Privacy policy

OnlyOne Plateform is responsible for the personal information collected by the OnlyOne platform. It is an independent business, not associated with any coaching business, including OnlyOne Coaching.

• Address : 80 Av. Diagonal, Calle 39, 77712 Playa del Carmen, Quintana Roo, México
• Person in charge of the protection of personal information : Eric Tousignant
• Email : onlyonecoachingapp@gmail.com

Write to this address with any question, request or complaint about your information.

Your coach is an independent business. Your coach is responsible for how they use, in your follow-up, the information you share with them, under their own follow-up terms. OnlyOne Plateform hosts this information and processes it to provide them with the tool, with the protections described here.

We only collect what the service needs, depending on what you use:

• Your account : name, email, password (stored encrypted, nobody can read it) and language. If you sign in with Google: the name and email of your Google account.
• The “Build your AI” questionnaire : name, email, phone (optional) and your answers: goal, age, sex, weight, height, level, training days, equipment, injuries, foods to avoid, restrictions, supplements, sleep and stress.
• Your health and progress : measurements, progress photos, check-ins, food journal, workouts, sleep, menstrual cycle if you track it, conditions, medications, allergies, results and documents you add (blood work, for example) and movement videos.
• Your conversations : your messages with your coach and with the AI coach, and the photos or documents you send there.
• Your payments : the plan you choose, dates, amounts and the PayPal transaction number. We never see your card number.
• Technical data : IP address and device type in our hosting providers' logs, a notification token if you turn on notifications and site performance measurements that do not identify you.
• Questionnaire measurement : a random identifier kept in your browser counts the steps reached (visit, start, profile ready). It contains neither your name nor your email.

Health information is sensitive information: we only process it with your express consent (section 4).

What the service needs:

• create and manage your account;
• build and run your AI coach: answers, plans, menus, recipes and analyses tailored to your profile;
• let your coach, if you have one, follow your progress and message you;
• process your payments and open the access of your plan;
• send you emails about your account (access, payments, invitations);
• protect the platform, prevent abuse and measure the questionnaire journey without identifying anyone.

What you can refuse without losing the service:

• reminder emails for 6 months at most after the questionnaire, the creation of a free account or the end of a subscription;
• OnlyOne tips and offers by email, only if you checked the box for it.

To refuse: click “Stop these emails” at the bottom of an email, or write to onlyonecoachingapp@gmail.com.

We only use your health information with your express consent, given with a checkbox in the questionnaire, at sign up or in your client space.

• It is used only for your coaching: your coach, the AI coach and the tools that adapt your plans.
• It is never sold, never used for advertising and never given to an employer or an insurer.
• The AI coach and the coaches do not replace a health professional. In an emergency, call 911 or your country's emergency number.

You can withdraw your consent at any time by deleting your account or by writing to us. Without this information, we can no longer adapt your coaching to your health.

The AI coach's answers, plans, menus and targets are produced automatically by an artificial intelligence model (Claude, by Anthropic) from your profile. Some targets, such as calories, are calculated with recognized formulas. No legal, financial or medical decision is made this way.

You can ask us what information was used, the reasons and main factors behind a recommendation, have your profile corrected and ask a member of our team to review a result. Write to onlyonecoachingapp@gmail.com.

We do not train any artificial intelligence model with your information, and Anthropic does not use the information we send it to train its models.

Within OnlyOne:

• Your coach : and, if your coach is part of a team, the team coaches your file is entrusted to: profile, check-ins, plans, journal and messages.
• The person you link your account with : only if you both accept. Their tools take your allergies, preferences and targets into account for shared meals and workouts. They do not see your weight, photos, check-ins or conversations, and your conditions, medications and injuries are respected without being named.
• A change of coach : if you move from your coach to OnlyOne AI, only the information you authorize is transferred.

Our service providers, who process information for us, following our instructions and with confidentiality and security commitments:

• Supabase (United States) : database, accounts and files.
• Vercel (United States) : website hosting and performance measurement.
• Anthropic (United States) : the artificial intelligence model that produces answers and plans.
• Resend (United States) : email delivery.
• Cloudflare (United States) : hosting and playback of the exercise demonstration videos uploaded by OnlyOne and the coaches.
• HighLevel (United States) : our contact follow up tool: name, email, phone and steps reached (questionnaire, account, subscription). Never your health answers.
• PayPal : payments.
• Google : sign in with Google and, for coaches who choose it, sync of their Google Calendar (section 7). Playback of the YouTube videos a coach adds to an exercise: the video only loads when you open it, through YouTube's cookie-free player.
• Twilio (United States) : WhatsApp notifications, only if you turn them on.
• Strava : only if you connect your Strava account.
• Apple, Google and Mozilla : delivery of the notifications you turn on on your device.

We do not sell any personal information and share nothing for advertising. We disclose information to an authority only when the law requires it.

A coach may choose to connect their Google Calendar. We then read the events of their primary calendar (title, time, place, video call link) to show them in their own dashboard and, when they ask, we add the events they create in the OnlyOne calendar.

We do not keep their Google events on our servers, we share them with nobody and we use them neither for advertising nor to train artificial intelligence models. We only keep the connection token provided by Google, available to the server only. Disconnecting takes one click in the app (the token is then revoked and deleted) or can be done in the Google account security settings.

OnlyOne's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Our main service providers are in the United States: your information is stored and processed there. The laws of that country may differ from those of Quebec, Canada, Mexico or your country, and United States authorities may access it under their laws. Before choosing a provider, we check its security and confidentiality safeguards.

In Mexico, these transmissions to our providers and to your coach are necessary for the service you request. Any other transfer would first be submitted to you.

• Your account, your profile and the AI coach's notebook : as long as your account exists.
• Conversations with the AI coach : deleted automatically 30 days after the conversation's last activity.
• The questionnaire without an account : if you answer “No thanks”, your answers are deleted right away. Otherwise they are kept for at most 12 months so you can create your account, then deleted. Your name and email are deleted at the same time, unless you agreed to receive our tips and offers.
• After you delete your account : your information is deleted from our active systems right away, including your conversations, the questionnaire and your contact record in our follow up tool. Backup copies are overwritten within 30 days at most.
• Unsubscribes : the address of a person who unsubscribed stays on a suppression list, only to respect their request.
• Reminder tracking : the address and the number of reminders already sent, to respect the limit; deleted 12 months after the last reminder.
• Technical logs : a few days to a few weeks at our hosting providers.
• Payments : PayPal keeps its own transaction records under its legal obligations.

Wherever you are, you can:

• Access : know what information we hold about you and receive a copy.
• Correct : have inaccurate or incomplete information corrected. Most of it can be edited directly in the app.
• Delete : have your account and information erased: Settings, then “Delete my account”.
• Object or withdraw your consent : refuse a specific use, such as reminder or offer emails, or withdraw your consent going forward.
• Portability : receive your information in a common format to take it elsewhere.

In Mexico, these are your ARCO rights (access, rectification, cancellation and opposition). In Quebec, these are the rights under Law 25.

To exercise them, write to onlyonecoachingapp@gmail.com from your account email. Include your name, the right you are exercising and the information concerned. We may ask you to confirm your identity. We answer within 20 business days of receiving your request, and requests are free.

If our answer does not satisfy you, you can contact:

• In Quebec : the Commission d'accès à l'information, https://www.cai.gouv.qc.ca
• Elsewhere in Canada : the Office of the Privacy Commissioner of Canada, https://www.priv.gc.ca
• In Mexico : the federal personal data protection authority (Secretaría Anticorrupción y Buen Gobierno).

• Service emails : account access, payments and confirmations. They are sent as long as your account exists.
• Reminders, offers and invitations : every email says why you receive it, shows our postal address and has a one click unsubscribe link. Your request applies right away, in our contact follow up tool as well.

• Essential : your sign in session and your preferences (language, display).
• Local storage : the questionnaire's random identifier, the current step and a pending invitation while you sign in.

No advertising cookies, no social media pixels, no third party tracking.

Encrypted connection (HTTPS), encrypted passwords, access rules in the database (each person reads only what concerns them), service keys kept on the server and invitation tokens stored as fingerprints. Our team's access is limited to what is necessary.

If a confidentiality incident presents a risk of serious harm, we promptly notify the people affected and the relevant authorities, and we record every incident in a register.

The self service AI coach is reserved for people aged 18 and over. A minor can be followed by a coach only with the agreement of a parent or guardian. If you believe a minor gave us information without that agreement, write to us: we will delete it.

Every version is dated. If a change affects how we use your information, we let you know in the app or by email before it applies, and we ask for your consent again when the law requires it.

Questions: onlyonecoachingapp@gmail.com. OnlyOne Plateform, 80 Av. Diagonal, Calle 39, 77712 Playa del Carmen, Quintana Roo, México.