Legal
Privacy Policy
Effective September 1, 2026
This Privacy Policy explains how PRGRM collects, uses, stores, and shares information when you use our website and program-building tools.
Information we collect
We collect information you choose to provide, including:
- Account information such as your email address. Password-based authentication is handled by Supabase; PRGRM does not store your password in readable form.
- If you use Google sign-in, your Google account identifier, name, email address, and profile image as permitted by Google.
- Programs, exercises, prescriptions, notes, and other content you create or save in PRGRM.
- Feedback and support messages, their category and workspace area, optional delivery-readiness answers, and your account ID if signed in. An email address is optional and used for follow-up only with your consent. Feedback is reviewed privately by the PRGRM team.
To limit feedback spam, we store a daily cryptographic network identifier, not your raw IP address. We do not automatically attach program content or full page URLs to feedback.
Our hosting and authentication providers may also process basic technical information such as IP address, browser type, device data, timestamps, and security logs when you use the service.
Recoverable drafts on your device
You can begin building a program without an account. PRGRM stores one recoverable draft in your browser's local storage so it can survive refreshes and navigation on that device. A local draft is not added to your PRGRM account until you sign up or sign in and save it. Clearing browser data, using another browser or device, or replacing the draft may remove that local copy.
How we use information
We use information to:
- Create and secure your account.
- Save, load, and manage your training programs.
- Operate, maintain, troubleshoot, and improve PRGRM.
- Prevent fraud, abuse, and security incidents.
- Respond to support requests and important service notices.
Service providers and sharing
We use service providers to operate PRGRM, including Supabase for authentication and database services, Vercel for hosting, and Google for optional Google sign-in. They process information on our behalf under their own terms and privacy commitments. We may also disclose information when required by law, to protect people or the service, or as part of a business transfer. PRGRM does not sell your personal information or share it for third-party behavioral advertising.
Retention and your choices
We retain account and program information while your account is active and as reasonably necessary to provide the service, meet legal obligations, resolve disputes, and protect the service. You may request access, correction, export, or deletion of your personal information by contacting us. You can disconnect Google sign-in through your Google Account settings.
Security
We use reasonable administrative and technical safeguards designed to protect information. No internet service or storage system can be guaranteed completely secure, so please use a strong, unique password and protect access to your devices.
Children
PRGRM is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and remove it where appropriate.
Changes to this policy
We may update this policy as PRGRM develops. We will post the revised policy here and update the effective date. Material changes may also be communicated through the service when appropriate.
Contact us
Questions or privacy requests can be sent to privacy@getprgrm.com.