Legal

Privacy Policy

This policy explains what information TMLSS collects, why it is collected, where it is stored, who can access it, and how you can have it removed.

Draft — not reviewed by counsel

What the coaching application collects

The application form at /apply collects: your full name, email address, phone number, location, the primary goal you select, your written description of your current situation, what you have already tried, which tracking tools you use, whether you are currently working with a healthcare provider, your selected budget band, and, optionally, how you heard about TMLSS. You also record your consent to the terms shown on that form.

The application is a fit screen, not a clinical intake. Invited coaching clients may separately complete the private 360° intake, which can include health history, symptoms, medications, lifestyle, goals, and other sensitive wellness information they choose to share.

Where it is stored

Applications and private intake records are stored in the encrypted cloud database operated for TMLSS. Access is restricted at the database level and requires an approved administrator account plus an authenticator app. Data is transmitted over TLS.

How long it is kept

Applications are retained for RETENTION_PERIOD_TBD, after which they are deleted. You may request earlier deletion at any time.

Who can access it

Application and intake data is read by the TMLSS founder and approved administrators with a business need. Access to private records is logged. The information is not sold, rented or shared for advertising. It is shared with service providers only to the extent required to operate the site (hosting, database, email delivery, analytics), each of which processes data on our behalf.

Nevada consumer health data rights

Where Nevada consumer health data law applies, you may request access, correction, deletion, or withdrawal of consent by emailing CONTACT_EMAIL. If we deny a request, you may appeal using the same address with the subject “Privacy appeal.” We do not use geofencing around healthcare facilities to identify, track, or message people regarding health information. TMLSS requires service providers that process this information to limit use to contracted services and to protect or delete it as directed.

Health goals and protected health information

TMLSS is a coaching practice, not a healthcare provider, health plan or healthcare clearinghouse. TMLSS is therefore not a covered entity under HIPAA, and the goal and lifestyle information you provide to TMLSS is not treated as protected health information. Please do not send clinical records, lab results or diagnostic details to TMLSS.

Clinical data held by TelaCure

Clinical evaluation, lab ordering and prescribing are provided by TelaCure, an independent licensed provider. Any information you give TelaCure is collected on TelaCure's own infrastructure and is governed by TelaCure's privacy policy and notice of privacy practices, not by this policy. See our partnership disclosure.

Accounts and Google sign-in

If you create an account, authentication is handled by Supabase Auth. Signing in with Google shares your name, email address and Google account identifier with TMLSS so that an account can be created and matched on return visits. TMLSS never receives your Google password and requests no access to your Google account contents. You can revoke the connection in your Google account settings at any time.

Analytics

This site loads a first-party analytics script that posts pageview and basic interaction events to Tinybird. These events include page path, referrer, approximate location derived from IP, device and browser type, and a short-lived visitor identifier. They are used to understand traffic, not to build advertising profiles.

Cookies and local storage

Cookies and browser storage are used for two purposes: keeping you signed in if you have an account, and the analytics measurement described above. No third-party advertising cookies are set.

Your choices and deletion requests

You may request a copy of your data, a correction, or deletion by emailing CONTACT_EMAIL. Deletion requests for application data are honoured promptly. Requests relating to clinical records held by TelaCure must be made to TelaCure directly.

Changes

This policy may be updated as the practice changes. Material changes will be reflected on this page.