Legal

Privacy Policy

Effective date: 20 June 2025

247Coach ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect personal data when you use our platform — and how we handle data on behalf of coaches and their clients.

1. Who we are

247Coach is a software platform for independent coaches. For the purpose of data protection law, we act as a data controller in respect of the personal data of coaches (users of our platform), and as a data processor in respect of client data that coaches collect via the platform.

Contact: hello@frameworkos.co

2. Data we collect about coaches

When you create an account or use 247Coach as a coach, we collect:

  • Account data: name, email address, password (hashed)
  • Profile data: coach code, display name, logo, brand colours, bio
  • Billing data: payment method details (processed by Stripe — we store only a token reference)
  • Usage data: log-ins, feature usage, error logs
  • Content: programs, modules, lessons, files you upload

3. Data we collect about your clients

When your clients access your 247Coach-powered app, we collect and process on your behalf:

  • Name and email address
  • Membership tier and join date
  • Lesson progress and completion data
  • Chat messages between client and coach

As a coach, you are the data controller for your clients' personal data. You are responsible for obtaining any necessary consent and providing clients with a privacy notice.

4. How we use your data

We use personal data to:

  • Provide and operate the 247Coach platform
  • Manage your account and subscription
  • Process payments via Stripe
  • Send transactional emails (account verification, billing receipts)
  • Improve the platform through aggregated, anonymised analytics
  • Respond to support requests
  • Comply with legal obligations

5. Legal bases for processing (GDPR)

If you are located in the EEA or UK, our legal bases for processing are:

  • Contract: processing necessary to provide the service you signed up for
  • Legitimate interests: platform security, fraud prevention, product improvement
  • Legal obligation: tax and financial record-keeping
  • Consent: marketing communications (you can withdraw at any time)

6. Data sharing

We do not sell your personal data. We share data only with the sub-processors listed below, and only to the extent necessary to deliver the service.

7. Sub-processors

247Coach is built on the Base44 platform, and uses the following sub-processors. Where data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards unless an adequacy decision applies.

Sub-processorPurposeJurisdictionSafeguard
Base44 (base44.com)Core platform infrastructure: database, authentication, backend functions, file storage, AI integrationsUnited StatesSCCs (EU–US)
Amazon Web Services (AWS)Cloud hosting and storage (via Base44)United States (us-east-1)SCCs (EU–US)
OpenAIAI content generation (AI program builder feature)United StatesSCCs (EU–US)
Google (Gemini / Vertex AI)AI content generation (AI program builder feature)United StatesSCCs (EU–US)
AnthropicAI content generation (AI program builder feature)United StatesSCCs (EU–US)
StripePayment processing for subscriptions and coach client paymentsUnited States (global infrastructure)SCCs (EU–US); PCI-DSS compliant
ResendTransactional email delivery (via Base44)United StatesSCCs (EU–US)
VercelFrontend hosting and content deliveryUnited States / Global CDNSCCs (EU–US)

We will update this list when we add or change sub-processors. You can contact us at hello@frameworkos.co to request notification of sub-processor changes.

8. Data retention

We retain your personal data for as long as your account is active. After account deletion or subscription cancellation:

  • Account and profile data: deleted within 30 days
  • Program content and client data: deleted within 30 days (you can export before deletion)
  • Billing records: retained for 7 years as required by financial regulations

9. Your rights

Depending on your location, you may have the following rights:

  • Access: request a copy of your personal data
  • Rectification: correct inaccurate data
  • Erasure: request deletion of your data ("right to be forgotten")
  • Portability: receive your data in a machine-readable format
  • Restriction: ask us to limit how we process your data
  • Objection: object to processing based on legitimate interests
  • Withdraw consent: for any processing based on consent

To exercise any right, email us at hello@frameworkos.co. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (e.g. the ICO in the UK, or your national DPA in the EU).

10. Cookies

We use cookies and similar technologies to operate the platform. For full details, see our cookie notice displayed when you first visit the site. Essential cookies are used without consent; analytics cookies require your consent.

You can manage cookie preferences at any time via the link in the website footer.

11. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No system is completely secure — if you believe your data has been compromised, contact us immediately.

12. Children

247Coach is not directed at children under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice at least 14 days before they take effect.

14. Contact

For any privacy-related questions or to exercise your rights, contact us at hello@frameworkos.co.