The Coaching Kit
What the Coaching Kit collects, why it collects it, who else ever sees it, and how to get it deleted. Written to be read, not to be survived.
Last updated 20 August 2026
The Coaching Kit is operated by Coached by Camacho (ABN 47 355 848 151), in Australia — "we", "us". This policy covers coachingkit.org and every tool in the kit: Check-In Studio, FormFixr, Formwork, Throughline and BloodDesk, together with the sign-in portal that gates them and the Check-In Studio Recorder browser extension.
Two very different people use these tools, and the difference decides who is responsible for what:
You hold an account with us. We decide how your account data is handled, so for that data we are the controller and this policy is our commitment to you.
Your coach decides what to record about you and why. They are the controller of that data; we only store and process it on their instruction. Ask your coach first — to see, correct or delete your information, they are the right contact, and they can act immediately.
Every tool is separate, and they only hold what their job needs.
| Tool | What it stores |
|---|---|
| Account & sign-in | Your email address, a hashed password (scrypt — we never store the password itself), your subscription status and tier, and identifiers issued by Stripe. Sign-in sessions are stored as hashes, not as usable tokens. Failed sign-in attempts are counted against an IP address to slow down brute-force attacks. |
| Client registry | So your coach adds a person once and every tool holds the same human, the sign-in portal keeps one shared record per client: name, email, phone, date of birth, sex, country, and one note your coach writes that is shared across their own tools only. It lives in the portal's own database, on the same server as the tools. When your coach stops using a tool for you, that tool's link to this record is marked ended but kept, so history survives; when a tool erases your data, its link is deleted outright along with it. |
| Check-In Studio | The video and audio your coach records, its transcript, and the summary, chapters and action items generated from that transcript. Client names, and any email address or phone number your coach adds to send the link. Anything drawn on the video. When a client opens a check-in, playback is measured — how much was watched, and when it was opened — plus any reply they leave. |
| BloodDesk | Health information. Blood-marker results taken from pathology reports your coach uploads, plus the client's name, sex, date of birth, country and your coach's notes. |
| Formwork | Questionnaire answers your coach's clients submit, and the scores calculated from them. Depending on the questionnaire, these answers may include health information such as sleep, symptoms or lifestyle. |
| Throughline | Timeline entries your coach writes, and — only if your coach turns it on — read-only copies of dated items already held in Check-In Studio and Formwork. |
| FormFixr | Nothing reaches us. FormFixr runs entirely in the browser: the videos reviewed and everything drawn on them stay on that device and are never uploaded. Clearing the browser's storage erases them permanently. |
| Browser extension | Nothing. The Check-In Studio Recorder composites your screen and camera into one video on your own machine and hands it to Check-In Studio. It sends nothing anywhere else, and it reads no page content. |
BloodDesk holds pathology results, and some Formwork questionnaires ask about health. In Australia this is sensitive information under the Privacy Act; in the UK and EU it is a special category of personal data. Both regimes require consent before it is collected.
Coaches are responsible for getting that consent from their clients before entering health information into the kit, and for having a lawful reason to hold it. We do not use health information for anything other than showing it back to the coach who entered it. It is never used to train models, never used for marketing, and never sold.
The kit is deliberately short on suppliers. These are all of them:
| Supplier | What they receive, and when |
|---|---|
| Hetzner | Hosts the servers the tools run on, and therefore stores everything described above. Hetzner Online GmbH is a German company; the server holding this data is in Helsinki, Finland — inside the EU, and covered by European data-protection law. |
| Anthropic | Check-In Studio can send a transcript (never the video, never the audio) to Anthropic's Claude to produce the summary, chapters and action items. Anthropic does not train on it. If a coach does not configure this, the summary is produced on our own server instead and no transcript leaves it. |
| Stripe | Handles subscription payments for coaches. Card details go directly to Stripe and never reach our servers — we only ever see Stripe's identifiers and whether a subscription is current. |
| Twilio | Delivers SMS notifications, and so receives the phone number and message text — but only when a coach turns SMS on and sends one. |
| Netlify | Serves this public homepage and receives anything submitted through its sign-up form. Netlify never touches the tools or their data. |
Where data leaves Australia or the EU to reach these suppliers, we rely on their standard contractual protections. We add no other suppliers without updating this page.
We use cookies for one purpose: keeping a signed-in coach signed in. There are no advertising cookies and no cross-site tracking cookies, so there is no consent banner to click past. Client links — the pages clients open to watch a check-in or fill in a form — do not require any account, and set only what is needed to make that page work.
Content stays until it is deleted. A coach can delete a check-in, a client, a report or a timeline at any time, and can close their account, which removes their content from the live system. Backups are kept so that data can be recovered after a failure, and deleted content disappears from those backups as they roll over.
Sign-in sessions and password-reset links expire on their own and are short-lived by design.
No system is perfectly secure, and we will not pretend otherwise. If a breach ever puts anyone at serious risk, we will notify those affected and the relevant regulator as the law requires.
You can ask us to show you the personal information we hold about you, to correct it if it is wrong, to delete it, or to give you a copy you can take elsewhere. You can also withdraw consent, or object to how information is used. We will not charge you for asking, and we will not treat you differently for having asked.
Clients: start with your coach. They control what is held about you and can act straight away. If you cannot reach them, contact us and we will help — though for a coach's client data we may need to work through that coach.
If you are unhappy with our answer, you can complain to the Office of the Australian Information Commissioner, or to your local data-protection authority in the UK or EU.
The kit is sold to coaches, not to children, and is not intended for under-16s. A coach who works with a minor is responsible for obtaining a parent or guardian's consent before entering that child's information.
If this policy changes in a way that matters, we will update the date at the top of this page and tell account holders directly. We will not quietly broaden what we do with information already collected.
Coached by Camacho
ABN 47 355 848 151
Privacy enquiries: josefcamachofinancials@gmail.com
Write to us with "Privacy" in the subject line and we will reply within 30 days.