Privacy Policy

Overview

Tyzra is a platform for online physique coaches and their clients. This policy explains what data we collect, how we use it, and how we protect it. We keep things simple: we collect only what we need to run the service, and we never sell your data.

Data We Collect

• Account information: email address and display name when you sign up.
• Check-in data: text answers, numeric entries, and other responses you submit through check-in forms.
• Progress photos: images you upload as part of your check-ins.
• Workout logs: session completions, exercise sets, reps, and other training data you record.
• Usage data: basic server logs such as IP address, browser type, and pages visited, collected automatically when you use the service.

How We Use Your Data

• To provide the core service: connecting coaches with clients, managing check-ins, and tracking workouts.
• To authenticate your account and maintain your session.
• To improve the product and fix issues.

We do not sell your personal data. We do not use your data for advertising. We do not share your data with third parties except as described below.

Third-Party Services

We rely on the following providers to operate Tyzra:

• Supabase -- database hosting and authentication.
• Cloudflare R2 -- secure storage for progress photos.
• Vercel -- application hosting.

Each provider processes data only as needed to deliver their services. We do not share your data with any other third parties.

Cookies and Sessions

Tyzra uses only essential cookies required for authentication. We do not use tracking cookies, analytics cookies, or advertising cookies. Your session cookie keeps you signed in and is removed when you log out.

Data Retention

We keep your data for as long as your account is active. Check-in history, progress photos, and workout logs are retained so you and your coach can review historical progress. If you delete your account, we will remove your personal data within 30 days.

Data Security

All data is transmitted over HTTPS. Progress photos are stored using signed URLs that expire, so photos cannot be accessed without authorization. Database access is controlled by row-level security policies that restrict data access to authorized users.

Your Rights

You can:

• Request a copy of your personal data.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.

To exercise any of these rights, contact us at the email below.

Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you through the application. Continued use of Tyzra after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or want to request data deletion, email us at support@tyzra.com.