BUILDINGROME / BuildingRome Studio LLC
Privacy notice
Last updated October 28, 2026
Coach platform applications
If you apply for a coach workspace, we store your name, verified account email, expected client count, application text, and review status. The platform owner uses this information to assess and respond to your request; it is not shared with other coaches. Please do not include private client information. Applying does not create a paid subscription, grant coach access, or subscribe you to marketing. Your application is removed when your account is deleted.
Coach-sponsored invitations and access
An independent coach may enter an authorized client's email to send a private invitation. We store the invitation email, a hashed acceptance token, reservation expiry, coach assignment, acceptance time, and seat status. The link uses a fragment to avoid sending its token in ordinary page requests. The intended client must sign in using the matching verified email and separately accept training sharing. The pending link may be retained on the current device to finish signing in. Joining does not change marketing preferences or automatically enable Atlas or AI processing of training.
While sponsored coaching is active, the assigned coach may review the training records described in this notice. A client may leave the workspace from Account → Plans to end that sharing. Archiving a client or a license ending preserves their workout and message history. Coaches see only their own invited clients; the platform owner manages coach license metadata and aggregate seat counts without access to those clients' private messages or training through the admin portal.
We record license payment references supplied by the owner, paid periods, agreed fees, client limits, and audited changes. These are owner-recorded external payment approvals, not independent provider verification. For optional AI, we retain workspace credits and technical cost/usage records, including provider model, request type, and processing counts. These metering records do not include prompts or generated reply text. A coach sees shared credit totals, not another client's private Atlas conversations. AI processing remains subject to the separate choices explained below.
Who operates BuildingRome
BuildingRome Studio LLC operates the BuildingRome website and app. Contact support@buildingrome.dev for privacy questions or account-deletion requests.
Information you enter
Training preferences, nutrition inputs, and workouts may include exercise names, sets, repetitions, weights, effort ratings, notes, and optional body measurements. You can preview a training plan and use public nutrition tools without signing in. A free account is required to start and track new workouts. Preview choices and nutrition outlines may be stored in this browser or app installation. An explicit save action carries your chosen training profile through signup or sign-in on the same device until you confirm it or make another selection; you confirm it before it becomes your account plan. Calculations run on your device.
Clearing browser storage, uninstalling the app, or changing devices can remove local copies. Export the workout journal or nutrition plan if you want to keep a separate copy. Anyone with access to an unlocked device or browser profile may be able to view its local journal.
Accounts and cloud records
Account features process your email address, profile information, and records you choose to save, using Firebase Authentication and Firestore. Signed-in account records can be accessed across devices. Local guest records are not uploaded merely because you sign in; a transfer requires an explicit import flow.
The owner's verified administrative workspace shows member names, email addresses, email-verification status, subscription status, paid-through dates, and monthly feature-usage counts to support coaching and account access. It does not expose members' private Atlas conversations, workout logs, body measurements, or nutrition records through the member directory.
Atlas, the AI assistant
Atlas is BuildingRome's AI assistant, powered by Anthropic's Claude API. It is separate from your coach's private inbox. Before your first Atlas request, you confirm that you are 18 or older and choose whether to send your conversation to Anthropic. These versioned choices are saved in your account across conversations and devices, along with the time of your adult confirmation. You can change or withdraw each choice in an Atlas conversation at any time; a withdrawal stops future requests. A material change to the disclosure requires a fresh opt-in. Earlier app versions may ask for permission per request rather than save these choices. The request includes your message and up to eight recent messages from that Atlas conversation. If you separately choose to include your saved training plan, we include its goal, experience level, schedule, equipment, emphasis, and generated exercises. If you separately choose to include your recent training, we include this week and last week planned versus done, your last five sessions (exercises, sets, weights, reps, and skipped sets with reasons), any training flags, and your coach's plan changes in force. We do not automatically include workout logs, lifted weights, body measurements, nutrition records, account email addresses, or messages to your coach.
Messages you type may themselves contain personal information. Do not include information you do not want to share with Anthropic. Anthropic processes requests under its API terms and applicable retention policies; do not assume zero retention. BuildingRome keeps AI conversation history in your account so you can resume it. We do not send conversation contents to analytics, and Atlas cannot change your stored plan or contact your coach automatically.
Coaches can use Coach Atlas in their workspace under their own Atlas choices. It can include a client's training only as described in Training shared with your coach, and never another coach's clients.
Private coaching messages
Training questions, check-ins, and follow-up messages are stored in your Firebase account. Only your assigned coach can access these conversations through the coaching workspace. Other coaches, including the platform owner, cannot open another coach’s client conversations. Pausing or removing a coach does not redirect private conversations or alerts to the owner. Coaches see the account name or email associated with a conversation to identify the member. Human replies identify the coach, while AI replies are labeled Atlas. Coach messages are not automatically sent to Anthropic. If you share health, body, or eating details in a message, they are used to provide your coaching service; share only what you are comfortable storing, and keep medical details for your clinician. Drafts are saved on this device for the signed-in account; someone with access to the unlocked device may be able to view them.
Premium form reviews store the video link you share, not the video. Anyone with that link may be able to view the video, depending on where you host it, so use a link you control and remove it when you no longer want it shared. Premium calls are booked through a third-party scheduling service, which receives the details you enter there, and take place over a video service named in the booking. BuildingRome does not record calls. Your coach may keep private notes about a call and records its date and length to track the monthly allowance.
Messages remain readable after cancellation or downgrade. Delete your account through Account → Delete account, or contact support@buildingrome.dev for help. We may retain necessary billing, security, and dispute records. Closing a topic does not delete its history.
Training shared with your coach
Training review is included with Coaching and Premium. While that access is active, your assigned coach can see your saved training plan, logged workouts (including skipped sets and their reasons), missed sessions and their reasons, other training you log, weekly summaries computed from these records, and body weight entries. This access is part of the coaching service, rather than an optional Atlas or marketing permission. Pro and free plans do not provide coach access to these training records.
Training sharing ends when you change to Pro or your Coaching or Premium access ends. Canceling future renewal preserves coaching and sharing through the period already paid. You can also delete your account. Each coach access to your training records is logged. Your coach may keep private notes about your training; these are stored with your account records and deleted with your account. Pausing or removing a coach does not automatically transfer your private records to the platform owner. If your coaching assignment changes through an authorized transfer, your history follows that assignment; the current coach is shown in Messages and the plan comparison screen.
With your saved permission, your assigned coach may use Anthropic’s Claude to prepare reviews and suggested plan changes, and to ask Coach Atlas questions about your training, from your plan, logged exercises, weights, reps, effort, skipped work and reasons, training and body-weight summaries, and check-in details. Choosing the clearly labeled AI-assisted signup or invitation action records this permission once. Permission saved before October 28, 2026 covers reviews only; Coach Atlas uses your training only after you allow the updated permission. You may choose manual reviews instead or withdraw permission in Account → Plans without losing human coaching. Existing accounts are not opted in automatically. When enabled, reviews may be drafted after a check-in or at your coach’s request. Nothing is sent to you or changed in your plan without a coach's approval, including suggested weights and scheduling a next block. Weekly workspace briefings summarize available records without sending them to an AI provider. The AI request includes the training context described above, not your name, email address, payment details, private messages, your coach's private notes, or Atlas conversations. Nutrition screening answers are also excluded. Draft reviews are saved with your coaching records. When your coach asks Coach Atlas about you, the request also includes your coach's question and earlier messages in that Coach Atlas conversation. Those conversations are saved in your coach's workspace, are not shown to you, and are not shared with other coaches. Each Coach Atlas use of your training is logged like other coach access. If you change coaches or your coaching access ends, your previous coach can no longer open them; they are deleted when you or your coach deletes the account. Withdrawing permission stops future review requests; it does not retract data already processed or remove reviews already saved. Account deletion includes these stored reviews.
If you answer the nutrition screening, we store your yes or no answers and whether they allow calorie and macro target coaching. Your assigned coach can see the answers and the result. We never ask for a diagnosis or medical details, and you can change your answers at any time. On Premium, the targets your coach sets, with the previous targets, are stored with your account. Screening answers are not sent to Anthropic or analytics.
App message notifications
Your alert inbox stores generic notices and links to private coaching conversations in your Firebase account. If you enable notifications on your phone, we register its Apple or Firebase device token against your signed-in account. Apple Push Notification service delivers iPhone alerts; Firebase Cloud Messaging delivers Android alerts. We send a generic notice and an internal conversation link, not your message text, workout details, or body measurements.
You can turn app push alerts and email alerts on or off separately in Account → Message notifications. Your phone also controls notification permission and lock-screen visibility. Device registrations expire after 90 days unless refreshed. Signing out attempts to deactivate that installation; another account signing in transfers its token away from the prior account. Offline sign-out may delay server deactivation. Account deletion removes your registrations and queued alerts. A notice already accepted by a device provider cannot be recalled. Notification delivery is not guaranteed; open Messages to check your conversations.
Website activity and technical information
Optional analytics uses PostHog on the website and app, and Vercel Web Analytics on browser pages. Collection stays off until you choose Allow analytics. You can change that choice through Analytics choices, and the free tools remain available when analytics is off. The choice applies to this browser or app installation.
After you opt in, we send coarse screen visits and events for completed nutrition calculations, workout starts, resumes, and saves, saved account plans, account sign-in or signup actions, successful private-message sends, Atlas request outcomes, and subscription checkout, access-confirmation, and restore actions. Message text, AI prompts and replies, fitness inputs, workout notes, account and record IDs, payment identifiers, and URL query strings are excluded. PostHog uses a random installation identifier, not your account ID or email. We remove that identifier on opt-out and reset it on sign-out or account changes. Automatic form capture and session recording are off, as are PostHog person profiles and location enrichment. Providers still receive the network connection needed to deliver requests. Hosting may retain technical logs to operate and secure the service. Opting out stops future optional collection; it does not erase previously received events.
Support and email
Separate coach workspaces limit ordinary access within the app. Authorized service operators may still need limited access to account records for a support request, security, or legal obligations. This does not give the platform owner routine access to another coach’s private coaching workspace.
If you email support, we receive the message and the contact details you provide. We use them to answer the request and investigate the issue. Keep passwords, payment-card details, and unnecessary personal health details out of support messages.
Resend handles configured transactional messages, including welcome, verification, recovery, and private coaching alerts. Coaching alerts contain a generic notice and sign-in link, not conversation text. The delivery queue stores account and conversation references, delivery status, and the verified destination needed for safe retries. When delivery is enabled, coaching alerts are on by default; turn them off in Account → Message notifications. This does not stop account security emails.
Marketing emails about BuildingRome specials, product news, and training updates use a separate optional choice, unchecked by default at signup. Creating an account, signing in with Apple or Google, accepting the Terms, buying a subscription, and allowing analytics do not subscribe you. We record your choice, the wording version, time, source, and account email. Existing members are not enrolled automatically. Account → Specials and updates lets you unsubscribe or opt in later without losing account access or stopping necessary service emails.
The owner's verified administrative workspace can view, copy, and export only opted-in, verified current email addresses for marketing. Apple may supply a private relay address rather than your personal inbox address. A changed account email needs a fresh opt-in. Audience exports are snapshots; later withdrawals must be reflected before a future campaign. The current release stores preferences and provides the audience list; it does not automatically sync marketing contacts to Resend or send campaigns.
Payments and service providers
Core training, nutrition, and journal tools are free. When paid website enrollment is enabled, Stripe hosts checkout and subscription management and handles payment-card details. BuildingRome stores provider customer and subscription references, verified payment status, subscription terms acceptance, and usage counters. A return from checkout alone does not grant access. Native store purchases remain unavailable until store setup and device checks are complete. When enabled, Apple or Google handles store payment details and RevenueCat verifies subscription entitlements against your Firebase account identifier and store product/expiry information. Website Stripe subscriptions and native-store subscriptions remain distinct; manage renewal with the provider where you purchased.
We use Firebase, Vercel, Resend, Anthropic, Stripe, and optional RevenueCat/store and analytics providers for the functions described here when those services are enabled. We do not sell workout journals, private messages, or nutrition entries, and do not use them for targeted advertising.
Retention, access, and deletion requests
We keep saved account records and conversation history so you can resume them, including after a subscription ends, unless you request deletion or we no longer need them to provide the service. There is no automatic message-expiry schedule in the current release. Closing a topic, signing out, canceling a subscription, or uninstalling the app does not delete cloud records.
You can remove workouts and nutrition plans through their available controls, clear local records through browser or app storage settings, and manage exported files separately. Message drafts remain on this device under an account-specific storage key; signing out does not erase every account's drafts from the device. Clear browser/app storage on a shared device if you need to remove local copies.
Account → Delete account lets you request permanent deletion after a recent sign-in and explicit confirmation. Apple-linked accounts require fresh Apple authorization so its token can be revoked. Deletion stops authenticated access, removes the Firebase identity, and removes saved account profiles, workouts, nutrition plans, and Atlas and Rome conversation history. Failed or in-flight cleanup is retried in the background. The separate guest journal, guest nutrition outline, and exported files remain yours to clear. We retain minimal deletion markers and necessary payment, security, dispute, and legally required records to prevent delayed provider events from recreating an account. Deleting BuildingRome data does not erase records independently retained by a payment or AI provider and does not cancel subscription renewal; use subscription management separately. You can delete immediately without waiting for a paid period to end. Email support@buildingrome.dev for access, correction, export, or deletion help; we verify identity before disclosing private records.
Provider data handling and security
Atlas uses Anthropic's commercial API rather than a personal Claude chat account. Anthropic states that commercial API inputs and outputs are not used to train its models by default. Its published API retention policy generally provides deletion within 30 days, with exceptions for contractual settings, safety or abuse review, legal requirements, and certain services or models. BuildingRome does not claim a zero-retention agreement. Provider practices can change; Anthropic's current privacy and retention notices describe its processing.
Our own Firebase conversation history is separate from Anthropic's retention period. We use authenticated server access and account separation to restrict private records, but no service can promise absolute security. Service providers may process information in countries other than yours. Contact support@buildingrome.dev for questions about providers or data handling.
Age and nutrition estimates
Paid coaching and Atlas are intended for adults 18 and older. The maintenance-calorie estimate is limited to people who confirm they are 18 or older and meet the eligibility conditions displayed in the planner. It is not intended for pregnancy, breastfeeding, or medically tailored nutrition.
Rome is a coach, not a registered dietitian. Nutrition recommendations are general guidance for healthy adults, not medical advice. For actual diet planning, talk with your doctor or a registered dietitian.
Unfinished workouts on your device
Starting a signed-in workout stores its unfinished draft in the current browser or app installation, separately for each account. Earlier guest drafts stay in their separate on-device store and can be exported with the earlier workout records. Drafts can include selected exercises, planned targets, completed and skipped sets, weights, reps or timed minutes, notes, units, and the rest-timer deadline. Drafts let you resume after leaving the screen or reopening the app; they are not cloud backups and do not transfer between devices.
Finishing an account workout sends only the completed results to your account when the server confirms the save. An interrupted save keeps a fixed retry request on this device to avoid duplicate workouts. Discarding an unfinished draft removes that local draft; account deletion also attempts to remove the deleted account’s draft from the device where you delete it. Copies on other devices or browser profiles need local removal there. Clearing browser storage or uninstalling the app can remove unfinished work. Workout contents are not sent to analytics.
Changes to this notice
We will update this page when features, providers, or data practices change. The date above identifies the current version. Contact support@buildingrome.dev if you have a question about a change.