Effective and last updated: July 28, 2026
1. Information collected
Academy may collect account details such as name, email, password hash, membership status, and versioned agreement records; Adult Election to Continue records such as the source workout, program revision, typed name, acknowledgments, timestamp, IP address, and browser information; training details such as bodyweight, lift maxes, completed sets, reps, loads, form status, recovery check-ins, pain trend, notes, external video links, records, and program position; consultation form details; billing identifiers and subscription status supplied by the payment processor; and technical data such as request timestamps, authentication cookies, and security events. Academy does not store full payment-card numbers.
2. How information is used
Information is used to create and secure accounts; calculate and deliver training; retain history; apply and review training-safety holds; record an eligible adult’s election to continue; provide coaching, challenges, and opted-in community milestones; process membership access; send transactional messages; respond to inquiries; prevent abuse; troubleshoot and improve the service; keep legal acceptance records; and comply with law.
3. Legal bases and sensitive information
Depending on location, processing may be necessary to perform a contract, based on consent, required by law, or supported by legitimate interests such as service security. Recovery, pain-trend, and Adult Election to Continue data may be sensitive. Academy is not a healthcare provider; provide only what is useful for training and do not use the service for urgent, emergency, or comprehensive medical records.
4. Service providers
Academy uses service providers to operate the website and database, process subscriptions, and deliver email. These providers process information under their own contracts and privacy terms. Current infrastructure is designed for Cloudflare-hosted application and database services, Stripe payment services, and Resend email delivery. External video links remain subject to the linked provider’s privacy practices.
5. Sharing
Academy does not sell personal information or share it for cross-context behavioral advertising. Information may be shared with authorized coaches and service providers as needed to operate the service; with professional advisers under appropriate duties; in a business transaction; to protect users, Academy, or others; or when required by valid legal process. Community sharing is opt-in and displays only first name and completed milestones in the current feature.
6. Cookies
The member system uses a secure, HTTP-only authentication cookie to keep signed-in sessions. It is required for account access and is not an advertising cookie. Browsers may allow you to remove it, which signs you out.
7. Retention
Account, membership, training, and agreement records are retained while the account is active and afterward as reasonably needed to provide history, resolve disputes, meet legal and accounting obligations, and protect the service. Expired security tokens and rate-limit records may be deleted sooner. Academy will delete or de-identify information when it is no longer reasonably needed, subject to legal obligations and backup cycles.
8. Security
Academy uses measures designed to protect information, including password hashing, restricted session cookies, request-origin checks, rate limiting, database access controls, and transport security. No online system can guarantee absolute security. Contact Academy promptly if you suspect account misuse.
9. Your choices and rights
You may update training settings, opt in or out of community milestones, manage billing, and request access, correction, deletion, or a copy of personal information through the contact form. California residents may also have rights to know, correct, delete, or limit certain uses and to receive equal service for exercising applicable rights. Academy will verify requests and may retain information where permitted or required by law.
10. Children
Self-service membership is intended for adults 18 and older and is not directed to children. Academy does not knowingly collect a child’s personal information through self-service registration. Contact Academy if you believe a child submitted information.
11. Changes
Academy may update this policy as the service changes. Material changes will be communicated appropriately, and signed-in members may be asked to acknowledge a new version.
Contact
Questions or legal notices may be submitted through the Academy contact form. Academy of Strength LLC is based in Irvine, California.