PeakForge AI — Privacy Policy
A product of Catalyst To Courage LLC.
Effective date: April 4, 2026 · Governing law: State of Wisconsin
PLAIN-ENGLISH SUMMARY
Here is what this Privacy Policy means in plain language:
We collect account info, training data, and usage analytics to operate the platform.
We use Stripe for payments and never see or store your full payment card number.
We do not sell your personal data to advertisers or third parties.
We may use third-party analytics tools such as Vercel Analytics to understand how the platform is used.
If you are in the EU or California, you have additional rights to access, correct, and delete your data.
We take COPPA seriously. We do not knowingly collect data from children under 13 without parental consent.
You can request deletion of your account and data at any time by contacting privacy@catalysttocourage.com.
1. WHO WE ARE
PeakForge AI is operated by Catalyst To Courage LLC, a Wisconsin limited liability company. References to "Company," "we," "us," or "our" in this Privacy Policy refer to Catalyst To Courage LLC.
This Privacy Policy describes how we collect, use, share, and protect personal information when you access or use PeakForge AI at peakforge-ai.vercel.app (the "Platform"). By using the Platform, you consent to the practices described in this Policy.
2. INFORMATION WE COLLECT
2.1 Information You Provide Directly
Account registration data: name, email address, username, password;
Profile information: sport, position, peak or competition date, equipment profile;
Training data: workout logs, session RPE ratings, set/rep/load data, notes;
Communications: messages, feedback, or support requests you send to us.
2.2 Information Collected Automatically
Device and browser information: IP address, browser type, operating system;
Usage data: pages visited, features used, session duration, click patterns;
Cookies and similar technologies: see Section 7 (Cookie Policy).
2.3 Information from Third Parties
Payment information: Stripe, Inc. processes payment transactions and may share transaction status and limited billing information with us. We do not receive or store full payment card numbers.
Analytics providers: We may receive aggregated, anonymized usage data from analytics tools such as Vercel Analytics.
3. HOW WE USE YOUR INFORMATION
We use personal information for the following purposes:
Service delivery: to create and manage your account, generate training programs, process subscription payments, and provide platform features;
AI coaching insights: training data you enter is used to generate AI-assisted coaching suggestions within your session;
Platform improvement: aggregated usage analytics to identify bugs, improve features, and enhance user experience;
Communications: transactional emails (account confirmation, password reset, billing receipts) and, with your consent, product updates;
Safety and compliance: to detect fraud, enforce our Terms of Service, and comply with legal obligations.
4. HOW WE SHARE YOUR INFORMATION
We do not sell your personal information. We share personal data only in the following circumstances:
4.1 Service Providers
We share data with third-party vendors who process data on our behalf and are contractually bound to protect it:
Stripe, Inc.: payment processing. Your payment data is governed by Stripe's privacy policy (stripe.com/privacy).
Vercel, Inc.: platform hosting and deployment infrastructure.
Analytics tools: aggregated, anonymized usage analytics. Vercel Analytics for aggregated web and product usage metrics.
Email service provider: Resend for transactional email we send through the Service where applicable.
4.2 Legal Requirements
We may disclose personal data if required to do so by law, court order, or government request, or when we believe disclosure is necessary to protect the rights, property, or safety of the Company, our users, or the public.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of substantially all assets, user data may be transferred to the acquiring entity. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
4.4 With Your Consent
We may share your information with third parties for purposes not described in this Policy when we have obtained your explicit consent to do so.
5. USER RIGHTS
5.1 All Users
All users have the right to:
Access the personal information we hold about you;
Correct inaccurate or incomplete personal data;
Request deletion of your account and associated personal data;
Opt out of non-transactional marketing communications at any time.
5.2 California Residents (CCPA)
California residents have the following additional rights under the California Consumer Privacy Act (CCPA):
Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you and the purposes for which we use it;
Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions;
Right to Opt Out of Sale: We do not sell personal information. No opt-out is required, but you may designate an authorized agent to exercise rights on your behalf;
Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights.
To exercise CCPA rights, contact us at privacy@catalysttocourage.com. We will respond to verifiable consumer requests within 45 days.
5.3 European Economic Area and UK Residents (GDPR)
If you are located in the EEA or UK, you have the following rights under the General Data Protection Regulation (GDPR):
Article 15 — Right of Access: Request a copy of your personal data;
Article 16 — Right to Rectification: Correct inaccurate personal data;
Article 17 — Right to Erasure: Request deletion of personal data ("right to be forgotten");
Article 18 — Right to Restriction: Restrict processing of your personal data under certain circumstances;
Article 20 — Right to Data Portability: Receive your personal data in a structured, machine-readable format;
Article 21 — Right to Object: Object to processing based on legitimate interests or for direct marketing.
Our lawful basis for processing personal data is: (a) contract performance for service delivery; (b) legitimate interests for platform improvement and security; (c) consent for marketing communications; and (d) legal obligation for compliance activities.
To transfer personal data from the EEA or UK to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, and other mechanisms required by applicable law. To exercise GDPR rights, contact privacy@catalysttocourage.com.
6. CHILDREN'S PRIVACY (COPPA)
PeakForge AI is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn that we have collected personal information from a child under 13 without parental consent, we will promptly delete that information and terminate the associated account.
Users between 13 and 17 may use the platform with verified parental or guardian consent. Parents or guardians who consent on behalf of a Minor User may:
Review the personal information we have collected about their child;
Request deletion of their child's personal information;
Revoke consent and request account termination.
To exercise parental rights or report suspected unauthorized minor account creation, contact privacy@catalysttocourage.com.
7. COOKIE POLICY
7.1 What We Use
PeakForge AI uses the following types of cookies and similar technologies:
Strictly Necessary Cookies: Required for platform functionality including authentication sessions and account security. Cannot be disabled.
Analytics Cookies: Used to understand how users interact with the platform (pages visited, features used, session duration). Collected in aggregate or anonymized form.
Preference Cookies: Used to remember user settings such as equipment profiles and display preferences.
7.2 Opt-Out
You may disable non-essential cookies through your browser settings. Note that disabling cookies may affect platform functionality. For analytics opt-out, contact privacy@catalysttocourage.com.
8. DATA RETENTION
We retain personal data for the following periods:
Active account data: Retained for the duration of your account and for up to 30 days after account deletion to allow for recovery requests.
Training logs and program data: Retained during the active account period. Deleted within 30 days of account deletion request.
Payment records: Retained for 7 years as required for tax and financial compliance purposes.
Communication records: Support and legal communications retained for 3 years.
Analytics data: Aggregated, anonymized analytics data may be retained indefinitely as it cannot be traced back to individual users.
Upon receiving a verified deletion request, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
9. SECURITY MEASURES
We implement the following security measures to protect your personal data:
Data transmission encrypted using TLS/HTTPS;
Passwords stored using industry-standard hashing (bcrypt or equivalent);
Access to production systems limited to authorized personnel only;
Payment data handled exclusively by Stripe’s PCI-DSS-compliant infrastructure;
Regular security review of third-party service providers.
No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable safeguards to protect your data, we cannot guarantee absolute security.
10. THIRD-PARTY LINKS
The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party sites you visit.
11. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and, where feasible, by sending an email notification to your registered address. The updated policy will be effective upon posting unless otherwise stated. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.
12. CONTACT AND DATA REQUESTS
For questions about this Privacy Policy, to exercise data rights, or to report a privacy concern, contact us at:
Privacy Contact — Catalyst To Courage LLC | PeakForge AI
Email: privacy@catalysttocourage.com
Website: peakforge-ai.vercel.app
We will respond to data rights requests within 30 days (or 45 days for CCPA requests).
This document was generated by an AI-assisted legal drafting tool and is intended as a starting point for review by licensed counsel. It does not constitute legal advice and does not create an attorney-client relationship. Laws vary by jurisdiction and change over time. Have this document reviewed by a qualified attorney in your jurisdiction before execution.