Privacy Policy

1. Who we are and what this covers

Shralp is operated by Joshua Schwarzapel, an individual doing business as Shralp! (“Shralp,” “we,” “us,” or “our”). This policy describes how we handle information for the Shralp coaching service: the flowsurf.site website, coaching conversations delivered by text message (SMS/RCS), and the Shralp! iPhone app (together, the “Service”). The Service is offered in the United States, for adults 18 and older. Shralp provides general fitness and surf education — not medical advice or medical care. Our Terms of Service govern your use of the Service.

2. Information we collect

Information you provide:

• Signup details: first name, US mobile number, and your consent choices (with the consent text version and time). If you joined through an earlier signup flow, we may also retain the email address you provided then.
• Coaching profile: city or home surf area and timezone, surfing ability and goals, fitness level, training location and equipment, schedule preferences, and — if you choose to share them — injuries or physical limitations (see Section 3).
• Conversations: your messages with the coach and the coach’s replies, including requests, feedback, and support exchanges.
• Workout activity: assigned workouts, exercises you complete, skip, flag, or swap, and performance details you log (such as reps, weight, or time).

Information collected automatically:

• The IP address used at signup, stored with your consent record.
• Device information from the iPhone app: an install identifier and a push notification token used to deliver workouts.
• Messaging metadata: carrier capability for RCS, message delivery status, and related routing information.
• Service logs and diagnostics: requests, errors, and records of the automated coaching pipeline (including AI model calls) used for reliability, security, and quality.

Information from other sources: carrier and messaging-capability lookups from our messaging provider, and city or map lookups from a places/geocoding provider when you enter your location. We do not buy personal information from data brokers.

3. Health-related information

If you tell the coach about an injury or physical limitation, we store it and use it for one purpose: adjusting your training — avoiding or lightening load on the affected area and checking in on it over time. Sharing this information is optional; the Service works without it, but cannot account for what you do not share. We collect only the health-related information you volunteer, use it only to provide the coaching you requested, never use it for advertising, never sell it, and share it only with the service providers that process it on our behalf (Section 6). You can view, correct, or delete it at any time by asking your coach or contacting us (Section 8).

4. How we use information

• Provide, personalize, and deliver coaching, workouts, and check-ins.
• Send the recurring messages you requested and honor STOP, START, and HELP.
• Apply safety rules (for example, filtering exercises that would load a reported injury) and route flagged conversations for limited human review.
• Respond to support requests.
• Maintain security, prevent misuse, and diagnose errors.
• Evaluate and improve the Service, including reviewing conversation and workout logs to fix problems and improve coaching quality.
• Keep consent and compliance records required to honor your messaging choices.
• If we introduce paid plans, process payments through a dedicated payment processor — full card numbers will never be stored on our servers.

We do not sell personal information, and we do not use it for third-party or cross-context behavioral advertising.

5. AI processing

The coach is automated. Your messages and coaching profile are processed by third-party artificial-intelligence providers on our behalf to generate replies and workouts. These providers act as our service providers: our agreements with them restrict use of your information to providing the Service and do not permit them to use it to train their own models. Automated safety filters run on coaching conversations, and a human may review flagged or sampled conversations for safety, support, and quality.

6. When information is shared

• Service providers that run Shralp for us: hosting and databases, text-message delivery, AI model providers, email delivery, places/geocoding, and error monitoring or analytics. They may use the information only to perform those services. Mobile carriers and messaging platforms also process your messages under their own terms.
• Legal and safety: if required by law, legal process, or to protect the rights, safety, or property of users, the public, or Shralp.
• Business transfer: if Shralp is reorganized (for example, into an LLC), acquired, or sold, your information may transfer to the successor under this policy, and we will notify you of material changes.
• At your direction.

That is the whole list. We do not sell or rent personal information to anyone.

7. Retention and deletion

We keep your profile, conversations, and workout history while you use the Service so the coach has context. If you stop messaging, records are retained so you can pick up where you left off, unless you ask us to delete them.

You can request deletion at any time through your coaching conversation or the contact below. After a verified deletion request, we remove your profile, email, conversations, workouts, activity, and related operational records. We retain one limited consent record — your mobile number, consent text version, and consent timestamps, with the email and IP address removed — so we can document and honor your messaging choices. Short-lived backups and records required for law, security, or fraud prevention age out on their normal schedule.

8. Your rights and choices

• Messaging: reply STOP to cancel coaching messages (one confirmation follows), START to resume, or HELP for help.
• Access and copies: ask us for the information we hold about you and we will provide a copy.
• Correction: tell your coach or email us to fix anything — profile, injuries, goals, or contact details.
• Deletion: ask your coach or email us, as described in Section 7.

We honor these requests for all users, whatever state you live in, and we will not discriminate against you for exercising them. We verify requests using the mobile number or email on your account. Because we do not sell or share personal information for behavioral advertising, there is no sale or ad-sharing to opt out of.

9. Children

The Service is for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that a user is under 18, we will terminate the account and delete the associated personal information. If you believe someone under 18 is using Shralp, please contact us.

10. The iPhone app

The Shralp! app registers a device identifier and push token so your workouts can be delivered to your phone. It sends the workout activity described in Section 2 so your coaching and exercise history stay current. Exercise demonstration videos are cached on your device for offline playback and cleared on a rolling schedule. The app does not use Apple HealthKit, does not access your camera, microphone, or contacts, and does not track you across other companies’ apps or websites.

11. Security

We use reasonable technical and organizational safeguards to protect your information, including encryption in transit, access controls, and audit logs. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as required by law. Please report suspected security issues to the contact below.

12. Changes to this policy

When we change this policy, we will update the date above. For material changes — for example, new categories of data or new ways of sharing — we will also notify you by coaching message or email before the change takes effect.

13. Contact, requests, and complaints

Use the contact below for privacy questions, access or deletion requests, and complaints. We aim to respond within 30 days.

Contact Shralp! at joschwa9@gmail.com.