keep your information for as long as your account is active. When you delete your account, your information is destroyed, subject to the following:

• encrypted backups are purged on their rotation cycle;
• diagnostic reports already sent to Sentry are pseudonymous and expire according to that tool's retention period;
• information we are legally required to keep is retained for the prescribed period.

On your device, the app keeps an encrypted cache (current workout, exercise catalogue, writes waiting to sync). When you sign out, your session is cleared. The rest of the cache goes away when you uninstall the app.

The details of what is deleted are on the Delete your account page.

9. Your rights

Law 25 grants you the following rights, which you exercise free of charge:

• Access: obtain a copy of the information we hold about you.
• Correction: have inaccurate, incomplete or equivocal information corrected.
• Deletion: have your account and your information deleted.
• Portability: receive your computerised information in a structured, commonly used technological format. This request is handled manually by our privacy officer; the app does not yet offer a self-serve export tool.
• Withdrawal of consent (section 5).
• De-indexation and cessation of dissemination, in the cases provided by law.

Write to justin.halaby@groupejustin.com from your account's email address. We respond within 30 days. We may ask you to confirm your identity before acting.

10. Automated decisions and the AI assistant

Clark Coach makes no decision based exclusively on automated processing that would produce a legal effect concerning you or similarly affect you.

The assistant is a language model. It offers training suggestions; it can be wrong. It does not provide medical advice and does not replace a health professional. See the Terms of Service, section 7.

11. Security measures

• Encrypted transport (TLS) between the app and our servers.
• Per-user data isolation at the database level (row-level security enabled and forced on every table).
• An encrypted local cache whose key is held in the device's secure keychain.
• Pseudonymised diagnostic reports and masked session replays.
• Third-party API keys live on the server and are never shipped inside the app.

No system is perfectly secure; we cannot guarantee absolute security.

12. Cookies and trackers

The app shows no advertising, performs no cross-app or cross-site tracking, and embeds no behavioural analytics kit (no Google Analytics, Firebase, Amplitude, PostHog or Meta tooling). You are never shown an App Tracking Transparency prompt, because we do not track.

The only storage on your device is the one described in section 8: your authentication session and the app's cache. These web pages set no cookies and make no third-party requests. The clarkcoach.com site sets none either and embeds no audience-measurement tool; it keeps only the light or dark theme you choose, in your browser's local storage.

13. Minimum age and minors

Clark Coach is intended for people aged 14 and over. We do not knowingly collect information from a child under 14. In Québec, consent for a minor under 14 must be given by the person having parental authority; the app offers no mechanism to collect it.

If you believe a child under 14 has given us information, write to justin.halaby@groupejustin.com and we will delete the account.

14. Privacy incidents

In the event of a confidentiality incident presenting a risk of serious injury, we will promptly notify the Commission d'accès à l'information du Québec and the persons concerned, and will take reasonable measures to reduce the risk. We maintain a register of confidentiality incidents.

15. Changes

We may amend this policy. The effective date above identifies the current version. If a change is material, we will notify you in the app or by email before it takes effect.

16. Questions and complaints

Send your question or complaint first to our privacy officer (section 2). If their answer does not satisfy you, you may complain to the Commission d'accès à l'information du Québec: