Privacy Policy | BodyLytics

BodyLytics ("we", "us") provides a software platform (web and mobile app) that lets personal trainers and coaches guide their clients on training, nutrition, and progress. This Privacy Policy explains what personal data we process, why, and what rights you have.

Data controller: BodyLytics, Chamber of Commerce (KvK) number 76612864, registered at Oosteinderweg 247A, 1432AT Aalsmeer, the Netherlands. For questions, contact us at info@bodylytics.nl.

1. Who this policy applies to

• Coaches / personal trainers who use a BodyLytics account to manage their business and clients ("Coach users");
• Clients of a coach who use the BodyLytics app to track their training, nutrition, and progress ("Client users").

Coaches act as the data controller for the data they (or their clients) enter about clients into BodyLytics; in that case BodyLytics acts as a data processor. For managing the platform itself (accounts, billing, technical maintenance), BodyLytics is the data controller.

2. What data we process

2.1 Account data

• Name, email address, phone number (optional)
• Coach business details (company name, KvK number, address, logo)
• Language and unit preferences (metric/imperial)

2.2 Health and progress data (special category data)

To provide BodyLytics' core functionality, we process data that may qualify as special category (health) data under GDPR, such as:

• Body weight, body measurements and (optional) skinfold measurements
• Training data: completed workouts, weights, reps, programs
• Nutrition data: logged meals, calories, macronutrients
• Goals (e.g. weight loss, muscle gain) and progress photos, if added by the client
• Any injuries, intolerances, or other notes a client chooses to enter in the intake form
• Optional: data from connected wearables (e.g. Apple Health, Google Fit, Fitbit, Garmin), if the client activates such a connection

This data is processed on the basis of the client's explicit consent (given when creating an account and completing the intake) and is necessary to deliver the coaching service between client and coach.

2.3 Technical and usage data

• Login and session data
• Device data (operating system, app version) for push notifications
• Basic usage statistics for troubleshooting

3. Why we use this data

• Providing the coaching functionality (training schedules, nutrition tracking, calendar, coach-client communication)
• Invoicing and payment processing between coach and client
• Sending transactional emails (e.g. appointment confirmations, password resets, payment reminders)
• Sending push notifications (e.g. rest timers, reminders), where permitted by the user
• Maintaining and securing the platform

4. Sharing with third parties

We only share data with third parties necessary for BodyLytics to function, and enter into data processing agreements with these parties where applicable:

• Supabase, database hosting and authentication
• Stripe and Mollie, payment processing between coach and client
• Resend, sending transactional emails
• Apple Health, Google Fit, Fitbit, Garmin, only if the client activates a connection, to exchange wearable data

We do not sell personal data to third parties and do not use data for advertising purposes.

5. Retention period

We do not retain personal data longer than necessary for the purposes for which it was collected, and in any case not longer than the account's lifetime plus a reasonable period thereafter for legal obligations (such as the statutory retention period for invoicing data: 7 years). A client or coach can request deletion of their account and associated data at any time, subject to applicable legal retention obligations.

6. Security

We take appropriate technical and organizational measures to protect personal data against loss or unlawful processing, including encrypted connections, access restrictions, and secure storage with our hosting provider.

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict processing, object, and data portability. For data entered by your coach, please contact your coach in the first instance. For account data and platform-wide questions, contact us at info@bodylytics.nl. You also have the right to lodge a complaint with your national data protection authority (in the Netherlands: the Autoriteit Persoonsgegevens).

8. Changes

We may update this Privacy Policy from time to time. The date at the top of this document indicates when it was last updated.

9. Contact

• BodyLytics
• Oosteinderweg 247A, 1432AT Aalsmeer, the Netherlands
• KvK: 76612864
• Email: info@bodylytics.nl