This Privacy Policy explains how Milata LLC, operating under the SERHILL brand (“SERHILL,” “we,” “us,” or “our”), collects, uses, stores, and protects information when you use our website, portal, mobile applications, and related services.
1. Information we collect
The information we process depends on the features you use and whether you are a client or a trainer.
- Account and contact details: your name, email address, account and profile information, and user identifier. If you provide a phone number in a coaching application or other contact information, we also process those details.
- Health, fitness, and nutrition: information you provide about health and exercise readiness, training plans and results, meals, hydration, goals, progress, measurements, and body composition.
- Photos, reports, and other content: food photos submitted for analysis, uploaded Body Scan images or PDF reports, analysis results, progress photos, chat messages, documents, and other materials you share.
- Sessions and financial records: appointments, attendance, payments, balances, amounts owed, and related session records maintained in Trainer Ledger, as well as purchase history and subscription status.
- Device and service information: identifiers for your device or app installation, the address used to deliver push notifications to your device, app version, operating platform, browser, and IP address.
- Activity and diagnostics: actions within the app, sign-in and session activity, notification read status, and records of errors, crashes, performance, and service operation. Some of these records are associated with your account.
- Connected services: information needed for services you choose to connect, such as Google Calendar, as described below.
You may provide information about yourself. A trainer may also enter information about clients they work with, including training, scheduling, progress, and payment records. Trainers must have appropriate authority and any required consent to provide and use their clients’ information.
Apple and Stripe process payments through their respective payment services. SERHILL receives information needed to verify purchases and manage access and payment records, rather than full card numbers or card security codes. More detail appears in the payment sections below.
2. How we use information
We use information to create and secure accounts, sign you in, connect trainers and clients, provide training and nutrition tools, track progress, deliver messages, manage appointments and session records, maintain Trainer Ledger balances, verify purchases, and manage subscriptions and access.
We also use relevant information to deliver service notifications, respond to support requests, prevent misuse, investigate errors, and keep the service reliable. Information used to show your training or nutrition progress supports your coaching and use of SERHILL.
3. Food photos and Body Scan analysis
SERHILL uses OpenAI to help analyze food photos and body-composition reports when you use these features.
- Food analysis: the photo you submit and instructions for recognizing food and estimating nutritional values are sent to OpenAI.
- Body Scan: the report image or PDF, instructions for interpreting it, and relevant details about the report format and language are sent to OpenAI. For PDF reports, the file name is also sent. Names, measurements, or other personal information visible in the report or included in its file name may therefore be received by OpenAI.
Analysis results are saved in SERHILL and linked to the relevant account or client. Only submit material you are entitled to share. Avoid including unrelated personal information in photos, reports, or file names.
OpenAI processes submitted information under the terms applicable to the service we use. Storage and deletion at OpenAI follow those terms and the applicable service settings; deleting a SERHILL record does not mean every provider copy is deleted at the same moment. See OpenAI’s information about data handling.
4. Who can receive information
Your trainer can access client information needed for your coaching relationship within their assigned permissions. Clients can access information made available to them through their own accounts. Other trainers do not gain access to your private information simply by using SERHILL. Authorized SERHILL personnel may access relevant records for administration, support, security, and required recordkeeping.
We use service providers for specific parts of the service:
- OpenAI: the analysis described above.
- Expo and Apple Push Notification service: delivery of app push notifications. This involves the notification delivery address for your device, notification content, and information needed to deliver it. See the Expo Privacy Policy and Apple Privacy Policy.
- Expo: app updates and related diagnostics, including an app-installation identifier and information about critical errors. See Expo’s data and privacy information.
- Apple: purchases and subscription management for subscriptions bought through Apple in the iOS app. See App Store & Privacy.
- Stripe: website payments and training-service payments processed through Stripe. See the Stripe Privacy Policy.
- Open Food Facts: food-information lookup when a matching food is not found in our catalog. This lookup sends a food name or search phrase; it does not send the food photo or your SERHILL user identifier. See the Open Food Facts Privacy Policy.
- Hosting and infrastructure providers: storage, processing of service requests, and operational logs needed to run and protect SERHILL.
Information may also be disclosed when required by applicable law or valid legal process, or as necessary to protect service security. Providers may process information outside your country of residence. Their applicable terms and privacy notices explain their own processing and responsibilities.
5. Google Calendar
Google User Data
SERHILL allows eligible users to connect Google Calendar.
When you authorize the connection through Google, SERHILL may access information necessary for calendar functionality, including:
- Google account identification information needed to establish the connection;
- calendar and event information such as title, date, time, duration, and description;
- information necessary to create, retrieve, update, or remove calendar events.
SERHILL requests only the Google permissions necessary to provide the features selected by the user.
How We Use Google User Data
Google Calendar data may be used to:
- synchronize SERHILL appointments or training sessions with Google Calendar;
- create, display, update, or cancel related calendar events;
- prevent scheduling conflicts or duplicate events;
- maintain synchronization between SERHILL and the user’s calendar.
SERHILL does not use Google user data for advertising, marketing profiling, or unrelated purposes.
Google API Services User Data Policy
SERHILL’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
SERHILL does not sell Google user data, use it for personalized advertising, or share it with advertisers or data brokers.
Google user data may only be shared where necessary to operate the requested service, comply with applicable law, protect security, or with the user’s explicit consent.
Authorization and Revoking Access
Connecting Google Calendar is optional and requires the user’s explicit authorization through Google’s authorization process.
Users may revoke SERHILL’s access at any time through their Google Account permissions. Where available, users may also disconnect Google Calendar directly through SERHILL.
After access is revoked, SERHILL will no longer make authorized Google Calendar requests on behalf of that user.
6. Storage and protection
SERHILL uses reasonable administrative, technical, and organizational safeguards to protect user information. Access to private information is limited according to account roles and permissions.
- Account, coaching, and communication records: retained for the services and ongoing coaching relationship they support, taking account of deletion requests and any continuing recordkeeping needs.
- Body Scan: the original uploaded report is stored in encrypted form together with its analysis results. Completing an analysis does not automatically delete the report or results.
- Food photos and results: the photo-analysis process uses a temporary upload. Results and diagnostic records can remain after the photo is processed; analysis does not mean all associated records are immediately deleted.
- Activity and diagnostic records: retained as needed to operate the service, investigate errors, protect accounts, and resolve support issues. AI-analysis diagnostics may be linked to the relevant user.
- Purchase and financial records: retained as needed to manage payments, subscriptions, balances, disputes, fraud prevention, and applicable recordkeeping obligations.
The appropriate retention period depends on the type of information, why it is needed, the status of the service or transaction, and applicable obligations. Information held by providers is also subject to their own applicable retention arrangements. We do not promise the same deletion time for every type of record or every provider.
Google connection credentials are used only for the authorized integration and are not publicly exposed. We retain Google user data only as long as reasonably necessary to provide the requested functionality or meet legitimate legal and operational requirements.
7. Access, correction, and deletion
To request access to, correction of, or deletion of your personal information, or deletion of your SERHILL account, email serhill.team@gmail.com. Please identify the account and whether your request concerns the entire account or particular information, such as a report, photo, or message. We may ask for information needed to verify your identity and authority to make the request.
Where a feature provides a delete control, you can use it for the relevant material. If no control is available, or you need help with records entered by a trainer, contact us. Disconnecting a client from a trainer’s workspace is not the same as deleting the client’s account.
Applicable information will be deleted or anonymized unless retention is required for legal, security, fraud-prevention, or financial-recordkeeping purposes. A request to remove a saved payment method or a coaching relationship does not automatically remove historical payment records.
You can also request deletion of information relating to Google integration. Revoking Google authorization does not automatically delete independent SERHILL records, such as appointments created within SERHILL.
Deleting the app from your device does not itself delete your SERHILL account or cancel a paid subscription. Apple-billed subscriptions must be managed through Apple; website subscriptions follow the applicable website subscription process. Requests concerning information held independently by Apple, Stripe, or other providers are handled under their policies.
8. Notifications and your choices
The mobile app offers push notifications and reminders. You can manage notification permissions in your device settings and use the notification preferences available in the app. The web portal uses email and messages or notices within the portal; these are separate from mobile push notifications.
Changing notification permissions does not delete your account or existing messages. You can separately disconnect optional Google Calendar access as described above.
9. Purchases and training payments
Purchases through Apple and payments through Stripe follow different payment processes. The sections below explain the payment information SERHILL receives, access by trainers, payment permissions, and related privacy requests.
10. Children’s privacy
SERHILL does not knowingly collect personal information from children in violation of applicable law. Where information relating to a minor is managed by a parent, guardian, coach, or other authorized adult, that person is responsible for having appropriate authority and consent.
11. Changes to this policy
We may update this Privacy Policy to reflect changes in our services, legal requirements, or privacy practices. The current version will be posted on this page with an updated revision date.
12. Contact
For questions about this policy, Google Calendar, or your personal information, including account or data deletion, contact Milata LLC / SERHILL at serhill.team@gmail.com. You can also visit our Contact page.
Training payments, subscriptions and payment information
About trainer payments
SERHILL, operated by Milata LLC, uses Stripe to support payments for training services and payment-account onboarding for participating trainers.
Payment information we process
For these purposes, we process relevant account and contact information, trainer and client identifiers, service and session references, payment amounts and currencies, transaction identifiers and statuses, refund and dispute records, payment authorization records, and records of payment-access applications, approvals and restrictions. Where available, we receive limited payment-method information, such as card brand, last four digits and expiration date.
Full card numbers and card security codes are collected through Stripe's payment interface, not stored on SERHILL servers or made available to trainers through SERHILL.
How information is used and shared
We use this information to arrange and reconcile payments, maintain payment histories, communicate transaction results, prevent unauthorized or duplicate charges, manage support requests and disputes, and meet applicable recordkeeping obligations. Information necessary for payment processing is shared with Stripe. The relevant trainer can access the client and transaction information needed to manage their own services. Authorized SERHILL personnel may access relevant records for administration, support, security and compliance.
Other trainers do not receive access to your payment history merely because they use SERHILL.
Stripe verification and international processing
Stripe collects information required for identity and business verification through its onboarding process. SERHILL receives relevant connected-account identifiers, verification and capability statuses, and other account information made available by the selected Stripe integration. Stripe's handling of information is described in the Stripe Privacy Policy. Stripe and its service providers may process information in countries other than your country of residence, as described in Stripe's privacy notices.
Separate payment permissions
Saving a payment method and authorizing future trainer-initiated charges are subject to your specific choices and permissions. Permission for one trainer or merchant does not automatically authorize another trainer, and permission for a SERHILL subscription does not automatically authorize training-session charges.
Withdrawing permission
You can withdraw permission for future trainer-initiated charges by contacting SERHILL through our Contact page. Withdrawing permission does not reverse a transaction already initiated or remove a valid outstanding obligation. Removal of a saved payment method does not necessarily delete historical transaction or consent records.
Retention and privacy requests
We retain relevant information for the purposes and retention criteria described in our Privacy Policy, including resolving disputes, preventing fraud and meeting legal recordkeeping requirements. Records are not kept indefinitely simply because a card was saved. For privacy requests, including applicable access or deletion rights, contact SERHILL through our Contact page.
Apple purchases and subscription information
When Trainer Workspace or Workout Suite is purchased using Apple In-App Purchase, Apple processes the payment through the purchaser’s Apple Account. SERHILL does not receive the full card number or card security code from Apple. This payment route is separate from website subscriptions and trainer-service payments processed through Stripe.
SERHILL processes purchase confirmations and relevant transaction identifiers, product identifiers, purchase and expiration dates, renewal, refund and revocation status, and account-linking identifiers used to associate a purchase with your SERHILL account. The information available depends on the purchase and Apple integration; SERHILL does not obtain access to your unrelated Apple purchase history.
We use this information to verify purchases, provide or restore the appropriate access, keep access in sync with subscription changes, avoid duplicate processing, prevent misuse and resolve support requests. Verification involves exchanging relevant purchase and account-linking information with Apple and processing updates received from Apple. Access is determined by verified purchase information, not solely by a message displayed on the device.
Authorized SERHILL personnel may access relevant purchase records for administration, support, security and applicable recordkeeping. An independent trainer does not obtain access to your Apple payment method merely because you use SERHILL. Retention and privacy requests follow the criteria in this policy; requests concerning records held independently by Apple are handled under Apple’s policies. See App Store & Privacy.
Need help or want to withdraw permission?
For payment questions, future-charge permissions or requests about your information, reach SERHILL through our Contact page. Cancellation and refunds for Apple-billed subscriptions follow the separate Apple process described in the general terms and refund policy.
Contact SERHILL