Privacy Policy | Maui Muscle Mechanic

Last updated July 29, 2026

This explains what Maui Muscle Mechanic collects, why, and who else touches it. It covers mauimusclemechanics.com and the member app at app.mauimusclemechanics.com.

The short version. We collect what we need to coach you and nothing for advertising. There are no analytics, no tracking pixels, and no third-party ad tools anywhere on this site or in the app — one cookie, used to keep you signed in. We have never sold member data and will not.

What we collect

Account — your email address (required, and how you sign in), and optionally your name and phone number.
Health and training information — your health screening (PAR-Q) answers, goals, injury history, limitations, available equipment, whether physician clearance was received, and Tom's coaching notes about you. Food allergies, intolerances and dietary preferences if you give them.
Form-review video — the clips you upload for Tom to review, plus the note you write about what to look at.
Onboarding call recordings — if you have an intake call and consent to it being recorded, the recording and a written transcript.
Meals — your meal plans, shopping list, and what you tell us is in your fridge or pantry.
Community — your board posts and replies, challenge participation and check-ins, and any reports you file.
Membership — your plan, status, renewal date, and codes you have redeemed.
Payment — when card payment is enabled it will be handled by Stripe. Card numbers go to Stripe directly and never reach our servers or Tom.
Technical — a single sign-in cookie (mmm_session), and ordinary server logs such as IP address and request times, kept for security and debugging.

Your health information is the most sensitive thing here and we treat it that way. It is used to program for you and for nothing else.

Why we use it

To give you access to what you're paying for; to write programs, protocols and menus suited to your body and history; to review your form and reply; to run the community board; to send transactional email such as sign-in links, replies to your posts, and service notices; to take payment; to keep the service secure; and to meet our legal and accounting obligations.

We do not use your information to advertise to you, and we do not profile you for anything other than coaching you.

Who else processes it

We keep the list of companies involved deliberately short. Each one only receives what its job requires.

Cloudflare — hosting, database, and video storage and delivery (United States). Form-review video is stored so that it can only be watched through a short-lived signed link, not a public URL.
Resend — sending our email (sign-in links, notifications).
OpenAI — we use OpenAI's API to draft content that Tom then reviews and approves. This means some of your information is sent to OpenAI for processing: exercise clips for drafting coaching notes, the text of your intake and client file when drafting a menu or chart, and the audio of an onboarding call when producing a transcript. Tom reviews and edits every AI draft before it reaches you, and nothing generated is used without his approval.
Spoonacular — recipe and ingredient lookup for the meal-planning features. Ingredient names are sent; your identity is not.
Stripe — payment processing, once card payment is switched on.

We do not sell, rent, or trade your information, and we don't share it with anyone else except where the law requires it or to protect someone's safety.

Who can see what

Tom can see everything you share with him — that's the point of coaching. Other members can see only what you post on the community board, shown under your name or the first part of your email address if you haven't set a name. Your email address, phone number, health information, meal plans and form-review videos are never shown to other members.

Cookies

One cookie: mmm_session, which keeps you signed in. It is strictly necessary for the app to work and it is not used to track you. We set no advertising or analytics cookies, so there is no consent banner to click.

How long we keep it

Account, membership and coaching records are kept while your membership is active and for a reasonable period afterwards, so your history is still there if you come back and so we can meet accounting obligations. Form-review video is moved to cold archive storage roughly 30 days after a review is answered. You can ask us to delete your account and its contents at any time.

Your choices

You can update your name, phone and notification preferences on your account page, and turn off email notifications there. Write to us and we will give you a copy of what we hold, correct anything wrong, or delete your account and its data — other than records we are required to keep. You can delete your own board posts, and ask us to remove ones you can no longer edit.

Security, children, and where data lives

We don't store passwords at all — sign-in is a one-time emailed link, which removes a whole category of risk. Private video requires a signed link to view. Access to member records is limited to Tom and the operator maintaining the system.

The service is not for anyone under 18, and we do not knowingly collect information from children. Our systems are hosted in the United States; if you use the service from elsewhere, your information is processed there.

Changes

If we change this policy in a way that matters, we will say so by email or in the app before it takes effect.

Questions

Email [email protected] or text 808-727-0331.