Privacy Policy

Who we are

CoNudge is a service of P2P Concepts, trading as CoNudge, KVK 56042442, Oranjestraat 26, 2013VG Haarlem, the Netherlands. P2P Concepts is the data controller under the GDPR. For privacy questions, contact us at privacy@conudge.com.

What we collect

• Your email address (for authentication and communication)
• Training data: programs, logged sets, weights, RPE
• Body measurements: weight, waist, chest, hips, arms, legs
• Chat history with Coach

Why we collect it

To personalize your training programs and adjust them based on your progress. We don't collect anything we don't need.

Legal basis

We process your data based on: (1) your consent at sign-up, and (2) the performance of the service you request from us.

Health data (body measurements, injury information, training load): we process this exclusively based on your explicit consent (Article 9(2)(a) GDPR). You give this consent separately when you first use the app. You can withdraw this consent at any time through your account settings — as easily as you gave it.

Where your data is stored

Your data is stored with Supabase and Vercel, both based in the United States. This means your data is processed outside the EU. We have appropriate safeguards in place via Standard Contractual Clauses (SCCs).

Who we share it with

Your chat messages and training data are processed by Anthropic (Claude API) to generate programs. Anthropic processes this data according to their own privacy policy. We don't sell data. We don't show ads. We don't share with anyone else.

Cookies

We only use functional cookies for authentication via Supabase. No tracking cookies. No analytics cookies.

Your rights

Under the GDPR, you have the following rights:

• Access: request what data we have about you
• Rectification: correct inaccurate data
• Erasure: request deletion of all your data
• Restriction: request limitation of processing
• Portability: request your data in a usable format
• Objection: object to the processing of your data
• Withdraw consent: you can withdraw your consent for health data processing at any time through your account settings. Withdrawal is as easy as giving consent.

Email privacy@conudge.com to exercise any of these rights. You also have the right to file a complaint with the Dutch Data Protection Authority.

Data retention

• Training programs and logged sets: as long as your account is active.
• Body measurements: as long as your health data consent is active. Deleted immediately upon withdrawal.
• Chat history: as long as your account is active.
• After account deletion: all data erased within 30 days from our systems.

Anthropic data

Chat messages are processed by Anthropic (Claude API) to generate training programs. Anthropic processes these messages according to their own privacy policy. After deletion of your CoNudge account, we cannot guarantee that Anthropic will immediately delete all data, as their processing is governed by their own terms.

AI and automated decision-making

Coach generates training programs using AI. This does not constitute automated decision-making under Article 22 GDPR, as the programs have no legal effects and you always decide whether to accept a program.

Terms of Service

Please also read our Terms of Service.

Changes

If we change this policy, we will notify you by email.