1. Security principles

HolaCoach is designed around least-privilege access, protection by design, and limiting impact when an issue occurs. No digital system is risk-free, so controls are reviewed and improved as the product evolves.

2. Product controls

Controls are applied in proportion to the feature and its risk.

• role-based access between members, Coaches, and the operations team
• explicit consent for sensitive data or data shared during coaching
• access controls for schedules, notes, and membership data
• proportionate logging of significant operational activity

3. Your role

Keep your account and devices secure.

• Use a unique password and never share it.
• Enable available account verification methods.
• Do not send passwords, one-time codes, tokens, or other secrets through regular messages.
• provide accurate fitness information and update it if it changes
• follow reasonable safety guidance and consult a healthcare professional when needed
• not impersonate a Coach, make misleading health claims, or upload material that infringes another person's rights

4. Sensitive access and changes

Sensitive changes are checked server-side. Relevant activity may be recorded to support security, abuse prevention, and incident investigation.

5. Incident reporting

If you suspect unauthorized access, change your password, sign out of unrecognized sessions, and contact us. Do not include passwords, one-time codes, or unnecessary private content in a report.

6. Important limit

HolaCoach helps organize fitness coaching. It is not a medical diagnosis, treatment, or emergency service. Stop activity and seek professional help if you feel unsafe or experience serious symptoms.