Privacy Policy

1. Who we are

YOU (“we”, “us”, “our”) is operated by Dominik Maruszczak. You can contact us at hello@ownurself.app.

2. What we collect

We collect only what is necessary to provide the service:

• Account data: name, email address, hashed password (via Supabase Auth)
• Profile data: role (personal trainer or client), coach–client relationships
• Training data: workout programs, exercise logs, session notes, progress metrics
• Messages: direct messages between coaches and clients
• Voice recordings: audio recorded during sessions, processed for transcription and deleted after processing
• Usage data: app interactions necessary for the service to function (no third-party analytics)
• Connected fitness data: activity data from Strava, only if you choose to connect your account

If you or your coach add health-related notes (e.g. injuries, recovery details), this is special-category data under GDPR — you choose what to share, and it's only used to inform your training.

3. How we use your data

• Providing and improving the coaching platform
• Processing natural language queries via our AI assistant (powered by Anthropic Claude)
• Sending transactional emails (account verification, feedback confirmations, session digests)
• Generating progress reports and analytics for coaches and clients

4. AI processing

We use Anthropic's Claude API to power our AI chat assistant, session logging, and workout analysis. Your messages and training data are sent to Anthropic for processing. Anthropic does not use your data to train their models. Anthropic's privacy policy is available at anthropic.com/privacy.

5. Where your data is stored

Your data is stored on servers in the European Union (AWS eu-central-1, Frankfurt) via Supabase. Our backend is hosted on Railway (EU) and our web dashboard on Vercel. Transactional emails are sent via Resend.

6. Data sharing

We do not sell your data. We share data only with service providers necessary to operate the platform:

• Supabase — database, authentication, realtime (EU)
• Anthropic — AI processing (Claude API)
• Resend — transactional emails
• Railway — backend hosting
• Vercel — web dashboard hosting
• Apple / Expo — app distribution and push notifications
• Strava — third-party fitness activity data, only if you choose to connect your account

7. Your rights (GDPR)

As a user in the European Economic Area, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Object to or restrict processing
• Withdraw consent at any time

To exercise any of these rights, email hello@ownurself.app.

8. Data retention

We retain your data for as long as your account is active. When you delete your account, we delete your personal data within 30 days. Anonymized, aggregated data (such as usage statistics) may be retained indefinitely.

9. Security

We use industry-standard security measures including encrypted connections (TLS), hashed passwords, row-level security on our database, and API key authentication. Voice recordings are processed in transit and not stored permanently.

10. Children

YOU is not intended for use by anyone under the age of 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or in-app notification. The latest version is always available at this URL.

12. Contact

For any privacy-related questions or requests, contact us at hello@ownurself.app.