Privacy policy

Company details (legal form, company number and address) will be added once available. This text is a basis, not legal advice.

1. Who we are

RNB Coaching provides software for coaches and members. For questions about your data, email benjamin@rnbcoaching.app.

2. What data we process

Account details: name, email address and login details.
Coaching data entered by you or your coach: workouts, sets, nutrition, goals, measurements, messages and notes.
Files you upload, such as progress photos, videos and documents.
Payment data: payments are handled by Stripe. We do not store full card details.
Optional connections, such as Strava, only if you enable them yourself.

3. Why we use this data

To make the platform work: signing in, showing programs and tracking your progress.
To give your coach access to the data needed to guide you.
To handle subscriptions and payments.
To send emails related to your account, such as confirmations and reminders you can manage.

4. Who sees your data

You see your own data.
Your linked coach and staff explicitly assigned to you see the data needed to guide you.
The platform owner has admin access for support and security.
Service providers we need to run the platform (such as hosting, email, Stripe for payments and HeyCatch for usage statistics) process data only for that task.
We do not sell your data.

5. Cookies and local storage

We only use necessary cookies and local storage in your browser:

to keep you signed in;
to remember your language (Dutch or English) and theme (light or dark);
to load the app faster with a temporary cache per account, cleared when you sign out;
to remember your privacy choice, its date and the notice version. We remember your choice until you change it in Cookie settings or clear your browser storage.

Without consent we only count page visits, time on page, loading speed and errors, without cookies and without recognising you. Optional analytics, such as clicks and other actions, starts only after you choose Allow analytics. HeyCatch receives public page visits with technical browser and screen information and a temporary random visitor code, not linked to your account. Anonymous pricing clicks are also measured in our own storage. Private pages, form contents, URLs with parameters and health data are excluded. We send no signup or payment events to HeyCatch and use no advertising cookies. Cookie settings is available on every screen to refuse or withdraw consent. This stops new measurements, including in other open tabs; it does not automatically erase data previously sent to HeyCatch. You can request that separately. We respect your browser’s Do Not Track or Global Privacy Control setting.

6. How long we keep data

Account and coaching data: while needed for your account and coaching. For erasure requests we also review legal retention duties and explain which records must still be kept.
Progress photos, videos and documents: as long as your account exists; you can also delete them yourself.
Invoices and payments: 10 years, as required by Belgian accounting law.
Intro and coach applications: the configured cleanup period is 6 months after the request or review. Execution of this cleanup is still being checked.
Our own click statistics: the configured cleanup period is 90 days. Execution and HeyCatch’s retention period are still being checked.
Browser cache: at most 24 hours and cleared when you sign out.

7. Coach bookkeeping

Coaches can keep simple bookkeeping in the platform. These rules apply:

What data: member payments (amount, description, due date, payment date and status), expenses the coach enters (date, description, category, amount and VAT rate) and, for online payments, the Stripe reference and Stripe fees. Card details never enter the bookkeeping.
Who sees it: a coach sees only their own income and expenses. A member sees only their own payments. The platform owner has admin access for support and security. Staff and other coaches cannot see the bookkeeping.
How long: payments and expenses are kept for the legal retention period for bookkeeping. When a member deletes their account, payment records are kept without name or other profile details.
Coaches remain responsible for their own bookkeeping and VAT return. The overview in the platform does not replace an official return.

8. Security

Access to data is restricted by role, so members only see their own data and coaches only see their own members. Private files are not shared publicly.

9. Your rights

You can request access, a copy, correction, erasure, restriction of processing or portable data where that right applies. You can object to processing based on legitimate interests and withdraw consent at any time without affecting the lawfulness of earlier processing. Email benjamin@rnbcoaching.app, preferably from your account email. We verify identity using only necessary information; do not send an identity document without being asked. We normally respond within one month. Complex requests may take up to two additional months; we explain any extension within the first month. Account deletion is available under My profile; if the button is unavailable, email us. You can also complain directly to the Belgian Data Protection Authority at www.gegevensbeschermingsautoriteit.be.

10. Legal bases and health data

Account functions and payments are needed to perform the agreement. Legal accounting duties determine which payment records must be retained. Necessary security and support may rely on legitimate interests, balanced against your rights. Optional analytics relies on consent; refusing does not affect your access.

Injuries, allergies, medical notes and blood results may be health data. Processing requires a valid Article 9 GDPR condition in addition to an ordinary legal basis, for example separate explicit consent. Linking to a coach, choosing cookies or accepting terms is not enough. The applicable condition and arrangements with your coach still need final confirmation.

11. Providers and transfers

The platform uses Lovable Cloud for hosting and storage, email services for account messages, Stripe for payments and HeyCatch for consented analytics. Optional AI functions use Lovable AI. Health data must not be sent to AI without a valid legal basis, separate safeguards and clear information about the recipients.

The exact providers, processing agreements, storage regions and any transfers outside the EEA still need confirmation. Transfers outside the EEA require appropriate safeguards, such as an adequacy decision or standard contractual clauses with supplementary measures where needed. We do not claim all data remains exclusively in the EEA.

RNB Coaching is responsible for its own account and website processing. For an independent coach’s records, the parties must establish who acts as controller and when RNB Coaching acts as processor.

12. Changes

We may update this policy. We announce important changes in advance.