The Praxis Data Promise

At Praxis Performance, we do not own your personal, biometric, or biomechanical data; we are its strict operational stewards. Our coaching and tracking platforms are built on the core principle of User Sovereignty, meaning you maintain primary authority over your performance records. We collect, process, and utilize only the minimum information necessary to safely optimize your physical programming, track performance diagnostics, and satisfy the administrative parameters of your Letter of Medical Necessity (LMN).  

We protect your personal identifiers and performance logs using strict internal data security standards designed to prevent credential compromise and minimize interception risks: 

• Hardware-Authenticated Entry: Internal administrative staff accounts with direct access to our centralized database are secured with physical YubiKey 5 Series hardware security keys. This rule prevents unauthorized access to client metrics even in the event of primary credential or password exposure. 
• Phishing-Resistant Workflows: Staff access points deploy hardware-bound passkeys integrated through the Google Identity platform, mitigating the risks of credential interception or malicious phishing attempts. 
• Data Encryption Parameters: Personal and performance data is systematically encrypted while at rest utilizing AES-256 standard protocols and while in transit across networks utilizing TLS 1.3 encryption. 
• Technical Safeguard Limitations: While we implement these rigorous administrative, physical, and technical safeguards, absolute data confidentiality and transmission safety cannot be completely or mathematically guaranteed. All technology infrastructures are operated subject to the liability limitations set forth in Section 13 of the master Client Services Agreement. 

To maintain precision across your lifestyle, conditioning, and longevity programming, we utilize a modular, technology-assisted Diagnostic Tech Stack to document baseline metrics. 

• Dynamic System Evolution: Our diagnostic hardware and software configurations evolve continuously as more precise performance technologies, tracking protocols, and automated recording tools emerge. 
• Vetted Ingestion Review: Every technical component, software module, or diagnostic hardware system introduced into our operations undergoes a thorough administrative and data-security review. Where applicable, external utilities are bound by infrastructure-level data protection agreements to ensure your metrics are handled with professional rigor. These technological systems function strictly as administrative documentation tools and do not exercise autonomous medical decision-making or independent clinical judgment. 

Your privacy expectations extend past your digital portal and apply directly to your physical interactions within our training studio: 

• Restricted Assessment Zones: All diagnostic testing, force-plate reviews, and initial physical assessments are performed within designated private or semi-private zones to avoid unauthorized visual observation. 
• Controlled Appointment Access: To preserve the operational privacy of our active cohort members, the physical facility is not open to the general public. Entry is strictly restricted to scheduled appointments for active clients and authorized professionals only

In complete alignment with California consumer privacy standards and the FTC Health Breach Notification Rule, you retain the following explicit data rights: 

• Right to Request Deletion: You may request the deletion of your digital performance records from our active systems at any time. This right is subject to necessary administrative retention parameters, including the preservation of signed liability waivers, legal agreements, and historical billing transactions required under California law. 
• Right to Data Portability: You maintain the right to request a clean, portable, and structured digital copy of your collected biometric and performance summaries to transmit to designated healthcare providers or specialists. 
• Absolute Ban on Data Monetization: We never sell, lease, commercialize, or share your Sensitive Personal Information (SPI), biometric records, or contact info with third-party advertisers or external data brokers

• Operational Status: Praxis Performance Studio LLC ("Praxis Performance") is a Non-Covered Entity (NCE). All consumer health, conditioning, and biometric data is protected under the FTC Health Breach Notification Rule and the CCPA/CPRA, not the HIPAA Privacy Rule. 
• No Medical Services: We are a performance-based coaching and educational platform. We do not provide medical diagnoses, treatment, prescriptions, clinical medical supervision, or medical advice