Trust Center
This page is maintained by the Insight Progress team to answer common security and privacy questions about the app. It describes controls that are currently in place and is not an independent certification or audit report.
Insight Progress runs on managed cloud infrastructure. The platform provider operates the underlying hosting, database, and authentication services; the Insight Progress team is responsible for application logic, access rules, and how customer data is used inside the product. Customers are responsible for keeping their account credentials safe.
Accounts are protected by email and password sign-in, with optional Google sign-in. Each user can only read and write their own data. Coaches can only access the records of clients who have an active subscription with them. Administrative actions are restricted to accounts with an explicit admin role, enforced server-side.
All traffic between your browser and Insight Progress is encrypted with HTTPS/TLS. Data stored in our managed database and object storage is encrypted at rest by the platform provider using standard disk-level encryption.
Account profile (name, email), onboarding answers (goals, training history, basic body metrics you choose to enter), check-in submissions, workouts and nutrition logs you record, progress photos you upload, and messages you send to your coach or the AI assistant. We do not sell personal data.
We use a small number of trusted vendors to operate the service: a managed Postgres & authentication provider for the database and accounts, a transactional email provider for account and notification emails, an AI gateway for assistant features, and a push notification service for opt-in alerts. Each only receives the data needed to perform its function.
AI suggestions, summaries, and coach-assist features send only the relevant context (for example your recent check-ins or workout history) to the AI provider. AI output is shown as guidance — coaches review and approve plan changes before they take effect.
Your data is retained while your account is active. You can delete your account from Profile → Account; this removes your personal records from the application database. Backup copies held by our infrastructure provider age out on their standard schedule.
If you believe you have found a security vulnerability, please email security@insightprogress.com. We appreciate responsible disclosure and will respond as quickly as we can.
For data access, correction, or deletion requests, email privacy@insightprogress.com from the address associated with your account.