That HRV Guy™
This policy explains what information we collect, why, where it lives, who touches it, and what you can do about it. We have tried to write it in plain language rather than legalese, because a privacy policy you cannot read is not really a disclosure.
Who we are. That HRV Guy LLC ("we," "us," "our") is a Nevada limited liability company. We are the company responsible for your information. Our service providers process data on our behalf and under our instructions, but the responsibility is ours.
What this covers. Our website at thathrvguy.com, our coaching application at coach.thathrvguy.com, the HRV quiz, the HRV Coach, our courses, and our paid programs (the "Services").
Contents
Information you give us:
Information we generate:
Information collected automatically:
We do not collect more than we need. We do not ask for your date of birth, your address, your medical records, or your wearable data. As of the date of this policy, we do not connect to or read data from any wearable or HRV tracking device.
Your information sits in two systems, and we think you should know which is which.
| System | What it holds |
|---|---|
| GoHighLevel (our CRM, funnel, and email/SMS platform) | Your name, email, phone, purchase history, quiz segment, email engagement, and your sign-in link. |
| Origins (theorigins.one, our application platform, which runs the coach and the courses) | Your account, your conversations with the HRV Coach, your journal entries, your course progress, and your quiz responses. |
Your quiz answers exist in both, because the quiz runs on the app and sends your result to our CRM so we know which guide and which emails to send you.
Stripe processes your payment. Origins is the platform partner that runs the coach and the courses on our behalf.
To deliver what you asked for. Specifically: to send you the HRV Guide, to give you access to the coach and to any course you bought, to remember your conversations so the coach has continuity with you, to process your payment and any refund, to send you the emails you signed up for, to answer you when you write to us, to keep the Services secure, and to meet our legal obligations.
We may use aggregated and de-identified information to understand how the Services are being used and to improve them. Aggregated data does not identify you.
We will not use your private conversations, journal entries, or coach messages as a testimonial or in marketing without your explicit, affirmative permission, and you can withdraw that permission at any time.
We do not sell your personal information. We have never sold it. We are not going to.
We also do not share your coach conversations, your journal entries, or your health information with advertisers, ad networks, or data brokers. Not now, not later. That is a line, not a current policy setting.
This is the part people most want to understand, so here it is plainly.
Your messages are processed by AI. When you write to the HRV Coach, what you type is sent to a third-party large language model provider, through our platform partner, in order to generate a response. Responses are generated algorithmically. Salim does not write them and does not read them as they happen.
Your conversations are stored. They have to be, or the coach cannot remember you between sessions. That continuity is the point of it.
Your conversations are not used to train AI models. We do not authorize our platform partner or the AI provider to use your conversations to train or improve their general-purpose models.
Logs. The AI provider retains short-term logs, typically for around 30 days (and in some cases up to 55, depending on the model), for safety and abuse monitoring. Those logs then expire. This matters for deletion, and we explain what that means in Section 10.
Human access is limited. Nobody at That HRV Guy sits and reads your conversations. Authorized technical staff at our platform partner may access data when they need to for maintenance, troubleshooting, security, or abuse prevention. That access is restricted and logged.
One exception, and it exists to protect you. If the coach detects that you may be in crisis, it will surface emergency resources immediately, and it will alert Salim so that a human being knows. See Section 6.
Our inbox uses AI too. When you message us on Instagram or by email, an AI assistant (a large language model from a third-party provider, currently Anthropic's Claude) may read the message to help us sort it and draft a reply. A human reviews and approves replies before they are sent. The only exceptions are simple fixed responses, like a heart back to a heart, or the quiz link when you ask for it. The AI provider retains short-term logs, typically around 30 days, for safety and abuse monitoring, and does not use your messages to train its models.
If the coach detects that you may be at risk of harming yourself, it will show you crisis resources immediately, including the 988 Suicide & Crisis Lifeline and the Crisis Text Line (text HOME to 741741).
It will also send an alert to Salim so that a human knows it happened. The alert does not contain your conversation. It tells him that a flag was raised, and he can choose to open the conversation to follow up with care.
To be honest with you about what this is and is not: the coach's automated crisis response is the immediate response. Salim's follow-up is human care afterward. It is not an emergency service, and nobody is standing by in real time. If you are in danger, please call 911 or 988.
We may also disclose information to law enforcement or emergency responders where we have a good-faith belief it is necessary to address a credible threat of harm.
That is the whole list.
We use cookies and similar technologies to keep the site working, keep it secure, remember your preferences, and understand how people move through it.
As of the effective date of this policy, we do not run any advertising or social-media tracking pixels. No Meta pixel, no TikTok pixel, no ad-network tags.
We may add analytics and advertising technologies in future. If and when we do, those tools may collect information about how you use our site in order to measure performance and show you relevant ads elsewhere. Under California law that can count as "sharing" for cross-context behavioral advertising. If we turn that on, you will be able to opt out using the "Do Not Sell or Share My Personal Information" link on our site or by emailing [email protected], and we honor Global Privacy Control (GPC) browser signals.
We will never place advertising tags on the coach, or use anything you tell the coach to target advertising to you.
You can also manage cookies through your browser settings.
Wherever you live, you may ask us to:
How to ask: email [email protected]. We may need to verify who you are before we act, which protects you. We will respond within 45 days, and we will tell you if we need one extension.
If we say no, you can appeal. Email [email protected], which is a different inbox on purpose. We will review it and give you a written answer.
We will not treat you worse for exercising any of these rights.
We want to be precise here rather than reassuring.
When you ask us to delete your data, we remove your account, your conversation history, and your personal information from the active systems promptly.
Short-term logs are the exception. The AI provider keeps safety-and-abuse logs for roughly 30 days (up to 55 for some models), and our systems keep backups for a limited period for disaster recovery. Those copies expire on their own schedules and are then gone. We cannot reach in and erase them instantly, and we are not going to tell you we can.
We also keep transaction and billing records for as long as tax and accounting law requires, regardless of a deletion request. That is not us being difficult, it is a legal obligation.
We keep your information while your account is active, and for 24 months after it goes inactive, so you can come back and pick up where you left off. After that we delete or de-identify it, unless the law requires us to keep it longer.
One record runs longer: we keep the timestamped record of your acceptance of our terms and policies for as long as your account exists, plus three (3) years, so we can prove what you agreed to and when.
You do not have to wait. You can ask us to delete it at any time.
We use encryption in transit (HTTPS), access controls, authentication, and logging of administrative access. Our service providers are required to maintain appropriate safeguards.
No online service can promise perfect security, and we are not going to pretend otherwise. If we become aware of a breach involving your personal information, we will investigate, contain it, and notify you and the relevant authorities where the law requires it.
Because the HRV Coach invites you to talk about your body, your stress, your sleep, and your nervous system, some of what you share is consumer health data under the laws of several states.
We treat that information with additional protections, and it has its own separate policy, which you can read here:
Consumer Health Data Privacy Policy
If you live in California, the CCPA (as amended by the CPRA) gives you the rights described in Section 9, plus the right to know the categories of information we collect, the sources, why we collect it, and who we disclose it to. All of that is in Sections 1, 2, 3, and 7 of this policy.
You have the right to limit our use of sensitive personal information. We only use it to provide the Services, keep them secure, and comply with the law.
We do not sell your personal information. If we ever run advertising technologies that qualify as "sharing" under California law, we will provide a "Do Not Sell or Share My Personal Information" link, and we honor Global Privacy Control signals.
If you live in Virginia, Colorado, Connecticut, Texas, Oregon, Montana, or another state with a consumer privacy law, you have the rights in Section 9. Email [email protected] to use them, and [email protected] to appeal.
Washington and Nevada residents: please also see the Consumer Health Data Privacy Policy.
The Services are for adults. You must be 18 or older. We do not knowingly collect information from anyone under 18. If we find out we have, we will delete it and close the account. If you are a parent or guardian and believe a minor has given us information, email [email protected] and we will handle it.
We are a United States company and your information is processed in the United States. If you use the Services from outside the US, your information will be transferred here, where privacy laws may differ from those in your country.
If we change this policy we will post the new version here with a new effective date. If a change is significant, we will make a reasonable effort to tell you.