Privacy policy

Last updated: September 11, 2026

Holden Health LLC provides fitness and wellness coaching. This policy covers our website, member portal, public app demo, and information we receive when you contact us or take part in coaching.

Information we collect

• Contact and account details: your name, email address, phone number, age, sign-in information, communication preferences, and emergency contact details you provide.
• Requests and memberships: inquiries, consultation preferences, class selections, attendance, enrollment and payment status, and accepted acknowledgments.
• Coaching and health information: fitness goals, injuries, pain, relevant medical conditions or medications, exercise precautions, lifestyle answers, workout activity and feedback, habit check-ins, personal wins, reflections, and coach notes or recaps.
• Technical information: browser and device information, pages used, and service logs needed to operate, troubleshoot, and protect our services.

Please share only what Kelsey needs to coach you safely. Do not put medical details in a general contact, booking, or registration form. Use the confidential intake or a check-in method Kelsey provides. If you supply an emergency contact, let that person know you have shared their details with Holden Health.

How we use your information

We use your information to respond to requests, manage accounts and memberships, arrange classes and consultations, process payments, tailor coaching, review exercise precautions, track progress, provide support, and keep necessary business records. We also use technical information to maintain security and resolve service problems.

Optional newsletters and marketing emails are separate from messages needed to manage your account or deliver a service you requested. You can unsubscribe from marketing using the link in those emails. We do not sell your personal information.

Who can access coaching information

Access to member coaching records is restricted to the member and authorized Holden Health staff as appropriate to their role. Staff may also keep private coaching drafts and review notes. Service providers process information needed to operate our services. A progress story in your portal is not a public testimonial; we will ask for separate permission before using your name, story, or photos in marketing.

If you choose to join a group community, other participants may see your profile, contact details, or messages according to that service’s settings. Do not share private health details in a group chat. Contact Kelsey privately for individual coaching concerns.

Services that help us operate

• Vercel: website and portal hosting, technical logs, and website usage analytics.
• Supabase: account authentication and storage of form submissions, subscriptions, and member and coaching records.
• Resend: delivery of account, service, and optional marketing emails.
• Stripe: online payment processing. We keep transaction references and payment status, not full bank account or card credentials. Venmo processes payments made through its service.
• Google services: Gmail for correspondence and Google Forms for external check-ins Kelsey shares. Answers submitted through those forms are processed by Google and available to the authorized people managing the form.
• Zoom: consultations and remote classes. If Kelsey shares a WhatsApp community invitation, WhatsApp processes participation in that optional group.

These providers have their own privacy policies and may process information outside your state or country. We may also disclose information when required by law or when reasonably necessary to protect people, investigate misuse, or resolve a dispute.

Analytics and session recordings

We use PostHog on our public website and in the member portal to understand usage and diagnose usability problems. Public website recordings are anonymous. Session replay records visible page content, images, interactions and non-password form entries. Password fields are hidden. Recordings inside the portal may therefore contain messages, health and coaching information, and other details displayed or entered during your visit. Console logs, network request bodies and headers are not recorded. When you sign in, we send your account identifier and saved name to PostHog so we can associate activity and recordings with your member account and keep the displayed name up to date. We do not send your email address in this identification. Signing out clears the browser’s analytics identity. Separate server events use pseudonymous identifiers and limited operational information, such as a successful save or checkout status; they do not include messages, intake answers, goals or other submitted text. The website and portal use browser session storage for this functionality.

We use Vercel analytics to understand public website usage. As of this update, LogRocket session recording and event tracking are disabled in the portal. Previously, LogRocket received member account IDs, names and email addresses, along with browser and interaction information. The configuration masked text, inputs and images and disabled network and console capture. Disabling new collection does not itself delete records previously stored by that provider. Contact us using the data-request instructions below if you have questions about those records.

Cookies, browser storage, and the demo

Cookies and browser storage support sign-in, preview access, preferences, and app features. A first-week goal selection may be remembered in a cookie for 30 days. Workout recovery and sound preferences may remain on your device until replaced or cleared.

The public demo stores practice entries in that browser rather than your member coaching record. Avoid entering real medical details in the demo. Use Reset demo to clear its practice entries, or clear site data through your browser settings. Clearing browser storage does not delete records already saved to your member account. Sign out when using a shared device.

How long we keep information

Retention depends on the record and why it is needed. We consider whether your account or coaching relationship is active, whether information is needed for ongoing support or safety, and whether payment, tax, legal, or dispute-related obligations require us to keep a record. Information in provider logs and backups may remain until those systems’ retention periods expire. Ending a membership does not automatically delete your account or coaching history.

Review, correction, and deletion requests

To request a copy of your information, correct a record, or ask for account or data deletion, email HoldenHealth.Coaching@gmail.com, preferably from the address associated with your account. Tell us what you want to review, correct, or delete. Do not include passwords, payment credentials, or detailed medical information in your request.

We may need to verify your identity before releasing or changing records. We will explain any information we need to retain and why, and consider relevant records held by our service providers. A deletion request is separate from canceling a membership or requesting a refund; tell Kelsey if you also want to end your coaching service. You may have additional rights depending on where you live.

Age and security

Direct enrollment is currently for adults age 18 or older. The portal is not intended for children. If you believe a child has submitted personal information, contact us so we can review and address it.

We use account authentication and access restrictions to protect member records. No online system can guarantee complete security. If you suspect unauthorized access to your account, contact us promptly. Fitness and wellness coaching is not medical care; this policy does not claim that the service is HIPAA compliant.

Questions and updates

Contact Holden Health LLC at HoldenHealth.Coaching@gmail.com about this policy or your information. We will update this page as practices change and show the revision date above.