Privacy Policy

This Privacy Policy explains how Martin Miller Physique, LLC ("CPBL," "we," "us," or "our") collects, uses, shares, and protects your personal information. It applies to the CPBL website at cpbltraining.com, the CPBL coaching mobile application available on the Apple App Store and Google Play, and the 1:1 coaching services we provide.

We are the data controller responsible for your information. If you do not agree with this policy, please do not use our website, app, or services.

1. Information We Collect

Information you give us directly

• Identity and contact data: first name, last name, email address, phone number, and (optionally) your Instagram handle
• Application and intake responses: your training goals, experience level, current challenges, and readiness to begin — collected through the quiz on our website and during onboarding
• Coaching communications: messages you send us in the app, on calls, or by email

Health and fitness data

This is sensitive personal information, and we treat it accordingly. You choose what to share, and you can decline any of it — though some coaching features depend on it.

• Body weight, measurements, and body composition
• Progress photos you upload
• Training history, workouts logged, and exercise preferences or limitations
• Nutrition intake, dietary preferences, allergies, and restrictions
• Sleep, energy, stress, and lifestyle information shared during check-ins
• Injuries or physical limitations you disclose so programming can be adapted safely
• Data synced from Apple Health or Android Health Connect, if you choose to connect them — see section 14 for exactly what we read and how it is restricted

Payment information

Payments are processed by Stripe. Stripe collects and processes your card details directly under its own privacy policy. We never receive or store your full card number, CVV, or bank account details. We retain only a payment reference, the amount, the date, and your subscription status.

Information collected automatically

• Device type, operating system, and app version
• Browser type and version (website)
• IP address and approximate location derived from it (city/region level — not precise GPS)
• Pages viewed, features used, and timestamps
• Diagnostic and crash information

We do not collect precise GPS location, contacts, or biometric identifiers.

Analytics and crash reporting

Our app platform provider uses standard mobile analytics and crash-reporting tools to keep the app stable and understand which features are used. These process device and usage information such as device model, operating system version, app version, session activity, and crash diagnostics. They are used only to operate and improve the app.

These tools never receive your health data, progress photos, coaching messages, or data synced from Apple Health or Health Connect. We do not use analytics for advertising and we do not track you across other companies' apps or websites.

2. App Permissions

The CPBL app requests permissions only when a feature needs them. You can decline any permission or revoke it later in your device settings; the rest of the app continues to work.

3. How We Use Your Information

• Build and continually adjust your training and nutrition programs
• Review your check-ins, progress photos, and data to make coaching decisions
• Communicate with you about your coaching, progress, scheduling, and account
• Process payments and manage your subscription
• Provide customer support and respond to your requests
• Send program updates, educational content, and promotional messages — only where you have consented, and you can withdraw consent at any time
• Maintain security, prevent fraud and abuse, and debug problems
• Comply with legal obligations and enforce our terms

With your separate, explicit written permission, we may also feature your progress photos and results in our marketing — on our website, social media, or in advertising. This permission is requested on its own, is never a condition of coaching, and can be withdrawn at any time. Without it, your photos are used only for coaching. See section 8 for the detail.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Legal Bases for Processing

If you are in the UK, European Economic Area, or another region with similar law, we rely on these legal bases:

• Contract: to deliver the coaching you signed up for
• Consent: for marketing messages, SMS, and processing your health data — withdrawable at any time
• Legitimate interests: to secure our services, prevent fraud, and improve what we offer, balanced against your rights
• Legal obligation: to meet tax, accounting, and regulatory requirements

Health data is a special category of personal data. We process it on the basis of your explicit consent, which you give when you provide it and can withdraw at any time.

5. SMS Messaging

If you provide your phone number and opt in, you consent to receive SMS messages from CPBL, which may include coaching updates, appointment confirmations, program information, and promotional offers. Message and data rates may apply. Message frequency varies.

Reply STOP to any message to opt out, or HELP for assistance. Opting out of SMS does not affect your coaching services. We do not share your phone number with third parties for their own marketing.

6. Sharing and Service Providers

We do not sell, rent, or trade your personal information. We have not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months.

We share data only with providers who help us operate, each bound by contract to protect it and use it solely for services provided to us:

We may also disclose information where required by law, valid legal process, or to protect the rights, safety, or property of CPBL, our clients, or the public. If we are involved in a merger, acquisition, or sale of assets, your information may transfer — we will notify you before it becomes subject to a different privacy policy.

7. International Data Transfers

We operate from the United States, and our providers store and process data on servers in the United States. If you access our services from outside the U.S., your information will be transferred to and processed in the U.S., where data protection law may differ from your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

8. Data Retention

We keep your information only as long as we need it:

• Active clients: for the duration of coaching
• After coaching ends: up to 24 months, so you can return without starting over — then deleted or anonymized
• Leads who never enrolled: up to 24 months from last contact
• Payment and tax records: 7 years, as required by U.S. law
• Progress photos — no marketing permission given: used only for coaching, and deleted with the rest of your data when your account is deleted or the period above expires
• Progress photos — marketing permission given: retained for as long as that permission stands, so we can continue using them in the materials you approved. Withdraw permission at any time and we stop using them and delete them.

If you request deletion, we act on it regardless of these periods, except where law requires us to retain specific records (such as tax documentation).

9. Security

• Encryption in transit (TLS/HTTPS) across the website and app
• Encryption at rest for stored data with our platform providers
• Access limited to Martin Miller and any authorized personnel who need it to deliver coaching
• Credentials stored as encrypted secrets, never in application code
• Payment data handled entirely by PCI-DSS compliant Stripe

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any required regulator without undue delay and, where legally required, within 72 hours of becoming aware.

10. Your Rights

Depending on where you live, you may have the right to:

• Access — get a copy of the personal information we hold about you
• Correct — fix inaccurate or incomplete information
• Delete — have your personal information erased (see section 11)
• Port — receive your data in a structured, machine-readable format
• Restrict or object — limit how we process your data
• Withdraw consent — at any time, without affecting prior lawful processing
• Opt out of sale or sharing — we do not sell or share personal information, so there is nothing to opt out of
• Non-discrimination — we will not deny service or charge you differently for exercising these rights

Email to exercise any right. We respond within 30 days (or 45 days for California requests, extendable where permitted). We may need to verify your identity first. You may use an authorized agent. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.

11. Deleting Your Account and Data

The CPBL app is a free companion to a coaching relationship — your account is created by your coach when you enrol, not inside the app. Deletion is therefore handled by request rather than a button in the app, and we action every request we receive.

12. Cookies and Tracking

Our website uses a small number of cookies and similar technologies:

• Strictly necessary — security, load balancing, and core functionality. These cannot be switched off.
• Analytics — aggregate understanding of how the site is used, only with your consent.
• Marketing — measuring advertising effectiveness, only with your consent.

You can accept or decline non-essential cookies when you first visit, change your choice at any time, and control cookies through your browser settings. The CPBL mobile app does not use advertising trackers and does not track you across other companies' apps or websites.

13. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a child under 18, we will delete it promptly. If you believe a child has provided us information, contact us at .

14. Health Data and Connected Health Apps

Apple Health and Android Health Connect

The CPBL app can connect to Apple Health (iOS) and Health Connect (Android) so your coach can see activity that happens outside the app. This connection is entirely optional and off by default. Nothing is read unless you turn it on and grant permission, and the app works fully without it.

What we read — only the types needed for coaching decisions, and only those you approve:

• Steps and general activity
• Workouts and exercise sessions
• Active and resting energy
• Body weight and body composition
• Heart rate, where you have chosen to share it
• Sleep duration, where you have chosen to share it

What we do with it: your coach reviews it alongside your check-ins to adjust your training and nutrition. That is the only purpose.

Turning it off: revoke access at any time in iOS Settings → Health → Data Access & Devices → CPBL, or Android Settings → Health Connect → App permissions. You can also disconnect inside the app under Profile → Health Connection. Revoking stops all future syncing immediately. To also remove health data already synced, request deletion via section 11.

Retention: synced health data is kept for the duration of your coaching and deleted with the rest of your data when you request deletion or after the retention period in section 8.

We are not a healthcare provider

CPBL is a fitness coaching service. Martin Miller is not a licensed physician, registered dietitian, or physical therapist, and nothing provided through our services is medical advice, diagnosis, or treatment.

Because we are not a covered entity or business associate, HIPAA does not apply to the information you share with us. We nevertheless treat your health and fitness data as sensitive personal information and protect it as described throughout this policy. Consult a qualified healthcare provider before beginning any exercise or nutrition program.

15. Changes to This Policy

We may update this policy from time to time. Material changes will be announced by email or in-app notice at least 14 days before taking effect, and the "Last updated" date above will change. Continuing to use our services after an update means you accept the revised policy. Where the law requires fresh consent, we will ask for it.

16. Contact Us

Questions about this policy or how we handle your data:

• Entity: Martin Miller Physique, LLC
• Email:
• Website: cpbltraining.com
• Response time: within 30 days of receipt