Draft for review. This policy is a working draft and must be reviewed by a qualified legal adviser before launch.
1. Who we are
VO2Pulse ("we", "us") runs a digital fitness platform that connects members with certified fitness trainers. We are the data controller for the personal data described in this policy.
2. What we collect
- Account details: name, email, phone number and login credentials.
- Fitness profile: goals, fitness level, training preferences, availability and sports profile.
- Health and safety information: answers to our safety screening and health questionnaire, plus any injuries and limitations you choose to share. This is special category data and is treated with extra care.
- Activity and progress: workouts logged, measurements, progress photos, nutrition diary entries and badges earned.
- Communications: messages with your trainer, AI Coach conversations and support tickets.
- Payments: transaction records. Card details are handled by our payment provider, Stripe, and never stored by VO2Pulse.
- Technical data: device, app version and usage information used to keep the service secure and reliable.
3. How we use it
- To match you with suitable trainers and deliver your programme.
- To run safety screening and show appropriate safety messaging.
- To power the VO2Pulse AI Coach, which answers using your own programme and progress data.
- To process payments, refunds and trainer payouts.
- To send reminders and notifications you have opted into.
- To handle complaints, keep the platform safe and meet legal obligations.
4. Who can see your data
Trainers can see the data of members assigned to them, and only what they need to coach. Access by VO2Pulse staff is role-based: support, finance and content teams see only what their role requires. Sensitive information is masked unless access is explicitly authorised, and access to health data is logged and audited.
5. AI Coach and memory
Notes the AI Coach infers from your conversations are never used until you approve them. You can view, edit or delete your coaching profile at any time. Messages that mention pain, injury or medical concerns trigger a fixed safety notice instead of an AI-generated answer.
6. Wearables and third parties
When wearable integrations launch, we will only access data you explicitly authorise, and you can revoke access at any time. We use trusted processors such as Stripe (payments) and video-call providers (consultations), under appropriate contracts.
7. How long we keep it
We keep your data while your account is active and for a limited period afterwards where needed for legal, financial or safety reasons. You can ask us to delete your account at any time.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or export your data, and to object to certain processing. To exercise these rights, email privacy@vo2pulse.app. In the UK you can also complain to the Information Commissioner's Office (ICO).
9. Contact
Questions about this policy? Email privacy@vo2pulse.app or use our contact form.