Privacy policy

Last updated: October 15, 2026.

Gravitate is operated by Ethan Catzel under the Cali Lab name. This policy covers the Gravitate website and its backend services. For privacy questions or requests, email ethancatzel@gmail.com.

Information we collect

• Account information: your email address, email verification status, account identifiers and any name or profile image already held for your account. The current sign-in flow collects only your email and an emailed code. Codes are stored hashed and expire after five minutes. We do not ask for an email account password.
• Client and invitation information: names, email addresses and client notes entered by coaches, coach-client connections, and invitation messages, recipients, tokens, send times and acceptance times. A coach can create a client record before that person has a Gravitate account.
• Training information: programs, scheduled workouts, exercise instructions, completion status, recorded results and session notes. Freeform notes and results may contain health information if you or your coach enter it. Share only information needed for your coaching. Coaches must obtain any required permission before entering another person's sensitive information.
• Technical information: authentication sessions, IP addresses, browser information, request and security logs, and error reports with technical details and timestamps. Your browser also stores local display preferences.
• Support information: messages and feedback you send us.

How we use information

We use this information to verify email ownership, sign you in, send invitations, connect clients with coaches, save and display training, support users, and investigate reliability or security problems. Gravitate's current coaching and workout flows do not send training information to AI planning services.

What coaches and clients can see

A coach can see their own client records, programs, assigned workouts, and the results and session notes for those workouts. Joined clients can see their assigned training and record results and session notes that their coach can read. Coach-only client notes are not shown in the client training view.

You can join more than one coach. Each coach sees only their own workspace and its client records and training. Accepting an invite permits that coach-client connection. Coaches may also hold information outside Gravitate under their own privacy practices. Contact your coach about those records.

Service providers and other sharing

Cloudflare hosts Gravitate, stores account and training records, delivers authentication and invitation emails, and serves exercise media. Sentry receives browser and server error reports so we can investigate failures. We do not deliberately attach your name, email address or account identifier to Sentry reports. Reports can include request or page details and technical error context. These providers may process information in countries other than your own.

• Cloudflare privacy policy
• Sentry privacy policy

We do not sell personal information or use it for advertising or tracking across other companies' websites. We may disclose information when required by law or when necessary to protect users, secure the service or address abuse.

Cookies, storage and security

Gravitate uses an authentication cookie to keep you signed in. Sessions expire after 30 days and can renew during use. A separate browser cookie remembers whether you last used coaching or client training. Local storage remembers display preferences such as filters, sorting and calendar views. These settings stay in that browser. Gravitate does not use advertising cookies.

Account, invitation and training records currently have no automatic deletion period. Expiry of a code, invite or session does not delete the underlying account or training records. Archiving clients or programs and removing workouts preserves records for recovery. Sentry retention depends on its plan and settings. Provider logs and backups follow their own retention processes.

We use encrypted network connections and authenticated, workspace-scoped access to training data. No storage or transmission method can guarantee absolute security.

Your choices and requests

To request access, correction, account deletion, or help disconnecting from a coach, email ethancatzel@gmail.com. You can contact us even if a coach created your record and you have no account. We may verify your identity before acting. Gravitate currently has no self-service account deletion or coach-disconnection control. Signing out or clearing browser storage does not delete server records.

We will explain what can be removed and any records that must be retained for legal or security reasons, including records held by your coach. To raise a privacy complaint, contact us at the same address. You may also have rights under the laws where you live, including the right to complain to a privacy regulator.

Changes

We will update this page and its date when our practices change. We will communicate material changes through the service or another appropriate channel.