Privacy Policy

We respect your privacy. This page explains exactly what we collect, why we collect it, and the controls you have. We don't sell your data — ever.

1. What we collect

• Account & purchase data — name, email, billing country, and payment confirmation (handled by Stripe; we never see your card details).
• Lead-magnet sign-ups — first name and email when you download Phase 0.
• Usage data — anonymous analytics on which pages and program docs are visited, page-load speed, and aggregate referrer info.
• Email engagement — opens and clicks on the newsletter and welcome sequence (handled by Resend).

2. How we use it

• To deliver the Program and your dashboard access.
• To send you transactional emails (receipts, sign-in links).
• To send the welcome sequence and occasional updates (you can unsubscribe at any time).
• To improve the product based on aggregated usage patterns.
• To prevent fraud and protect the integrity of paid access.

3. Legal basis (GDPR)

We process data on three bases: (a) contract performance for delivering the Program; (b) legitimate interest for analytics and fraud prevention; (c) consent for marketing emails — you can withdraw consent any time by clicking unsubscribe.

4. Sub-processors

The third parties who help us run Couch2Hyrox:

• Stripe — payment processing
• Resend — email delivery
• Vercel — hosting + edge analytics
• Cloudflare R2 / AWS S3 — file storage for downloads
• Skool — community platform (optional, only if you join)

Each sub-processor has its own privacy policy and is contractually required to handle your data securely.

5. Cookies

We use a single first-party authentication cookie (c2h_session) to keep you signed in to the dashboard. Stripe sets its own cookies during checkout for fraud detection. We don't use third-party advertising cookies.

6. Data retention

Account and purchase records are retained for 7 years (tax law). Newsletter contacts are retained until you unsubscribe. Anonymous analytics are retained for 12 months and then aggregated.

7. Your rights

You can request access to, correction of, export of, or deletion of your data at any time by emailing david@couch2hyrox.com. We'll respond within 30 days.

8. Children

Couch2Hyrox is intended for adults (18+) and is not directed at children. We do not knowingly collect data from anyone under 18.

9. International transfers

Our sub-processors may store data in the US and EU. Where required, we rely on Standard Contractual Clauses to protect international transfers.

10. Changes

We'll post any material changes here and email customers in advance.

11. Contact

Privacy questions: david@couch2hyrox.com.