Privacy Policy

1. Data controller

Coachvaly SRL (CUI 41531450, Sos. Mihai Bravu, nr. 136, Bl D20, Scara 2, Et. 3, Ap. 39, Sector 2, Bucuresti) is the data controller responsible for your personal data processed through FitWander, in accordance with the EU General Data Protection Regulation (GDPR).

2. What data we collect

• Account data: name, email address, password (encrypted).
• Usage data: workout, nutrition, travel, and wardrobe entries you create; AI chat conversations; app usage patterns and daily limits.
• Photos: images you upload for photo-scan features (e.g., equipment, meals, wardrobe items). These may be processed by third-party AI vision providers to extract structured data (see Section 4).
• Billing data: subscription status and history; payment details are collected and processed directly by Stripe — we do not store your card number.
• Technical data: IP address, device/browser information, cookies (see our Cookie Policy).

3. Legal basis for processing

We process your data based on: performance of our contract with you (providing the Service), your consent (e.g., marketing communications, certain cookies), and our legitimate interests (e.g., service security, improving the product).

4. Who we share data with

We share data only as necessary to provide the Service:

• Stripe (payment processing).
• Supabase (database and authentication hosting).
• AI providers used for generating plans and analyzing photos (e.g., vision/language model providers).
• We do not sell your personal data to third parties.

Some of these providers may process data outside the European Economic Area; where this occurs, we rely on appropriate safeguards (such as Standard Contractual Clauses) as required by GDPR.

5. Data retention

We retain your data for as long as your account is active, and for a reasonable period afterward as required for legal, accounting, or legitimate business purposes. You may request deletion at any time (see Section 6).

We retain a minimal record of your email address to prevent trial and promotional-discount abuse, even after account deletion. This record contains only your email address and the date a trial or discount was used — no other personal or account data is retained.

6. Your rights

Under GDPR, you have the right to: access your data; request correction or deletion; restrict or object to processing; request data portability; and withdraw consent at any time (where processing is based on consent). To exercise these rights, contact us at coachvaly@yahoo.com. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) or your local supervisory authority.

7. Cookies

We use cookies and similar technologies as described in our Cookie Policy, presented via a consent banner on your first visit.

8. Children

The Service is not directed at individuals under 18. We do not knowingly collect data from minors.

9. Changes to this policy

We may update this Privacy Policy from time to time; material changes will be communicated to you.

10. Contact

Privacy questions or requests: coachvaly@yahoo.com.