Legal & policies

Application data: name, email, your goal, medication stage if you share it, what you've tried, and what's hard right now. Client data: intake profile, weekly check-ins, messages, tracker data you share, and plan documents we create for you. Purchase data: handled by Stripe and by our digital-goods storefront partner; we receive confirmation of payment but never your card details. Site data: our forms are processed by Netlify; standard server logs may apply. We run no third-party analytics, advertising, or tracking scripts on this site.

Information you share about medication use, weight, and habits is sensitive. You choose what to share; we ask only what coaching requires. We are a coaching service, not a healthcare provider, and this data is not a medical record — but we treat it with strict confidentiality regardless. We do not sell it, rent it, or share it with advertisers, data brokers, or medication manufacturers.

Client profiles and check-ins are processed with AI-assisted tooling as part of the Cofactor Engine, our evaluation methodology. Every output is reviewed by a human on the Cofactor team before it reaches you. We use business-grade AI services configured so that your data is not used to train the provider's models.

To reply to your application; to conduct your Goal-Mapping Review; to build, deliver, and adjust your plan; to respond to your check-ins and messages; to send service emails you'd expect; and, if you opted in via the free guide, to send occasional educational email you can leave with one click.

Service providers acting on our instructions: Netlify (site and form hosting), Stripe (payments), our storefront partner (guide checkout and delivery), our email provider, and our AI tooling providers as described above. Each receives only what its job requires. We disclose data if the law compels it, and otherwise to no one.

We keep client records while you're a client and for 24 months afterward, then delete or anonymize them. Email us at any time to request a copy of your data or its deletion; we honor deletion requests within 30 days except where the law requires retention (e.g., payment records).

Depending on where you live (including California and the EEA/UK), you may have rights of access, correction, deletion, portability, and objection. Exercise any of them by emailing privacy@cofactormethod.com. We do not discriminate for exercising privacy rights, and we do not sell or "share" personal information as those terms are defined in the CCPA.

We publish client stories only with explicit written permission, and we offer anonymization. Nothing you tell us is quotable by default.

Our services are for adults 18+. We do not knowingly collect information from anyone under 18.

Material changes will be posted here and emailed to active clients. Questions or requests: privacy@cofactormethod.com.