Privacy Policy
Last updated: September 2, 2026
This Privacy Policy explains what personal data Coachix collects, why, and what rights you have over it, in accordance with Regulation (EU) 2016/679 (GDPR) and Law no. 190/2018.
1. Data controller
Coachix is operated by ANGHEL I. I. LUCA PERSOANĂ FIZICĂ AUTORIZATĂ, tax ID (CUI) 54989590, registered office in Bucharest, Sector 1, Bulevardul Bucureștii Noi, No. 136, Ground Floor, Ap. 5, Romania — contact: anghelluca14@gmail.com.
2. What data we collect
Identification data: name, email, phone. Client data entered by a trainer: date of birth, sex, height, weight, activity level, goals. Health data (a special category under Article 9 GDPR): medical conditions, injuries, medication — collected only with the client's explicit consent, solely to personalize training and nutrition plans. Usage data: food log entries, measurements, messages, optional progress photos. Payment data: handled entirely by Stripe — we never store card details.
3. Legal basis for processing
Performance of a contract (Article 6(1)(b) GDPR) for most data. Explicit consent (Article 9(2)(a) GDPR) for health data. Legitimate interest (Article 6(1)(f) GDPR) for security and fraud prevention.
4. Purpose of processing
Providing the service, generating personalized plans, communicating with you (email, push notifications), and billing.
5. Who we share data with
Only the third-party processors strictly necessary to run the service: Stripe (payment processing), Resend (transactional email), and our hosting provider. We never sell data or share it for third-party marketing.
6. Retention period
Data is kept for as long as your account is active. After account deletion, data is removed within a reasonable period, except where we're legally required to retain it longer (e.g. accounting records).
7. Your rights
Under Articles 15-22 GDPR you have the right to access, rectify, erase ("the right to be forgotten"), restrict processing of, port, and object to the use of your data, and to withdraw consent at any time. To exercise these rights, contact us at anghelluca14@gmail.com.
8. Right to lodge a complaint
You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro, or with your local data protection authority within the EU.
9. Data security
Passwords are stored hashed, never in plain text. All traffic is encrypted over HTTPS. Access to client data is restricted so a trainer can only see their own clients.
10. Cookies
We use only essential cookies (to keep you signed in). We do not use third-party tracking or marketing cookies, in accordance with Law no. 506/2004.
11. International transfers
Where a processor (such as Stripe or Resend) transfers data outside the European Economic Area, this is done under adequate safeguards, such as the EU Standard Contractual Clauses.
12. Changes to this policy
Any change will be published on this page along with an updated date.