← BMP Human Engineering
Legal / Executive Performance

Privacy Policy

Executive Performance plugin for ChatGPT and Codex.

Operated by BMP Human Engineering · Miami, Florida · Effective October 28, 2026

1. Summary

QuestionAnswer
What do you collect?Assessment answers, briefly — and never store them. Derived scores, only with your consent. Contact details, only when you ask to be contacted.
What do you store?Derived performance scores (with consent). Name, email, goal and optional note, only for coaching requests.
Do you collect health information?No. Diagnoses, medications and clinical data are actively rejected by the system.
Do you share data with third parties?No. No exceptions, no selling, no ad-tech, no analytics vendors, no third-party model training.
How long is data kept?Maximum 180 days, then automatically deleted.
How do I delete my data?Ask the assistant to stop tracking, or contact us. Deletion is immediate.

2. What we collect, and what we do with it

2.1 Assessment answers — processed, never stored

When you complete a performance assessment, the plugin receives answers about your training history, movement control, aches, nutrition consistency, protein intake, meal timing, sleep hours, stress, recovery practices and your primary goal.

These answers are held in memory for the duration of the request only and are used to compute your scores. They are not written to disk, not written to any log, and not transmitted to us. The server computes and returns; it does not keep.

2.2 Derived performance scores — stored only with your consent

The system may store the derived results: your overall score, your three pillar scores and their bands, your primary lever, and your stated goal. These are numbers, not the answers behind them.

This happens only after you explicitly agree via the privacy consent step, and you may withdraw that consent at any time. Withdrawing stops future storage and deletes what has been collected.

2.3 Contact details — stored only when you ask to be contacted

If you explicitly ask to be contacted about one-to-one coaching, we store:

We use these for exactly one purpose: to reply to you about coaching. Stored data is deleted after 180 days.

2.4 What we never collect

The plugin's server actively rejects requests containing any of the following and returns an error rather than storing them:

Free-text notes are scanned for identifiers before storage and redacted if they contain them. We do not engage in surveillance, behavioural profiling, or tracking of your query patterns beyond what is necessary to operate the plugin.

3. How we use your data

We do not use your data for advertising, profiling, model training, or marketing.

4. Sharing

We do not share your personal data with third parties. No data brokers, no ad networks, no analytics vendors, no third-party model training. Data is not sold.

Data is hosted on infrastructure operated by us. Our infrastructure providers process data strictly on our instructions as subprocessors and are not permitted to use it for their own purposes.

5. Retention

Retention is enforced in code: expired records are purged on every read and write, not on a schedule that could be delayed.

6. Your rights

You can, at any time:

Deletion requests are honoured immediately and cover derived scores and contact details. There is no data to delete for assessment answers, because they are never stored.

To exercise any of these rights, ask the assistant in the plugin, or contact us at kvnmiller11@gmail.com.

7. Children

This plugin is not directed at children under 13 and is not intended for use by them.

8. Health information

This plugin provides general performance coaching. It does not provide medical advice, diagnosis, or treatment, and it is not a substitute for a licensed clinician or a registered dietitian. Users with medical conditions, medication, injury recovery needs, pregnancy, or a history of disordered eating are directed to appropriate professionals, and the plugin does not generate programs for them.

9. Security

Data is transmitted over TLS. The MCP server is read-only with respect to your assessment answers, validates all input against a strict schema, and rejects restricted data categories at the boundary. Request authorization is enforced at the server edge; the identity of the caller is pseudonymous and the auth token is hashed, never stored raw.

10. Changes

Material changes to this policy will be published here with an updated effective date. Continuing to use the plugin after a change means you accept the updated policy.

11. Contact

BMP Human Engineering
Miami, Florida, United States
kvnmiller11@gmail.com


BMP Human Engineering Privacy Terms Support