Privacy Policy

1. Data protection at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator: JS-IT, Sebastian Janitzek (see legal notice).

2. Hosting

This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) via the Cloudflare Pages service. Cloudflare processes IP addresses and connection metadata for technical reasons. Cloudflare is certified under the EU-U.S. Data Privacy Framework and thus ensures an adequate level of data protection.

More information: Cloudflare Privacy Policy.

3. General information and mandatory disclosures

Controller

The controller responsible for data processing on this website is:
JS-IT, Sebastian Janitzek
Dreiländerstr. 52
85049 Ingolstadt
Email (as text): [email protected]

4. Local storage (local preferences & offline data)

This website stores technically necessary preferences in your browser's local storage — such as your chosen light/dark theme (ps-theme) and minor convenience settings (e.g. morning ritual, fasting window, form-check progress). These are not cookies and are never used for tracking.

If you use the app area while logged in, the app additionally stores offline data locally on your device: the last loaded state of your training plan/progress (so the app works without an internet connection) and a queue of entries recorded offline (e.g. training check-ins including optional notes), which are transmitted to your account on the next connection and then removed locally. This data stays exclusively on your device, is bound to your session, and is deleted automatically when you log out or when a different user signs in on the device. You can also remove it at any time via your browser's site-data settings or by clearing the app's data.

5. Newsletter

Description and scope of data processing

On our website you can subscribe to a free newsletter. When signing up, the following data is collected:

• Email address (required)
• Timestamp of signup
• Page/section on which the signup occurred ("source")
• Language of the signup form (used to send the confirmation and follow-up emails in the right language)
• Pseudonymized (hashed) IP address and browser identifier (user agent) — exclusively as proof of consent

Double opt-in procedure

Signing up for our newsletter uses a double opt-in procedure. After signing up you receive an email asking you to confirm your signup. Only after clicking the confirmation link is your email address added to our newsletter list. This procedure ensures nobody can sign up with someone else's email address and serves as proof of your consent.

Legal basis

Processing of your data as part of the newsletter is based on your explicit consent pursuant to Art. 6 (1)(a) GDPR. You can withdraw this consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

Storage and proof of consent

Your signup data is stored in our own Cloudflare D1 database (EU region). To prove your consent in case of a dispute (Art. 7 (1) GDPR), we store a SHA-256 hash of your IP address combined with your email address at the time of signup — the plain IP address itself is never stored. This hash cannot be reversed to reveal your actual IP address.

Sending / mail server used

Confirmation and welcome emails are sent via our own mail server (Mailcow) at mail.golivehub.de, operated on infrastructure provided by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany). Data processing takes place exclusively on servers in Germany; no transfer of your data to third countries occurs.

Unsubscribing and deletion

You can unsubscribe from the newsletter at any time. Every newsletter email contains an unsubscribe link. After unsubscribing, your email address is marked as unsubscribed in our database.

Retention period

Your email address and associated signup data are stored for as long as you are subscribed. Consent records (proof of double opt-in confirmation) are retained to fulfil our documentation obligation under Art. 7 (1) GDPR.

Lead magnet (free download)

We offer a free PDF (form check) for download. The download is linked to the newsletter signup. The same conditions as described above apply. You can unsubscribe from the newsletter again at any time after downloading.

6. User account & training app (beta)

You can create a user account for our training app. Sign-in is passwordless via a login link sent to your e-mail address ("magic link"). We set one strictly necessary session cookie (ps_session, HttpOnly, 30 days) — legal basis: Art. 6(1)(b) GDPR and the German TDDDG §25(2).

Within the app we process the following data:

• Account data: e-mail address, sign-in timestamps, consent record (Art. 6(1)(b) GDPR — provision of the service).
• Profile details: training goal, training days, time budget, equipment, ambition level, and optionally decade of birth and gender — used to generate your personal training plan (Art. 6(1)(b) GDPR). All optional fields can be left empty.
• Voluntary health-related details ("safety profile"): you may optionally indicate issues such as joint or back complaints so your plan contains adapted exercise variants. These are special categories of personal data (Art. 9 GDPR); we process them solely on the basis of your explicit consent (Art. 9(2)(a) GDPR). Providing them is voluntary and you can remove them in your settings at any time. They are used exclusively to adapt your plan — never for advertising, and never shared with third parties. The app does not provide diagnoses and does not replace medical advice.
• Activity data: your check-ins (completed sessions, daily quests, optional notes) — to display your progress (Art. 6(1)(b) GDPR).
• Voluntary health values ("My values"): you can optionally log self-measured figures (resting heart rate, weight, VO2max estimate from your sports watch, sleep duration) so the app shows you their trend. These values are special categories of personal data (Art. 9 GDPR); we process them solely on the basis of your explicit consent (Art. 9(2)(a) GDPR), which you give before your first entry. The values are visible only to you, are never evaluated or interpreted, never used for advertising, and never shared with third parties. You can revoke your consent at any time directly on the values page — this immediately deletes all stored values; deleting your account also deletes all values regardless. Values are stored until you revoke consent or delete your account.

Health data import (Apple Health / Health Connect): in the app you can optionally have resting heart rate and sleep duration read from Apple Health (iOS) or Health Connect (Android) — the app asks your operating system for permission once. It additionally shows your step count for the last few days for information, without storing it. Resting-heart-rate and sleep values that were read are shown only as a preview and are saved only once you explicitly select the days you want and tap "Import" — there is no automatic background sync. Imported values are treated like any other "My values" entry (see above) and are deleted through the same values revocation. You can also withdraw the app's Health access at any time directly in your system settings (iOS: Health app → Sharing/Access; Android: Health Connect → App permissions). Health data is never used for advertising and never shared with third parties.

Live GPS tracker (foreground only): when you start a tracked activity (walking, running, cycling, or hiking) in the app, we access your device's location only while that activity is actively running and shown on screen (Art. 6(1)(b) GDPR) — all processing happens locally on your device. We never store your route or raw coordinates; only the resulting figures — distance, duration, pace and a calorie estimate — are saved as a session, exactly like any other logged activity, and can be deleted the same way. You can stop tracking at any time; closing the app or locking your screen ends location access (background tracking with the screen off is not supported at this stage).

Weekly summary: as part of the service we send a weekly e-mail with your training recap. You can switch it off in the app at any time with one click.

Storage & self-service: all account, profile and activity data are stored until you delete your account. Inside the app you can export all of your data as a file at any time (Art. 20 GDPR) and irrevocably delete your account with all data yourself (Art. 17 GDPR).

7. Google Fonts (self-hosted)

This website uses Google Fonts to display typefaces. The fonts are downloaded at build time and served locally from our own server. No connection to Google's servers is made when you visit this site, and no data is transmitted to Google for this purpose.

8. Your rights

You have the right at any time to:

• Access your stored personal data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority.

For this and any other questions about data protection, please contact us: [email protected]