Privacy Policy

This privacy policy explains how your personal data is processed when you use this coaching platform. Because health coaching involves health data — a special category of personal data under Art. 9 GDPR — we only process it with your explicit consent, and we explain here exactly what happens with it.

1. Controller

Johannes Takacs — Joe in Balance
Röthenbachstr. 15a, 82449 Uffing, Germany
Email: joeinbalance@gmail.com

2. What data we process, and why

Account data (name, email address, password hash): to provide your personal client area. Legal basis: performance of the coaching contract, Art. 6(1)(b) GDPR.

Onboarding questionnaire (goals, health background, lifestyle): to tailor the coaching to you. Legal basis: your explicit consent, Art. 9(2)(a) GDPR.

Daily tracking data (nutrition, weight, training, sleep, stress, energy, digestion, mood, notes, and any custom parameters agreed with your coach): to monitor progress and guide the coaching. Legal basis: your explicit consent, Art. 9(2)(a) GDPR.

Documents you upload (e.g. lab reports): to inform the coaching. Legal basis: your explicit consent, Art. 9(2)(a) GDPR.

Call recordings, transcripts and summaries: if you consent (separately and optionally), your video coaching sessions are recorded by an automated service, transcribed, and summarized with AI assistance so that you and your coach can revisit what was discussed. Legal basis: your explicit consent, Art. 9(2)(a) GDPR. You can use the coaching without this — recording is optional.

AI-assisted analysis: your coach uses an AI assistant to summarize calls, maintain a coaching dossier, and answer questions about your progress. The AI provider does not use your data to train its models.

3. Who processes your data (processors)

Your data is processed by the following service providers on our behalf, each bound by a data processing agreement (Art. 28 GDPR):

• Supabase (database, authentication and file storage) — data stored in Frankfurt, Germany (EU).
• Vercel(application hosting) — the platform runs on Vercel's infrastructure.
• Meeting BaaS (call recording bot, EU-based) — only if you consent to recording. Recording data at the provider is deleted promptly after the recording has been transferred to our own storage.
• Anthropic (AI transcription summaries and analysis, USA) — transcripts are processed via API. Transfers are safeguarded by EU standard contractual clauses; Anthropic retains API data for a limited period (up to 30 days) and does not use it for model training.

4. How long we keep your data

Your data is kept for the duration of the coaching relationship. When the coaching ends, your account and all associated data (tracking history, recordings, transcripts, documents, AI dossier) are deleted on request or as part of offboarding, unless statutory retention obligations (e.g. invoicing records) require keeping specific data longer. You can request deletion at any time (see section 5).

5. Your rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16 GDPR),
• have your data deleted (Art. 17 GDPR),
• restrict processing (Art. 18 GDPR),
• receive your data in a portable format (Art. 20 GDPR),
• withdraw any consent at any time with effect for the future (Art. 7(3) GDPR) — for example the consent to call recording, without affecting the coaching itself,
• lodge a complaint with a supervisory authority (Art. 77 GDPR) — for example the data protection authority of your German federal state.

To exercise any of these rights, email joeinbalance@gmail.com.

6. Cookies

The platform uses only technically necessary cookies: a session cookie that keeps you logged in. There are no tracking, advertising or analytics cookies.

7. No automated decision-making

AI is used to summarize and organize information for your coach. All coaching decisions are made by your coach personally — no decision with legal or similarly significant effect is made automatically.