Privacy Policy

HealthInMind ("we", "us") respects your privacy. This policy explains what personal information we collect through healthinmind.ca and the HealthInMind member app, why we collect it, and the choices you have. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Information we collect

When you contact us

The consultation form asks for your name, email address, phone number (optional), your main health concern and your goals. When you submit it, we also record your IP address and approximate location (city, region and country), which helps us filter out spam and abuse.

When you use the member app

Members have a username and password. Passwords are stored only as a one-way cryptographic hash, so we can't see them. The app stores the training information you enter: bodyweight, gym location, exercise routines and workout logs (dates, weights, repetitions and session times).

When you browse the site

Our hosting provider processes standard technical data such as your IP address, browser type and the pages you request, to deliver the site and protect it from attacks. We use privacy-focused Cloudflare Web Analytics, which counts visits without cookies or cross-site tracking.

How we use it

• To reply to your consultation request and discuss your training.
• To provide the member app, including syncing your training log between your devices.
• To keep the site and app secure, for example by limiting repeated form submissions and failed sign-in attempts.

We do not sell or rent your personal information, and we don't use it for advertising.

Health information

Details about your health concerns, goals and training are sensitive. We use them only to respond to you and to support your training, and we limit access to the people who need it. Please share only what you're comfortable sharing, and don't include detailed medical records in the contact form.

Cookies and local storage

The public site doesn't set cookies. When you sign in to the member app, we set one strictly necessary cookie (him_session) that keeps you signed in for up to 30 days. The app also keeps a copy of your own training data on your device so it works without a signal at the gym. Signing out removes the cookie and that local copy.

Service providers

We use a small number of trusted providers to run the site. They may process information outside Canada, including in the United States, where it may be accessible to authorities under local law.

• Cloudflare: website hosting, security, analytics and the database that stores member training data.
• Resend: delivers contact-form submissions to our inbox by email.
• jsDelivr: delivers the spreadsheet library used when members export their log to Excel, which means the browser connects to its servers at that moment.

How long we keep it

We keep contact requests for as long as needed to respond and to maintain any coaching relationship that follows. Member training data is kept while your account is active and deleted when the account is removed. Records used for rate limiting are deleted automatically within a few hours.

Your choices and rights

You can ask to see the personal information we hold about you, correct it, or have it deleted, and you can withdraw your consent at any time (we may then be unable to provide some services). Members can also download a full copy of their training data from the app at any time. To make a request, email info@healthinmind.ca. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

Changes

We may update this policy from time to time. The date at the top shows when it last changed.

Contact

Questions about this policy? Email info@healthinmind.ca.