Privacy Policy

The ENGAGE coaching app (“the app”) is a coaching session booking tool operated by ENGAGE (engageconsultings.com). This policy explains what information the app collects, how it is used, and the choices you have.

• Account details entered by an ENGAGE administrator: your name, email address and role (participant, coach or administrator), plus the coach you are assigned to.
• Booking details: session times, status (scheduled, completed, canceled) and the Google Meet link for each session.
• Coach availability: the weekly hours a coach makes bookable.
• Sign-in data: session cookies and one-time sign-in links, used only to keep you signed in securely.
• Google account data (coaches only), described below.

Coaches may connect a Google account. When they do, the app requests these permissions:

• Basic profile and email address (openid, userinfo.email, userinfo.profile) to identify which Google account is connected and show it on the Connections page.
• Free/busy information (calendar.freebusy) to hide times when the coach is already busy. The app only receives busy time ranges, never event titles, descriptions or attendees. These ranges are used at the moment slots are shown and are not stored.
• Calendar events (calendar.events) to create an event with a Google Meet link for each booked session, invite the participant, and update or delete that event if the session is rescheduled or canceled. The app only modifies events it created; it does not read, change or delete any other events.

The app stores the OAuth access and refresh tokens Google issues, encrypted, so it can keep session events in sync. It stores the Meet link and event identifier for each session it creates.

ENGAGE's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the scheduling features described here. It is never sold, never used for advertising, never used to train AI or machine learning models, and never read by people except where you ask us to for support, where needed for security, or where required by law.

• To let participants book, reschedule and cancel sessions.
• To send sign-in links, invitations, booking confirmations and reminders by email.
• To let ENGAGE administrators run the coaching programme (for example, seeing how many sessions each participant has used).
• To keep the app secure and fix problems.

We do not sell or rent personal information. Information is shared only:

• Between the people in a booking: a participant's name and email are visible to their coach and to administrators, and both appear on the calendar invite.
• With service providers that run the app on our behalf: Railway (hosting and database), Resend (email delivery) and Google (Calendar and Meet). They process data only to provide their service to us.
• When required by law.

We keep account and booking information for as long as the coaching programme runs and as needed for programme records. When a coach disconnects Google, the stored Google tokens are deleted. You can also remove the app's access at any time from your Google Account permissions page.

To request a copy of your data, a correction, or deletion of your account, email [email protected].

Data is sent over HTTPS. Google OAuth tokens are encrypted at rest. Access to the app requires an account created by an administrator, and each role only sees the information it needs.

If this policy changes, we will update the date at the top of this page. Significant changes will be communicated to users by email.

Questions about this policy or your data: [email protected].