Privacy Policy

Effective July 24, 2026

Coaching only works if you can be honest with your coach, and you can only be honest if you trust where your words go. So before the details, the promises: we never sell your data, we never use it for advertising, and session recordings and transcripts are used for one thing — delivering and improving your coaching.

1. What we collect

Account information. Your name, email address, and password (stored only as a secure hash — we can't read it).
Onboarding preferences. Your timezone, preferred check-in windows, preferred contact method and contact number, and what you'd like help with.
Payment details. Payments run through Stripe. We never see or store your card number — Stripe passes us only what we need to manage your subscription (your plan, its status, and your card's brand and last four digits).
Session recordings and transcripts. Coaching sessions on Zoom are captured (audio/video) and transcribed, with the consent you give when you accept the Terms of Service at signup.
Usage information. The plans, tasks, and events you create in the app, and basic records like logins — the things the product needs to function.

2. Why we collect it

To deliver your daily coaching; to give your coach continuity (they can review past transcripts instead of making you re-explain yourself); to improve the coaching experience; to run billing; and to keep the service secure. That's the whole list. We never sell your data and never use it for advertising.

3. How long we keep it

Session recordings are deleted from Zoom's cloud once the transcript has been ingested — we don't leave video sitting there. Transcripts are kept while you're a client so your coach has your history. Account and billing records are kept while your account is active, and afterwards only as long as tax and accounting rules require.

4. Who can see it

It depends on the kind of data, and for session content the answer is deliberately short. Session recordings and transcripts are hosted and transcribed via Zoom — that's what delivers the sessions. Beyond that hosting, your session content is never shared outside the company under any circumstances, with exactly two exceptions: (a) we believe there is a real risk of harm to you or to someone else, or (b) we are legally compelled to disclose it. Within the company, access to session content is limited to your own coach and GUAF's two-person leadership team, who review it for quality assurance — no one else. Every Get Up and Flow team member signs a confidentiality agreement binding them to client confidentiality, except if and when required by law. Your other data is narrower still: Stripe handles payment data, our email provider handles the emails we send you, and our hosting providers store account data — each only as needed to deliver the service, and none of them ever touch your session content. We never sell your data, and we never share it for advertising or marketing.

5. Your rights

You can ask for a copy of the data we hold about you, or ask us to delete it, by emailing hello@getupandflow.co. We'll confirm and act promptly. A small amount of billing data may need to stay for the retention periods the law requires; we'll tell you if that applies.

6. Changes to this policy

If we make meaningful changes, we'll let you know by email or an in-app notice before they take effect, and we'll update the effective date at the top of this page.

7. Contact

hello@getupandflow.co — a human reads it.