LEGAL

Privacy policy

Initial draft, pending legal review. Since this involves health data (a special category under GDPR), it is essential that a legal professional validate this policy before the site is published.

1. Data controller

[Name/company name, tax ID, address, contact email of the controller].

2. Data we collect

Account data: name, email, password (stored encrypted).
Payment data: handled directly by PayPal; this site does not store card details.
Anthropometric and health data: age, sex, height, weight, injuries, known conditions, medication and supplementation declared in the questionnaire.
Tracking data: weight, adherence, reported pain and perceived effort at each periodic update.

3. Purpose and legal basis

Health data is processed on the basis of the user's explicit consent (art. 9.2.a GDPR), collected before the initial questionnaire, for the sole purpose of generating and adjusting their training and nutrition plan. Account and payment data are processed for the performance of the service contract.

4. Retention

Data is retained while the account remains active and for the additional period required by applicable tax and consumer regulations. The user may request deletion under the terms of point 6.

5. Disclosure to third parties

Data is only shared with PayPal (payment processing) and the hosting/email provider (Hostinger) as data processors, under the corresponding agreements.

6. User rights

The user may exercise their rights of access, rectification, erasure, objection, restriction and portability by writing to [contact email].