Who is responsible
The controller for personal data processed through this website and the Isohype app is Isohype, SARL-S, 5, rue Victor Feyder, L-5825 Fentange, Luxembourg ("we"). Contact for privacy questions: privacy@isohype.eu.
What this page covers
This policy covers the public Isohype website (waitlist, demo requests) and the Isohype app (accounts, teams, training plans and logs). Health data in the app has its own notice: see Health data.
Waitlist
When you join the waitlist we store your email address, your role, your country, the number of athletes you coach (if you tell us), your language, the version of the consent text you agreed to and the time you agreed.
Legal basis: your consent (GDPR Art. 6(1)(a)). We send one email to confirm your address (double opt-in). Unconfirmed signups are deleted after 30 days. Confirmed signups are kept until launch plus [12 months], or until you remove yourself with the link in our emails or by writing to us.
Demo requests
When you request a demo we store your name, email, organization, its type and country, the numbers of coaches and athletes you give us, your message and the time of your consent. We use them only to answer you and prepare a possible contract.
Legal basis: your consent and steps prior to a contract (Art. 6(1)(a) and (b)). We keep requests for [24 months] after our last contact, unless they lead to a contract.
The app
In the app we store your account (email, name, language, country, date of birth), your team memberships and roles, training plans and session logs, messages with your coaches, and your consents with their date and version.
Legal basis: the contract for using the app (Art. 6(1)(b)); for minors below the national consent age, a guardian's consent. Coaches only see athletes in teams they coach; this is enforced in the database. You can download all your data and delete your account at any time in Settings. [Retention after deletion, backups: to be confirmed.]
Processors
We use these processors, each under a data-processing agreement:
- Supabase (Supabase Inc.; database in the EU region Frankfurt, Germany): stores waitlist and demo requests.
- Brevo (Sendinblue SAS, France): sends confirmation and reply emails. Brevo counts whether an email was opened and whether a link was clicked, anonymously: these counts are not linked to you, and we don't use them.
- Google Workspace (Google Cloud EMEA Ltd, Ireland): our email inboxes, including demo requests forwarded to us and emails you send us. Google may transfer data to the United States under the EU standard contractual clauses and the EU-US Data Privacy Framework.
- Netlify (Netlify, Inc., United States): hosts this website. Pages are delivered from Netlify's worldwide network, and form submissions pass through Netlify's servers in the United States on their way to our database in the EU. Transfers are covered by the EU standard contractual clauses and the EU-US Data Privacy Framework.
No visit statistics
We don't measure visits to this website: there is no analytics or tracking script.
Server logs
Our hosting provider, Netlify, keeps technical logs (IP address, time, requested page, browser) for up to [14 days] to keep the site secure and working. Legal basis: legitimate interest (Art. 6(1)(f)).
Your rights
You can ask to see, correct, delete or export your data, restrict or object to its use, and withdraw consent at any time without affecting what happened before. Write to privacy@isohype.eu. You may also complain to the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD), cnpd.public.lu, or to the authority where you live.