Privacy policy

Last updated: 21 October 2026

1. Controller

Jan-Luca Trott, Osterkamps Kamp 13, 49525 Lengerich, Germany. Email: janlucatrott1@gmail.com

2. What data I process and why

• Account and contact data (name, email, phone if given): to sign you in and deliver the coaching. Legal basis: Art. 6(1)(b) GDPR (contract).
• Health data (body weight, body measurements, progress photos, food, training data, injuries, answers from the health questionnaire): only for your personal coaching. Legal basis: your explicit consent, Art. 9(2)(a) GDPR. You can withdraw it at any time for the future; an email is enough.
• Messages between you and me in the app: to communicate during the coaching (Art. 6(1)(b) GDPR).
• Technical data (IP address, time, device and browser) in server logs: to run and secure the app, for example to stop abuse of the sign-in. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
• Payment data: payments run through Stripe. I never receive your full card details (Art. 6(1)(b) and (c) GDPR).

3. Service providers (processors)

• Supabase (Supabase Inc., USA): database and storage of your data and photos. Server location: London (UK, covered by an EU adequacy decision).
• Vercel (Vercel Inc., USA): hosting of the app.
• Anthropic (Anthropic PBC, USA): AI features, for example drafting your training plan, analysing food photos and the coach assistant. Only the information needed for each feature is sent. I review every AI draft myself.
• Email delivery: sign-in codes and notifications are sent through an email service provider.
• Push notifications: if you allow them, they run through the push service of your browser or device (for example Apple, Google or Mozilla).
• Stripe (Stripe Payments Europe Ltd., Ireland): payment processing.

For transfers to the USA, these providers rely on the EU-US Data Privacy Framework or EU Standard Contractual Clauses (Art. 45 and 46 GDPR).

4. Cookies and local storage

The app only uses cookies and local storage that are technically necessary, for example to keep you signed in (§ 25(2) TDDDG). There is no tracking and no advertising.

5. How long I keep your data

I keep your data while your coaching runs. After that I delete it, unless you want to keep access or the law requires me to keep it (for example 10 years for invoices under German tax law). On request I delete your data earlier.

6. Your rights

You have the right to access, correct and delete your data, to restrict processing, to data portability and to object (Art. 15 to 21 GDPR), and to withdraw any consent (Art. 7(3) GDPR). An email to me is enough. You can also complain to a data protection authority, for example the one in your country or the Data Protection Commissioner of Lower Saxony (Germany).

7. Do you have to provide data?

Without an email address you cannot sign in. Without health data I cannot coach you individually.

Legal notice · Privacy · Terms · Back to the app