Privacy policy

Controller

[FULL NAME], [STREET AND NUMBER], [POSTCODE CITY], Germany. Email: [EMAIL]

What we store and why

• Body measurements you enter (height, weight, neck, waist, shoulders or arm, training years, and optionally your own body fat estimate and hip bone width). We use them to calculate your result and track your progress. Because these can count as health data, we only store them with your explicit consent (Art. 9 (2) (a) GDPR). You can withdraw consent at any time by deleting your data in your account.
• Your email address and subscription status, to give you access and send login codes and re-measure reminders (Art. 6 (1) (b) GDPR).
• Anonymous usage events (for example "quiz started", "checkout opened") with a random ID and the referring channel, to understand which videos bring visitors (Art. 6 (1) (f) GDPR). No cookies are used for this; a random ID is kept in your browser's local storage.
• If you scan a photo: we send it to Anthropic, PBC (USA) to estimate your body fat and do not store it on our server. We keep only the estimated number, and only once it is linked to your measurements. A copy of the photo stays in your browser on your device; it is removed when you clear your browser data. Legal basis: your explicit consent (Art. 9 (2) (a) GDPR), given by starting the scan.
• If you turn on reminders: your device's push subscription, until you turn them off or delete your account.

Service providers

• Hosting: Hetzner Online GmbH, Germany.
• Payments: Stripe Payments Europe Ltd., Ireland. Stripe processes your payment details; we never see your card number. Data may be transferred to the USA under the EU-US Data Privacy Framework and standard contractual clauses.
• Email delivery: [EMAIL PROVIDER].
• Photo analysis: Anthropic, PBC, USA, as our processor. Transfer under standard contractual clauses. Anthropic deletes the photo within 30 days, unless it has to keep it longer to enforce its usage policy or by law, and does not use it for training.

How long we keep data

Measurements and account data until you delete them or your account. Payment records as required by German tax law (up to 10 years). Usage events for 24 months.

Your rights

Access, correction, deletion, restriction, data portability, objection, and withdrawal of consent. You can also complain to a data protection authority. Contact: [EMAIL].