Privacy Policy
A legal disclaimer
Privacy Policy for Oath Performance
Effective Date: November 03, 2025
Oath Performance ("we," "us," "our," or "Oath") respects your privacy and is committed to protecting the personal information of our clients, website visitors, and subscribers. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website www.oathperformance.com (the "Site"), use our services, or interact with us. Our services include fitness, nutrition, and wellness coaching tailored for first responders and military personnel, subscription-based programs, and one-on-one consultations that may involve sensitive health information.
By accessing the Site or using our services, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Site or services.
1. Information We CollectWe collect information in three main ways: (a) information you provide directly, (b) information collected automatically, and (c) information from third parties.
a. Information You Provide Directly
Account and Profile Information: When you create an account, subscribe to a program, or schedule a consultation, we collect your name, email address, phone number, mailing address, date of birth, emergency contact, and payment details (processed via secure third-party processors).
Health and Wellness Information: During consultations or program enrollment, you may voluntarily provide sensitive personal health information (PHI), including medical history, injuries, medications, dietary habits, fitness goals, biometric data (e.g., weight, body measurements, heart rate), mental health concerns, and sleep patterns. This information is necessary to deliver personalized coaching.
Communications: Messages, feedback, or inquiries sent via contact forms, email, or in-app chat.
User-Generated Content: Photos, videos, progress logs, or testimonials you upload (with your explicit consent for public sharing).
b. Information Collected Automatically
Usage Data: IP address, browser type, device information, operating system, pages visited, time spent on pages, referring URLs, and clickstream data.
Cookies and Tracking Technologies: We use essential, functional, analytics, and marketing cookies (see Section 7). You can manage preferences via our cookie banner or browser settings.
c. Information from Third Parties
Payment Processors: Transaction confirmations (no full card details stored by us).
Analytics Providers: Aggregated usage insights (e.g., Google Analytics).
Professional Referrals: Limited data from referring physicians or departments (with your consent).
2. How We Use Your Information
We use collected information for the following purposes:
Service Delivery: To provide coaching, track progress, customize programs, schedule sessions, and send reminders.
Subscription Management: Process payments, renewals, and access to premium content (e.g., workout libraries, meal plans, live Q&A).
Communication: Send service updates, newsletters, promotional offers, and respond to inquiries (opt-out available).
Improvement and Analytics: Analyze usage to enhance the Site, develop new features, and measure program effectiveness.
Legal and Safety: Comply with laws, prevent fraud, enforce terms, protect rights, or respond to emergencies (e.g., sharing PHI with medical professionals if you report a life-threatening condition during a session).
Research (Anonymized): Aggregate de-identified data for internal studies on first responder wellness trends.
We do not sell your personal information.
3. How We Share Your Information
We share information only as described below:
Service Providers: With trusted vendors under strict confidentiality agreements, including:
Cloud hosting (e.g., AWS with encryption).
Payment processors (PCI-DSS compliant; we never store full card numbers).
Scheduling tools (e.g., Calendly).
Analytics (anonymized data only).
Coaching platform (e.g., secure telehealth for video consults).
Professional Advisors: Legal, accounting, or insurance consultants as required.
Business Transfers: In the event of merger, acquisition, or asset sale, your information may be transferred with notice and opt-out opportunity.
Legal Requirements: To comply with subpoenas, court orders, or government requests; or to protect the safety of users, staff, or the public.
With Your Consent: For testimonials, referrals, or third-party integrations you authorize (e.g., fitness tracker sync).
Sensitive Health Information: PHI is shared only with your assigned coach(es) and, if applicable, emergency contacts or medical providers you designate. We never share PHI for marketing.
4. Data Security
We implement industry-standard safeguards:Encryption: Data in transit (TLS 1.3) and at rest (AES-256).
Access Controls: Role-based access, multi-factor authentication, regular audits.
Secure Platforms: HIPAA-compliant tools for handling PHI where applicable.
Incident Response: Breach notification within 72 hours if required by law.
Despite these measures, no system is 100% secure. You are responsible for maintaining the confidentiality of your login credentials.
5. Data Retention
Account Data: Retained while your account is active; deleted within 30 days of closure request (except backups for 90 days).
Health Records: Kept for 7 years post-termination (or as required by professional standards/law), then securely destroyed.
Transactional Data: 7 years for tax/compliance.
Anonymous Analytics: Indefinitely.
You may request deletion of non-required data at any time (subject to legal holds).
6. Your Rights and Choices
Depending on your location, you may have rights under GDPR, CCPA, or similar laws:
Access: Request a copy of your data.
Correction: Update inaccurate information.
Deletion: Request removal (with exceptions for legal obligations).
Restriction/Objection: Limit processing.
Portability: Receive data in machine-readable format.
Opt-Out: Unsubscribe from marketing; withdraw consent for optional data collection.
To exercise rights, email privacy@oathperformance.com (mailto:privacy@oathperformance.com) with verification (e.g., account email). We respond within 30 days (45 for CCPA).Do Not Track: We honor browser DNT signals where feasible but do not alter core functionality.
7. Cookies and Tracking
​​
​
​
​
​
​
​
​
​
​
​
​
​
8. Children's Privacy
Our services are not intended for individuals under 18. We do not knowingly collect data from minors. If discovered, we delete it immediately.
9. International Data Transfers
Data may be processed in the United States or other countries with adequate safeguards (e.g., Standard Contractual Clauses). By using our services, you consent to such transfers.10. Changes to This PolicyWe may update this Policy periodically. Material changes will be posted on the Site with a revised "Effective Date" and emailed to active subscribers. Continued use constitutes acceptance.
11. Contact Us
For questions, concerns, or rights requests:
Oath Performance
Email: privacy@oathperformance.com
EU/UK Residents: We do not currently operate outside of the United States.
