Trust

Your data.
Locked down.

This page lists only what's actually running in production. No badges we haven't earned — just how Z6 protects your data, plainly.

TLS
In transit
Encrypted
At rest
Every table
Row-level security
Daily
Backups
What we do
The essentials,
well.

Infrastructure

Z6 runs on Supabase (Postgres) and Vercel. Data is encrypted in transit over TLS and encrypted at rest.

Row-level security

Access control lives in the database itself. Row-level security is enforced on every table, so each coach and each client can only reach their own data — the database refuses everything else.

Payments

All payments are processed by Stripe. Card numbers never touch Z6 servers. Your own Stripe account is the merchant of record — your clients pay you, directly.

Money audit trail

An append-only payment audit log records every money event. Entries can be added — never edited, never deleted.

Integrity checks

Automated data-integrity checks run nightly and gate every deploy. A release that fails them doesn't ship.

Monitoring & backups

Error monitoring via Sentry. Daily automated backups, handled by Supabase.

Ownership
Your clients.
Your data.

Z6 is built and based in Ontario, Canada — and your business stays yours.

The coach owns it

Client data ownership stays with the coach. Your programs, your clients, your records — Z6 is the tool, not the owner.

Export in full

Full data export is available. Your data leaves with you, not in pieces.

Deleted on request

Ask us to delete your account and we delete it. Email info@z6coaching.com.

Responsible disclosure
Found a vulnerability?

Email info@z6coaching.com with details. Reports go straight to the people who can fix them.

Rules: don't access data that isn't yours, don't disrupt the service, don't publish until we've patched.

Security questions? Ask us directly.
WE READ EVERYTHING SENT TO INFO@Z6COACHING.COM
Report an issue →