[bracketed] placeholder and have a qualified lawyer review it before relying on it publicly.This policy explains how the Performance Coaching app ("we", "us") processes personal data under the EU General Data Protection Regulation (GDPR / DSGVO). Controller: Moritz Wegstein, Taubenstraße [Hausnummer], 60313 Frankfurt am Main, Germany — performancebymw@gmail.com (see the Imprint).
1. What we collect
- Account data: email address and authentication credentials.
- Profile & health data: age, gender, height, weight history, activity level, goals, and derived metabolic figures (BMR, TDEE).
- Activity data: logged meals, portion counts, workouts, streaks, and coach comments.
- Technical data: minimal server logs needed to operate and secure the service.
2. Health data (special category — Art. 9 GDPR)
Weight, nutrition, and training information constitute health data under Art. 9 GDPR. We process this data only on the basis of your explicit written consent, given during account registration, and only to provide the coaching service you signed up for. You may withdraw consent at any time by deleting your account (see Section 5).
3. Legal bases
- Art. 6(1)(b) GDPR — performance of a contract: to provide the app and coaching service.
- Art. 9(2)(a) GDPR — explicit consent: for health‑ related data (weight, nutrition, training).
- Art. 6(1)(f) GDPR — legitimate interests: security and basic operation of the service.
4. Sub-processors we use
We share data only with service providers acting on our instructions under a Data Processing Agreement:
- Supabase Inc. — database, authentication, and storage (EU region). Privacy policy: supabase.com/privacy.
- Vercel Inc. — application hosting and global delivery (data may be processed in the EU and United States). Privacy policy: vercel.com/legal/privacy-policy.
- Anthropic PBC — AI meal parsing (feature currently disabled; only the text you submit is sent if the feature is active). Privacy policy: anthropic.com/privacy.
Where a provider processes data outside the EU/EEA, transfers rely on EU Standard Contractual Clauses or an adequacy decision.
Independent coaches (e.g. Ana Fumero, Kaitlin Georges) who use this platform to coach their own clients act as independent data controllers for their respective client relationships. Their use of your data is governed by their own privacy notices and any coaching agreement you hold with them.
5. Retention
We keep your data for as long as your account is active or the coaching relationship is ongoing. Your data is deleted:
- immediately when you delete your account via Account Settings;
- upon termination of your coaching relationship, unless you request continued retention; or
- upon your written deletion request to performancebymw@gmail.com.
We may retain data where required by law (e.g. tax records up to 10 years under German commercial law).
6. Your rights
Under the GDPR you have the right to:
- access, rectify, and erase your data;
- restrict or object to processing;
- data portability (export your data as JSON);
- withdraw consent at any time (without affecting past processing);
- lodge a complaint with the competent supervisory authority — in Germany: Hessischer Beauftragter für Datenschutz und Informationsfreiheit (HBDI), datenschutz.hessen.de.
You can export or delete your data directly under Account → Your data. For other requests, contact performancebymw@gmail.com.
7. Cookies & local storage
We use only storage that is strictly necessary to run the app (authentication session cookies and local storage for your theme preference). We do not use advertising trackers or analytics cookies.
8. Changes
We may update this policy and will indicate the date of the latest version above. Material changes will be communicated via the app.