Your data, plainly.

Last updated November 11, 2026

MindBodyBoat is an online strength and conditioning coaching service for sailors and outdoor athletes, run by Julian Soto in California. This page explains what I collect, why, who else handles it, and how I keep it safe. Questions or requests: mindbodyboat2@gmail.com.

What I collect

Your intake form	Name, email, mobile number (optional), age range, your goals, what you sail or train for, upcoming events, injuries or physical limits, where you train and what equipment you have, the support you want, and how you heard about MindBodyBoat. For under-18s, a parent's name and contact details.
Calls	When you book a call: your name, email and the time. Calls run on Google Meet and may be recorded and transcribed by note-taking tools so I can build your program from what you said. I'll tell you at the start of the call, and you can ask me not to record.
The app	Your name, email and the PIN you choose; health screening answers; your program, workouts and what you log (sets, weights, notes); check-ins such as sleep, stress, pain and body weight; food you log; voice notes you record; and your feedback. If you choose to connect Strava, your Strava activities.
Payments	Stripe handles your card. I see your name, email, plan, and whether a payment went through, never your full card number.
The website	Counts of page visits and the link tag you arrived from (like `?src=instagram`), counted without cookies and without storing your IP address. Vercel Web Analytics gives me cookie-free totals. The app saves your sign-in and settings on your own device.
Messages	Emails you send me and my replies.

How I use it

To decide whether coaching is a fit, build your program around your goals, events and limits, and adjust it as you train.
To coach you: review your logs and check-ins, and reply to you.
To bill you and keep records of payments.
To send emails about your coaching, and app notifications you turn on.
To improve the website and app, using counts rather than tracking individuals.

I don't sell your information, I don't use it for advertising, and I don't share it with anyone for their own marketing.

Who else handles it

I use these service providers to run MindBodyBoat. Each gets only what it needs to do its job, under its own privacy and security terms:

Tally	Intake and other forms
Google	Calendar bookings, Meet calls, Gmail, call notes (Gemini) and Drive storage
Granola	Call notes and transcripts
Stripe	Payments and subscriptions
Supabase	The app's database
Vercel	Hosting for the website and app, and visit totals
Anthropic (Claude)	AI that reads your intake and call notes to help me check fit and draft your offer, program and emails; turns food logs into nutrition numbers; and summarizes your logs and check-ins. I review and approve everything it drafts before it reaches you or shapes your coaching.
OpenAI	Turns your voice notes into text
Resend	Emails sent by the app
Composio	Connects my coaching tools to Gmail to send the emails I approve
Strava	Only if you connect it

Your information reaches these providers over encrypted connections (HTTPS), through their own apps and APIs. The AI providers above process it under business terms that don't let them train their models on it. If MindBodyBoat assigns you a second coach, they see your program and logs to coach you, under the same rules. I'll also disclose information if the law requires it, or to protect someone's safety.

How I keep it safe

Everything travels over HTTPS.
The app's database only lets each client see their own data, and coach tools need separate keys.
Card details stay with Stripe and never touch my systems.
Only I, and a coach assigned to you, can see your coaching data. The accounts that hold it are protected with strong passwords and two-step sign-in where offered.

No system is perfectly secure. If a breach affects your information, I'll tell you promptly.

How long I keep it

I keep your coaching data while you're a client and for up to two years after, so you can come back without starting over. After that I delete it or strip out anything that identifies you. Payment records are kept as long as tax law requires. Ask me to delete your data sooner and I will, apart from what the law makes me keep.

Teens

Athletes aged 13 to 17 can join only with a parent or guardian's consent, and the program stays hidden until the parent agrees. I don't accept anyone under 13. A parent can ask to see, correct or delete their teen's information at any time.

Your choices and rights

Ask for a copy of your information, or ask me to correct or delete it.
Ask me not to record a call.
Disconnect Strava or turn off notifications in the app at any time.
California residents have the right to know what I collect, and to delete and correct it. I don't sell or share personal information for advertising.

Email mindbodyboat2@gmail.com and I'll reply within 30 days.

Changes

If I change this policy, I'll update the date at the top. If a change matters to how your data is used, I'll email current clients first.