[TEMPLATE - replace with lawyer-reviewed text before production]
Privacy policy
Last updated: 2026-05-21
This page explains what personal data Smart TrAIner collects, why we collect it, and how you can control it. The app is co-funded by the European Union under Erasmus+ Sport and follows the General Data Protection Regulation (GDPR).
Data controller
The controller of your personal data is the Smart TrAIner project consortium. For data-protection questions, contact the project team at the address listed in the Contact section below.
Data we collect
Account email and password hash (handled by Supabase Auth). Onboarding answers: age, fitness level, equipment, goals, city. Activity logs: which exercises you complete and when. Optional: a video link you submit to the public #SmartMoveChallenge feed.
Why we use your data
To generate a personalised daily plan, to keep track of your streak and badges, to show group-level statistics to the trainer running your Move & Improve Day, and to evaluate the project's reach as required by our Erasmus+ funder.
Legal basis
We rely on your consent (Article 6(1)(a) GDPR) to process onboarding data and your performance of the user agreement (Article 6(1)(b) GDPR) to provide the account itself. Aggregate, anonymised statistics for the funder rely on legitimate interest (Article 6(1)(f) GDPR).
How long we keep it
Account data is kept while your account is active. If you delete your account, the data is removed within 30 days. Anonymous, aggregate usage statistics may be retained for the duration of the Erasmus+ project reporting period.
Your rights
You can access, correct, export or delete your data at any time from the Settings page. You also have the right to lodge a complaint with your national data-protection authority.
Third parties
The app runs on EU-based infrastructure: Vercel (Frankfurt) for hosting and Supabase (Dublin) for the database. AI plans are generated by Anthropic's Claude API, which processes your prompt under a data-processing agreement and does not train on your data. No marketing or analytics third parties receive your data.
Contact
For any privacy question or to exercise your rights, write to the project coordinator at the address shown in the project's public Erasmus+ record (project 101245857).