COACH LEDGER · EFFECTIVE SEPTEMBER 8, 2026
Privacy and security overview
Operational overview—not a HIPAA certification. Independent privacy and security review is required before representing the service as meeting a specific regulated standard.
View the HIPAA & Privacy Position Statement (PDF)
Information and purpose
Coach Ledger may store account and practice information, client contact information, client-selected coaching goals, appointments, messages, invoices, receipts, signed agreement text and versions, typed signatures, consent timestamps, audit and security events, and other records a member chooses to enter. It uses this information to provide the workspace, client portal, signed-agreement records, billing, support, security, fraud prevention and lawful retention.
Data separation
Each practice uses a separate workspace. Access checks scope private records to the authenticated workspace. Client portals use private, unguessable links that should be treated as confidential.
Data minimization
Coach Ledger is designed for coaching observations, client-selected goals, actions, consent, communications and business records. Coaching sessions are not audio- or video-recorded. After each session, the coach may document only the minimum information reasonably needed to support continuity and preparation for the next coaching session. Members should not enter diagnoses, treatment plans, test interpretations, unnecessary personal or medical details, passwords, card numbers or bank credentials.
Fullscript and other service providers
Fullscript is an optional third-party service with its own terms and privacy practices. A coach may receive compensation when a client purchases through the coach's Fullscript dispensary, but supplement purchases and use are never required for coaching. Authentication, hosting, email, calendar, meetings and payment processing may also be provided by separate vendors under their own terms.
Stripe collects payment-card and bank credentials on Stripe-hosted pages; complete card and bank credentials are not stored in Coach Ledger. Stripe may receive contact, transaction, payment-method, device, browser, IP-address and fraud-prevention information. Review the Stripe Privacy Policy and Stripe Privacy Center before paying.
Retention and individual choices
Information is retained as reasonably needed for the active service, signed agreements, completed transactions, security, fraud prevention, disputes, tax or legal duties. Subject to applicable law and identity verification, a person may request eligible access, correction, export or deletion. Some records cannot be deleted immediately when lawful retention or another person's rights apply.
Member safeguards
Members are responsible for authorized devices and users, lawful consent, secure exports, retention rules, incident response and meeting any obligations that apply to their practice or jurisdiction. If a member is a HIPAA covered entity or business associate, that member remains responsible for determining permitted use, obtaining any required business associate agreement and confirming that each connected vendor is suitable.
Questions and incidents
Contact support@elevatedwellness.me without including client health details, passwords or access codes.