Privacy Policy

Callout is a contest-prep coaching app. This policy covers everyone who uses it: the athlete on the mobile app, and the coach using the web dashboard here. It describes what Callout collects, why, who else can see it, how long it is kept, and the controls you have over it.

Callout is operated by Kristýna Bodjona Michková, a self-employed trader registered in the Czech Republic (IČO 75568101), Lány u Dašic 65, 530 02 Lány u Dašic, Czech Republic. She is the controller of the personal data described in this policy. You can reach her about anything in it at kristyna.michkova@gmail.com.

Callout is built around a single account: an email address and a one-time code, no password to leak. Everything below is scoped to your account and readable only by you, unless a section below says otherwise.

Your profile. Show name, division and federation, target show date, display name, gender, birthday, units, height, goals and focus areas, and your avatar photo.

Check-ins and health information. The training, nutrition and body metrics you log on your coach's check-in schedule, and any health information you choose to add to your health profile. This is treated as health data throughout, and it needs its own explicit consent before Callout stores or reads any of it.

Apple Health and Fitness. If you connect Apple Health, Callout stores what it reads from HealthKit: your daily steps, active energy, resting heart rate, sleep, body weight, and workouts. This is treated as health data, gated by its own consent, and read by your linked human coach and by the AI coaches' model providers the same way your other health information is. Disconnecting Apple Health erases every row Callout stored from it right away. It is never used for advertising.

Progress and posing photos. Photos you submit are stripped of location and camera metadata before they are stored. Posing photos submitted for written feedback are analyzed by an AI coach and stored in your account; the app never generates or edits an image of your body, only text and correction markers laid over your own photo. The live Posing Room is different: each camera frame is analyzed the instant it is taken and discarded from the server the moment the correction comes back. No frame from a live session is ever stored on Callout's servers. The before-and-after photos you see afterward are saved only on your own phone, and deleting them there is final: there is no copy on Callout's servers to fall back on.

Meal photos. A meal photo and the calorie and macro numbers estimated from it are treated as health data. They are stored privately in your account, stripped of location and camera metadata, and a coach you are actively linked with can read them.

Your journal. Free-form entries you write about training, in your own words, on your own schedule.

Coach conversations and coach memory. Your messages with Callout's AI coaches, including turns you later edit (the earlier version is kept, not erased, because Callout does not silently rewrite what was said). Callout also extracts a small set of long-term facts from those conversations, the "athlete memory," so a coach can remember context across sessions without rereading your whole history each time.

Messages with your human coach. The direct thread between you and a coach you have linked with, including message edits (a 15-minute window, either side) and reactions. If either of you blocks the other in that thread, Callout records who blocked it, when, and the reason if one was given, and tells Callout's team so it can check for abuse; the reason is never shown to the other person.

Voice messages. A voice message is recorded only when you use the microphone button and choose to send it. The recording is stored with the conversation it belongs to, like a photo: in a thread with your coach, your coach can play it; sent to one of Callout's AI coaches, it is first turned into text, and only that text is what the coach reads, while the recording stays in your conversation so you can play it back. Deleting a message for everyone within 15 minutes removes it from both sides; deleting it for yourself or clearing a chat removes it from your view only. Recordings are removed with your account.

Calls with your coach. When you or your coach start an audio or video call, Callout records that the call happened: who started it, when, whether it was audio or video, whether it was answered, and how long it lasted. Calls are never recorded: Callout keeps no audio, no video and no transcript.

Training and nutrition plans. Every plan a coach or an AI coach has built for you, including earlier versions once a plan is revised.

Reminders. Your check-in reminder schedule is a local notification set up on your own phone. It is never sent to Callout's servers at all.

Feedback you send. When you send feedback from the app or the website, Callout stores what you wrote, the kind you chose, an optional screenshot you attach yourself, and a few facts that help us understand it: the app or browser version, the device and system, the language, the screen you came from, and whether you use Callout as an athlete or a coach. Only Callout's team reads it, in the admin console. A screenshot is stored privately like any other photo and needs the same photos consent.

Consent and account records. A record of every consent you have granted or withdrawn, with the date, and the state of any account deletion request.

A coach you are actively linked with can see the structured data behind your coaching relationship: your check-ins, intake answers, posing sessions, training and nutrition plans, journal entries, meal photos, and your direct message thread with them. Your conversations with Callout's AI coaches are a private space between you and the app: a linked coach cannot read them.

AI language-model providers. Callout's coaches are powered by automated language models run by outside providers. Today that means OpenRouter, which passes a conversation to the company hosting the model, and Google, which reads the photos you submit for AI review and turns dictation and voice messages to an AI coach into text. A message you send a coach goes to the provider answering that turn, together with the parts of your record the coach needs to answer it: recent check-ins, your plans and, if you connected it, your Apple Health figures. So does a photo you submit for AI review. Callout asks for your consent before any of it is sent.

Supabase is Callout's database, authentication and file storage provider. Every row is scoped to your own account by database-level rules, not just app code, and photos are served through short-lived links rather than public URLs.

Stripe and Apple take the payment if you buy Athlete Premium, Stripe on the website and Apple in the app. Callout never sees your card number. It stores the state of your subscription: its status, its dates and, for Stripe, your customer reference. Stripe receives your email address and what you enter at checkout.

Daily (daily.co) carries the audio and video of a call between you and your coach while it happens. Each call has its own private room that only the two of you can enter, and it closes after two hours at the latest. Calls are not recorded and no transcript is made. Daily receives the display name shown to the other person, and keeps technical records of each call, such as when it started and ended, under its data processing agreement with Callout.

Sentry is used to catch and diagnose crashes and errors, hosted in the EU. Session Replay, which would otherwise record what a screen shows, is deliberately left off, because Callout's own screens show health data and photos.

Callout does not sell your data, and does not use it for advertising.

Several kinds of processing in Callout only happen after you explicitly say yes, one purpose at a time, in Settings: AI coaching, storing progress photos, storing check-ins, analyzing a meal photo, the live Posing Room's camera use, storing health information, and the gear coach's education-only acknowledgement. Each one is a separate switch. Granting one does not grant the others.

You can withdraw any of them at any time from Settings. Withdrawing stops that kind of processing going forward, immediately: no new AI messages, no new photo uploads, no new check-ins, whichever purpose you withdrew. It does not erase what was already collected under that consent; that is what account deletion, below, is for. Withdrawing one consent does not affect anything else in the app.

Download my data (Settings) gives you one JSON file with everything Callout holds about your account: your profile, health data, check-ins, journal, meal logs, posing sessions, plans, AI and human conversations (including edited and superseded messages), your call history, consent history, and an index of your stored photos as time-limited download links. You can request this at most five times in ten minutes.

Delete my account (Settings) starts a 30-day grace period. Your data is untouched during those 30 days and you can cancel the request at any time before it ends. After 30 days, Callout permanently erases your account: your profile and every table above, your stored photos and files, and your sign-in record, including its login history. The erasure is checked against every table before it is marked complete, and the job does not finish quietly if anything is left behind; it retries instead. What survives, on purpose, is a bare record that an account with this identifier once existed and was deleted, with nothing identifying left in it. That is the evidence the erasure happened, not a copy of what was erased.

• To provide the service you signed up for (your account, your coach relationship, check-ins, plans and messages): this is necessary to perform our agreement with you.
• Health data, photos and the AI coaches: only with your explicit consent, which you give and withdraw in Settings. Withdrawing it stops the processing from then on.
• Keeping accounts and the service secure (sign-in protection, abuse limits, security logs): our legitimate interest in a safe service.
• Billing records for coaches' subscriptions: our legal obligation to keep accounting and tax records.

You can ask for access to your data, its correction or deletion, a restriction of its use, a copy in a portable format, and you can object to processing based on our legitimate interest. Most of this you can do yourself in the app; anything else, write to kristyna.michkova@gmail.com. If you think your data is handled unlawfully, you can complain to the Czech data protection authority, Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic (www.uoou.gov.cz), or to the authority where you live.

Most of what is described above is kept for as long as your account exists, because a contest-prep history is only useful to you and your coach as a continuous record. Removing a single item, a journal entry or a logged meal, takes it off your list and your coach's view immediately, but Callout does not destroy the underlying record at that moment; it is kept until your account itself is deleted, so an accidental removal is never indistinguishable from a deliberate one.

• Account deletion executes 30 days after you request it, as described above.
• A coach's note on an unclaimed or expired invite is cleared automatically 30 days after that invite is settled, once it no longer serves any purpose.
• Rate-limit records are cleared automatically after 7 days.
• A screenshot attached to feedback is deleted 180 days after that feedback is closed, and the feedback itself 2 years after it is closed.
• Consent records are kept, including withdrawn ones, as the history of what you agreed to and when, until your account is deleted.

Access to your data is enforced at the database level, not only by the app, so a bug in one screen cannot expose another athlete's data. Photos and files are served through links that expire in minutes, not public addresses. Actions that touch your data, an export, a deletion, a consent change, are written to an append-only record that cannot be edited after the fact.

Callout is for adults: you must be 18 or older to use it, and the app is rated for adults on the Apple App Store. Callout does not knowingly hold data about anyone under 18; if you believe it does, write to the address below and the account will be erased.

The gear coach asks again: its pharmacology education opens only after you confirm you are 18 or older and that you understand its answers are education, not medical advice, and it checks the birth date in your profile on every message.

Callout's database, authentication and file storage run on EU infrastructure. Some of the AI providers named above operate outside the EU; where that is the case, Callout relies on that provider's own safeguards for the transfer. This section will be filled in with the specifics once the owner's review of each provider's agreement is complete.

If how Callout handles your data changes in a way that matters, this page will be updated and its effective date will change. Continuing to use Callout after that means you have seen the update.

Questions about this policy, or about your data, go to kristyna.michkova@gmail.com (Kristýna Bodjona Michková, IČO 75568101, Lány u Dašic 65, 530 02 Lány u Dašic, Czech Republic). Questions about using the app go to support@calloutapps.com.