Privacy Policy

1. Introduction

At Output Performance ("we," "us," or "our"), we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect your data when you visit our website at outputperformance.com, create an account, submit forms, use our services, or communicate with us via email, SMS, or our AI chat assistant.

2. Data We Collect

We may collect the following types of information depending on how you interact with us:

Account & Profile Information

Name, email address, and password
Phone number (optional)
Date of birth and gender
Health and fitness data you choose to provide (height, body composition, resting heart rate, blood pressure, injuries or movement limitations)
Communication preferences and opt-in selections

Form Submissions

Contact form: name, email, phone, message, preferred trainer
Booking requests: name, email, phone, service selection, scheduling preferences, notes
Event registration: name, email, phone, guest count
Chat lead capture: name, email, phone, conversation context

Health & Activity Data

Health Score responses and calculated scores
Weight entries and personal records
Fitness goals
Points earned and redeemed through our rewards program

Payment Information

Payment details are processed directly by Stripe and are never stored on our servers. We retain only the transaction reference, purchase status, and amount for our records.

Automatically Collected Data

IP address
Browser type and user agent
Pages visited, time spent, and referring URL
Cookies and tracking data used for analytics and session management

3. How We Use Your Data

We use your information to:

Create and manage your account
Schedule appointments and process booking requests
Deliver your Health Score results and track your fitness progress over time
Operate our points and rewards program
Send service confirmations, appointment reminders, and event registration confirmations
Send promotional offers, updates, and marketing communications (only with your consent)
Send text message notifications (only with your explicit SMS opt-in consent)
Provide AI-powered chat assistance and personalized health insights
Process payments for services and subscriptions
Improve our website, services, and customer experience
Respond to your inquiries and provide customer support
Comply with legal obligations

4. Data Sharing

We do not sell, rent, or trade your personal information.

We may share data only in the following limited scenarios:

Service providers: With trusted third-party services that help us operate (listed in Section 9 below), solely for the purpose of delivering our services to you
Legal requirements: When required by law, subpoena, or legal process
Safety: To protect the rights, safety, or property of Output Performance, our users, or the public

Important: Mobile opt-in data, SMS consent, and phone numbers collected for SMS communication purposes will not be shared with any third party or affiliates for marketing purposes.

5. Your Rights

You have the right to:

Access the personal data we hold about you
Correct or update your personal information through your account dashboard
Request deletion of your account and associated data
Opt out of marketing communications at any time via your account settings or by contacting us
Opt out of SMS by replying STOP to any text message or updating your communication preferences

To exercise any of these rights, contact us at:

Email: info@outputperformance.com
Phone: (314) 735-2595

6. Data Protection

We implement industry-standard security measures to protect your data, including:

Encrypted password storage (bcrypt hashing)
Secure, HttpOnly session cookies with SameSite protection
HTTPS encryption for all data in transit
Payment processing handled entirely by PCI-compliant Stripe — we never see or store your card details

While we strive to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Cookies & Tracking

We use cookies and similar technologies to operate our site and understand how it is used. Types of cookies we use include:

Essential cookies: Required for core functionality, including your login session (op_session)
Analytics cookies: Google Analytics cookies to measure website traffic, page views, and user behavior in aggregate

You can disable cookies through your browser settings. Blocking essential cookies may prevent you from logging in or using account features.

8. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those external sites. We encourage you to review their privacy policies before providing any personal information.

9. Third-Party Service Providers

We use the following third-party services to operate our website and deliver our services. Each may collect data as described below:

Google Analytics

We use Google Analytics to understand how visitors interact with our website. Google may collect information about your device, browser, approximate location, and browsing behavior through cookies. You can opt out using the Google Analytics Opt-out Browser Add-on. See Google's Privacy Policy.

Stripe

We use Stripe to process payments for training consultations and meal plan subscriptions. Stripe collects and processes your payment information directly — we never store your card number or payment credentials. See Stripe's Privacy Policy.

Twilio

We use Twilio to send SMS text messages (appointment reminders, notifications, and promotional messages for users who opt in). Twilio processes your phone number and message content on our behalf. See Twilio's Privacy Policy. For details on our SMS program, see our SMS Terms & Conditions.

Resend

We use Resend to send transactional and notification emails (account verification, booking confirmations, event confirmations). Resend processes your email address and message content on our behalf. See Resend's Privacy Policy.

Anthropic (Claude AI)

We use Anthropic's Claude AI to power our chat assistant ("Riley") and provide personalized health score insights. When you interact with the chat or request AI-generated health analysis, your messages and relevant health data may be processed by Anthropic to generate responses. We do not use your data to train AI models. See Anthropic's Privacy Policy.

Supabase

We use Supabase to host our PostgreSQL database where your account and profile data is stored. Supabase provides secure, SOC2-compliant infrastructure. See Supabase's Privacy Policy.

Vercel

Our website is hosted on Vercel. Vercel may collect standard server logs including IP addresses and request data. See Vercel's Privacy Policy.

Mindbody

We use Mindbody for appointment scheduling and booking management. When you book a training session, your contact information and appointment details may be shared with Mindbody to process the booking. See Mindbody's Privacy Policy.

10. Children's Privacy

Our website and services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it. Minors between 13 and 18 should use our services only with parental or guardian consent.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically.

12. Contact Information

If you have any questions about this Privacy Policy or how we handle your data, please contact us: