Privacy Policy

The short version

This policy explains, in plain English, exactly what that means for the Coast iOS and Android apps and for the Coast website (getcoast.fit).

1. Who we are

Coast (formerly JSON.fit) is built and operated by Ryan Novinc (a sole trader based in Australia). In this policy, "Coast", "we", "us" and "our" refer to that operation. "App" means the Coast mobile app on the App Store and Google Play. "Website" means getcoast.fit and its pages.

If you have any privacy question, you can reach us any time at support@json.fit.

2. Data that stays on your device (and is never collected by us)

The app is designed to keep your personal fitness and nutrition information local to your device. We do not receive it, store it on our servers, or send it anywhere, unless you choose to share a plan or send us feedback (see section 3). Because this data is processed only on your device, it is not "collected" by us. This includes:

Fitness & workout data

• Imported workout routines and training programs
• Exercise progress, logs and workout calendar data
• Personal notes and customisations

Nutrition & health data

• Nutrition goals and macro targets
• Health conditions, dietary restrictions and food preferences
• Weight tracking history and measurements
• Meal plans, recipes and cooking instructions
• Food inventory, shopping lists, and any prices you add to them
• Supplement intake, meal timing and meal-prep sessions

App preferences

• App settings and preferences

This information may be included in your device's own backups (for example iCloud or Google backups). Those backups are managed entirely by Apple or Google under their privacy policies — we have no access to them.

3. Data we do collect

a. Anonymous usage & diagnostics analytics

To understand how Coast is actually used — which features help, where people get stuck, whether something is broken — the app and website collect anonymous, non-identifying analytics. This is the only meaningful data we collect about how you use Coast. It typically includes:

• App and website interactions and events (for example screens viewed, features used, and actions like importing a plan or program)
• General device and technical information (device type, operating system, app version, browser type, language)
• An approximate region derived from your IP address (for example country or city level)
• Diagnostic and crash information that helps us fix problems
• A few setup answers from the app, sent once: your reason for downloading (and, if you pick "Something else", the few words you choose to type), your age range (for example 25 to 34, never your exact age), your sex, your goal (gain, lose or keep weight) and your training experience. Never your weight, height, body fat or any other body measurement.

This analytics data is not linked to your identity. We do not attach your name, email, body measurements, or your workouts and meal plans to it, and we do not use it to build an advertising profile of you or to track you across other companies' apps or websites.

Which tools do this depends on where you are:

• In the app: only our own first-party analytics, hosted on Amazon Web Services (AWS) in Sydney. The app generates a random identifier on first launch so events from the same install can be grouped. It is not your name, email, advertising ID or anything else we could link to you. The app contains no third-party analytics or advertising SDKs.
• On the website: Google Analytics (Google LLC) to measure usage (see how Google uses information from sites that use its services), and Microsoft Clarity (Microsoft Corporation) for behavioural analytics including heatmaps and session replays, with sensitive content masked by default (see the Microsoft Privacy Statement).

b. Things you can choose to send us from the app

• Feedback, ratings and bug reports. If you send feedback from the app we receive the text you write, your rating, and the app version, platform, operating system version and device model, so we can reproduce problems. Please don't put personal or health information in feedback.
• Share links. If you share a workout program or meal plan, that plan is uploaded to our server (AWS, Sydney) and given a link. Anyone with the link can view the plan until it expires, seven days after it was created. A meal plan can include the calorie and macro targets it was built for, so only share plans you're happy for others to see. Your exercise logs, weight history and questionnaire answers are never included.

c. Email address (free cookbook / newsletter)

If you choose to enter your email address, on the website or inside the app, to receive the free cookbook and updates, we collect that email so we can send it to you. It is entirely optional — you never have to provide it to use the app. Email subscriptions are handled through our email infrastructure on Amazon Web Services (AWS). You can unsubscribe at any time using the link in any email we send, or by emailing support@json.fit.

d. Purchases

Coast is free. There are currently no subscriptions and no in-app purchases, so we do not process or store any payment information. If we ever add purchases, they will be handled by Apple or Google and we will update this policy first.

4. What we never do

• We don't show ads.
• We don't sell, rent or trade your data.
• We don't build advertising profiles or track you across other companies' apps and websites.
• We don't put personal information (such as your name or email) into our analytics.
• We don't upload your on-device workout, nutrition or health data in the background. Only a plan you choose to share, or feedback you choose to send, ever leaves your device.
• We don't require an account.

5. Cookies, identifiers & your choices

To make analytics work, the website uses cookies and similar technologies. The app uses no cookies and does not use your device's advertising identifier; it uses only the random per-install identifier described above. Both are used only for the anonymous analytics described above, never for advertising.

You can limit or switch off this analytics at any time:

• On the web: install the Google Analytics opt-out browser add-on, or block/clear cookies in your browser.
• In the app: the random analytics identifier is deleted when you delete the app, and reinstalling starts a fresh one.

If you are in the European Economic Area, the United Kingdom or Switzerland, non-essential analytics and cookies are only intended to run where this is permitted under local law. If you would prefer not to be measured at all, you can use the opt-out options above or simply not use the website.

6. Sharing and third parties

We only share data with the service providers we use to run Coast, and only so they can perform their service for us:

• Google (Google Analytics) — website only
• Microsoft (Microsoft Clarity) — website only
• Amazon Web Services (hosting for our own analytics, feedback, share links and email)

We may also disclose information where we are legally required to do so (for example in response to a valid legal request), or to protect the rights, safety or property of Coast, our users or the public. We do not otherwise share your data.

7. International data transfers

Our analytics and email providers (Google, Microsoft and AWS) may process data in the United States and other countries. Where data is transferred internationally, these providers maintain their own legal safeguards for that transfer (for example, certification under the EU–US Data Privacy Framework). Your on-device workout, nutrition and health data does not leave your device, so it is not transferred internationally by us.

8. Data retention

Anonymous analytics data is retained only for limited periods, in line with each provider's settings (for example, Microsoft Clarity retains data for up to 13 months, and Google Analytics retention is time-limited). Share links expire and are deleted seven days after they are created. Feedback you send is kept until we have acted on it, or until you ask us to delete it. If you subscribe to the cookbook/newsletter, we keep your email until you unsubscribe. Data stored on your device remains there until you delete it or uninstall the app.

9. Your privacy rights

You can ask us to access, correct or delete personal information we hold about you, and to object to or restrict how we use it. In practice the personal information we may hold is your email address (if you subscribed), feedback you sent us, and any plan you chose to share (until it expires). Your fitness and nutrition data is on your device, under your control, and you can delete it directly in the app at any time. Email us and we will delete feedback or a share link on request.

To make a request, email support@json.fit. Depending on where you live (for example the EEA, the UK, or California), you may have additional rights under laws such as the GDPR, UK GDPR or CCPA/CPRA; we will honour those rights where they apply. We won't charge you for making a request or treat you differently for exercising your rights.

10. Children's privacy

Coast is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13, and our analytics is not directed at children. If you believe a child has provided us with personal information (for example, by subscribing with an email address), contact support@json.fit and we will delete it.

11. Security

Data on your device is protected by your device's own security (such as your passcode and biometric lock), so keeping your device updated and secured protects that data. Analytics data we collect is transmitted over encrypted (HTTPS/TLS) connections.

Important: Coast is not a substitute for professional medical advice. Always consult a healthcare professional for medical, nutrition or dietary decisions, especially if you have a health condition.

12. Changes to this policy

We may update this policy from time to time. When we do, we'll change the "Last Updated" date above, and significant changes will be communicated through the app or website.

13. Contact

Questions about this policy or your data? Email us at support@json.fit.