Privacy policy

1 · Who processes your data

The data controller is AL GOMEZ ADVISORY, owner of the IINS Coach app and the iinscoach.com website. For any privacy question, including exercising your rights, write to privacidad@iinscoach.com.

We have not appointed a Data Protection Officer: given the volume and nature of the processing, it is not required. If that changes, this policy will be updated first.

2 · What data we process

Account data

Email address, name or username, profile photo if you upload one, and the date you signed up. Your email is also the key that links your account to your subscription.

Sport profile

Main sport, goal, level, personal bests, your IINS grade if you have one, and the training preferences you tell the Coach about.

Health data — special category

This is data the GDPR gives extra protection (Art. 9), and we process it with your explicit consent:

• Weight, height, age and sex.
• Allergies, intolerances, injuries and restrictions you tell us about.
• Results from the eight-test IINS battery and from the tests you log.
• Metrics you authorise from Apple Health: sleep, resting heart rate, energy, steps and variability, among others. Only the ones you grant, and you can revoke them in your iPhone settings at any time.

Activity in the app

Completed workouts, training, nutrition and technique plans, logged meals, tests, achievements, ranks and the components of your Clasificación IINS.

Social content

Posts, stories, direct and group messages, reactions, comments, who you follow and who follows you, requests, blocks and reports.

Conversations with the Coach

What you write to it, what it replies, and the memory summary the system generates so it remembers from one day to the next.

Technical data

Device model, operating system and app version, time zone, the device identifier used for notifications, and the error and usage logs needed to detect faults and abuse.

Android waiting list

If you leave your email on iinscoach.com so we can tell you when the app is out on Android, we keep that email and the date. We only use it for that notice: no newsletters, no advertising. We delete it when you ask and, in any case, a reasonable time after we've told you.

Payment data

We never see or store your card. Payment is handled by Stripe in its own environment. From Stripe we receive the email you paid with, the plan you chose, the status of your subscription and the billing details the law requires us to keep.

3 · What we use it for, and on what legal basis

You can withdraw your consent at any time. Withdrawing it doesn't affect the lawfulness of processing before then, but it does leave the Coach without the data it plans with: without health data, it can't adjust the load.

4 · The Coach and artificial intelligence

The Coach runs on models from Anthropic, which acts as a data processor. To reply to you, it is sent what it needs: your profile, your plan, your recent history, your grade and — depending on your plan — either a summary of your metrics or the exact values.

• Your data is not used to train third-party models.
• The Coach makes no automated decisions with legal effects on you. Every plan change is a proposal that you confirm.
• It is not a healthcare service. The Coach does not diagnose, and it does not replace a doctor, a physiotherapist or a registered dietitian. If you have pain, an injury or any symptom, see a professional.

5 · What other people can see

This is the part we care about most, because health data and a social network live side by side here:

• Your health data never leaves your account. Weight, height, age, allergies, intolerances, injuries and restrictions are never shown to anyone else, under any circumstances. There's no switch to change that, because the option to share them doesn't exist.
• Sharing is always optional. Finishing a workout doesn't post it. Every post is your decision, every time.
• Nothing live. The app may let people know someone has finished an activity, never that they're training right now. There are minors using the app, and we never publish anyone's location or presence.
• If your profile is private, only people you've accepted can see your content. Blocking someone cuts visibility both ways.

6 · Who else processes it

Only providers who deliver a service to us, under a data processing agreement and with no permission to use your data for anything of their own:

• Supabase — database, authentication and image storage.
• Anthropic — the model that powers the Coach.
• Stripe — subscription payments and invoicing.
• Apple — app distribution and delivering notifications to your device.
• Expo — distributing app updates.
• Vercel — hosting for this website.

Some of them are in the United States. Those transfers rely on the European Commission's standard contractual clauses or the applicable adequacy framework, with whatever additional safeguards each case requires.

We don't sell your data or share it for advertising. There is no advertising in IINS Coach. We will only disclose it to an authority when a law requires us to.

7 · Your relationship with the IINS centre

If you're an IINS member and link your member code, we process that code and the status of your membership to give you the Premium plan you're entitled to. IINS periodically sends us the list of members who are up to date; we don't look at anything else in your centre record.

Your health data, your workouts and your activity in the Tribu are not shared with the centre just because you're a member.

8 · Minors

You must be at least 16 to use IINS Coach, and you confirm this when you create your account.

If an athlete's year of birth means they may be under 18, the Coach treats them as a minor: never a calorie deficit, weight loss, fasting or supplements, and no maximum-load tests; and if anything hurts, it asks them to tell their parents or guardians and to see a professional.

If we find an account belonging to someone under 16, we close it and delete their data. If you're a parent or guardian and want us to delete a minor's account, write to privacidad@iinscoach.com and we'll do it without further steps.

9 · How long we keep it

• While your account is active, so we can provide the service and the Coach has your history.
• When you delete your account, your personal data is erased. Stories expire and are purged after 24 hours by design.
• Billing data is kept for the period required by tax and accounting law, currently six years.
• Security and report logs, for as long as needed to establish what happened and deal with claims.

10 · Your rights

You can ask us for access to your data, to correct it, to erase it, to restrict or object to its processing, and for a copy in a readable format. You can also withdraw your consent at any time.

Write to privacidad@iinscoach.com from your account email. We reply within one month at the latest. If you think we haven't handled it properly, you can complain to the Spanish Data Protection Agency (AEPD).

Deleting your account is something you can do yourself in the app, in Settings, without asking us.

11 · Security

Everything travels encrypted. In the database, every row of personal data is protected by policies that stop one account from reading another's, and those policies are versioned with the code rather than changed by hand. We audit the system before adding features, not after.

No system is infallible. If a breach affecting your data ever happened, we would tell you and notify the authority within the deadlines set by the GDPR.

12 · Cookies

This site uses no analytics or advertising cookies, and doesn't profile you. If you choose a language in the selector, we remember that choice in a technical cookie. When you start a payment, Stripe sets the technical cookies it needs to process it securely.

13 · Changes to this policy

If anything substantial changes, we update the date at the top and let you know in the app before it affects you. Continuing to use IINS Coach after a substantial change does not count as accepting it where the law requires fresh consent: in that case, we'll ask you for it.