Legal
Privacy Policy
CoachToFit ("CoachToFit," "we," "us") is a peer-supported weight-management program for Veterans, operated by Sur Haus, Inc., delivered through a mobile app, a coaching dashboard, and this website, and supported by the U.S. Department of Veterans Affairs (VA). This policy explains what information we collect, how we use it, who can see it, and the choices you have. It applies to the CoachToFit app, the coaching dashboard, and coachtofit websites (together, the "Service").
1. Information we collect
We only collect what the program needs to work.
- Account information: your name, username, email address, and the VA site or program you're enrolled through. Your coach or a program administrator sets up your account.
- Program profile: details used to personalize your program, such as military service branch, gender, age, height, starting and target weight, and your preferred weigh-in day.
- Activity and health entries: daily step counts, weigh-ins, goals, and your progress and reflections in the learning chapters.
- Coaching records: notes your peer coach records about your coaching sessions.
- Technical information: sign-in session records (for example, device type, IP address, and time of last activity) and security logs of who accessed your records and when.
We do not collect your precise location, contacts, photos, or microphone or camera input, and we don't use advertising or cross-app tracking.
2. How we use it
- To run the program: showing your progress, releasing learning chapters on schedule, and sending the reminders you turn on.
- To let your peer coach support you and plan your coaching sessions.
- To show the step leaderboard. It displays combined totals by service branch, never your name or individual numbers.
- To keep the Service secure, prevent misuse, and fix problems.
- To evaluate and improve the program, using data that has been de-identified or aggregated wherever possible.
- To meet legal, regulatory, and VA requirements.
We do not sell your information, and we do not use it for advertising.
3. Who can see it
- Your peer coach(es): the VA peer specialist(s) assigned to you can see your program data and coaching records.
- Program administrators at your VA site, for enrollment and program operations.
- Service providers who host and operate the Service for us, such as cloud hosting and storage. They are contractually bound to protect your information and to use it only to provide services to us.
- The VA, as required to deliver and oversee the program.
- When required by law, or to protect someone's safety.
We record every time someone other than you views or changes your health information, and we keep that audit trail.
4. Health data and Apple Health / Health Connect
If you allow it, the app reads your daily step counts (and, where available, weight) from Apple Health (HealthKit) on iPhone or Health Connect on Android, so you don't have to type them in. We read only those data types, only back to a recent window, and we never write to your health apps. Data from these sources is used only to run the program. It is never used for advertising or marketing and is never sold. You can turn off access at any time in your phone's Health or Health Connect settings.
Your step, weight, and coaching information is health information. We handle it under the safeguards required for protected health information, including those of the Health Insurance Portability and Accountability Act (HIPAA) where it applies.
5. How we protect it
- Data is encrypted in transit (HTTPS) and at rest, including the copy stored on your phone for offline use.
- Access is limited to people who need it for your care or for running the program, and every access to your records is logged.
- Sign-in sessions expire, and you can sign out of the app at any time.
No system is perfectly secure. If we learn of a breach affecting your information, we will notify you as required by law.
6. How long we keep it
We keep your information while you're enrolled and for 1 year after your participation ends, then delete it. If you ask us to delete your data, we'll delete it sooner, except for any records the law requires us to keep.
7. Your choices and rights
- See and correct your data: most of it is visible in the app. Ask your coach or contact us for a copy or a correction.
- Delete your data: contact us or ask your coach, and we'll delete your information as described in section 6.
- Control health access and reminders: you can turn these on or off in your phone's settings and in the app.
- Leave the program: you can stop at any time by telling your coach or contacting us. Leaving won't affect your other VA benefits or care.
You may also have rights under the Privacy Act of 1974, HIPAA, or other laws. Contact us and we'll help you use them.
8. Children
The Service is for adults (18 and older). We don't knowingly collect information from children.
9. Changes to this policy
We may update this policy. When we do, we'll change the date above, and if the change is significant we'll tell you in the app or through your coach before it takes effect.
10. Contact us
Questions or requests about your privacy:
hi+privacy@surhaus.com.
Sur Haus, Inc.