Privacy Notice

1. Data we collect and why

• Account data — email address and login credentials, used to create and secure your account. Legal basis: performance of our contract with you.
• Athlete profile — name, age, position, playing level, goals, available equipment and weekly club schedule, used to personalise your plan. Legal basis: contract performance.
• Wellbeing check-in data — self-reported sleep, energy, soreness, mood, stress and optional HRV/resting heart rate figures, used to calculate your recovery and sleep scores and analytics. Legal basis: contract performance; where this is treated as health-related data in your country, we rely on your explicit consent, which you give by entering it and can withdraw at any time by deleting the entries or your account.
• AI coach messages — the questions you send and the responses generated, used to provide the coaching feature and keep your chat history. Legal basis: contract performance.
• Usage, device and log data — IP address, device/browser information, error reports and feature usage, used for security, fraud prevention, debugging and product improvement. Legal basis: our legitimate interest in a secure, working product.
• Support messages — what you send us when you ask for help. Legal basis: contract performance and legitimate interest.

We do not collect or store your card details. Payment data is collected and processed by Paddle as Merchant of Record.

2. Who we share data with

• Service providers and subprocessors that host and run the app (cloud hosting, database and authentication, error monitoring) and the AI provider that generates coach responses.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, invoicing and tax compliance.
• Professional advisers such as legal and accounting advisers, where necessary.
• Authorities, where we are required to disclose by law.

We do not sell your personal data.

3. International transfers

Some of our providers process data outside the EEA/UK. Where that happens we rely on adequacy decisions or Standard Contractual Clauses together with appropriate technical safeguards.

4. Retention

We keep your account, profile, check-in and coaching data for as long as your account is active and for up to 12 months after you delete it or after prolonged inactivity, after which it is deleted or anonymised. Billing records held by us are kept only as long as legal and accounting obligations require. Security logs are kept for up to 12 months.

5. Your rights

Subject to applicable law, you have the right to access your data, correct it, erase it, restrict or object to processing, receive it in a portable format, and withdraw consent at any time. You can also lodge a complaint with your data protection supervisory authority — in Greece, the Hellenic Data Protection Authority. We respond to requests within one month. To exercise a right, contact us through the support option on your profile page.

6. Security

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage at rest, row-level database access rules that isolate each athlete's data, and restricted administrative access. No system is perfectly secure, but we review our controls regularly.

7. Cookies and local storage

We use strictly necessary cookies and browser storage to keep you signed in, remember your session state and secure the checkout flow. These are required for the Service to work. We do not use advertising or cross-site tracking cookies. You can clear cookies and storage in your browser settings, though this will sign you out.

8. Changes

We may update this notice and will post the revised version here with a new "last updated" date.