Privacy policy
Last updated: 2026-08-11. Beta — this policy will be lawyer-reviewed before public launch.
What we store
- Your email address (for sign-in and account recovery).
- Your training logs — sets, reps, weights, notes.
- Your morning check answers — symptom scores, life-load rating, outside-training text.
- Your self-scored assessments — hip check, future shoulder / knee / back checks.
- Program state — which program you're on, which week, accepted proposals.
- Personal contraindications — movements you flag as painful.
- Uploaded GPX files if you import them (endurance sessions).
- Timestamps of when you accepted the terms and consented to health-data storage.
Where it lives
- Account, email, session data: Supabase (Frankfurt or Paris, EU region).
- Training logs and symptom data: Cloudflare KV (edge cache, replicated).
- Uploaded raw GPX files, if we ever preserve them: Cloudflare R2 (Frankfurt).
- Payment data (when paid tier launches): handled entirely by Paddle. We never see card numbers.
Health data is special
Symptom scores and pain ratings are "special category data" under GDPR. We store them only because you explicitly consented at sign-up. You can revoke consent and delete all data at any time from the Data tab.
What we don't do
- We don't sell your data. Ever.
- We don't train AI models on your data.
- We don't share your data with third parties except the infrastructure providers named above (Supabase, Cloudflare, Paddle) — these are sub-processors under DPAs.
- We don't use your data for advertising.
Your rights (GDPR)
- Access — export your entire data set as JSON from the Data tab.
- Delete — one-click account deletion from the Data tab. Wipes all data from our systems within 30 days; some backups may take up to 90 days to purge.
- Correct — edit anything you've logged, any time.
- Portability — the JSON export is designed to be usable elsewhere.
- Complain — you can contact your local data protection authority. In Estonia: aki.ee.
Contact
For anything privacy-related, email margus@dolmit.com.