Legal
Privacy Policy
Controller
The controller responsible for the processing of personal data on this platform is GlobalNet Strategies LLC, 7901 4th Street North, Suite 300, St. Petersburg, Florida 33702, United States of America. Contact for data protection requests: Steventhiel@globalnet-strategies.com.
Represented by: Steven Thiel (Authorized Member)
Register entry: Florida Department of State, Division of Corporations, Document Number L24000490400, registered on 20 November 2024
Each coach runs their own, isolated workspace (tenant) within the platform. For the client data recorded there, the respective coach is, as a rule, a (joint) controller under data protection law; for the technical operation of the platform, we are the controller.
What personal data we process
We process the personal data that is needed to operate the coaching and learning platform:
- Account data: email address, password (stored encrypted), role
- Profile and health information: name, photo, body measurements, goals, sleep and mood values, check-in responses
- Chat content including attachments (images, voice messages, videos, documents)
- Training and course progress, including individual sets and weights
- Appointments and appointment reminders
- Push notification token of the device (app)
Who else receives this data
To operate the platform we use the following processors and services. The full technical derivation of this list is in the evidence file that accompanies this text — here we only state what matters to you as a user: purpose and category of data.
SupabaseFrankfurt (EU)
Purpose
Database, sign-in, file storage, server logic (Edge Functions) — all data storage
Data
all account data, chat messages, profile and health information, training and course data, push tokens
VercelRegion Frankfurt (fra1)
Purpose
Hosting and execution of the web app
Data
every page request: IP address, browser identifier, request data
Anthropic
Purpose
Coach Pilot — the AI assistant in the coach area
Data
chat history, check-ins, body measurements, sleep and mood values, notes, form responses
OpenRouter
Purpose
Relays suggested chat replies, the coach brief, session recaps and other AI texts to a language model (currently preset: Anthropic)
Data
client names, the most recent chat messages of a conversation, activity summaries
OpenAI
Purpose
Transcription of voice messages (Whisper) and text recognition for the knowledge base
Data
entire audio files from the chat, text excerpts from uploaded coaching documents
Cloudflare
Purpose
Video hosting for online courses (upload)
Data
course videos uploaded by the coach
Expo / Apple (APNs)
Purpose
Delivery of push notifications to the client app
Data
device identifier, title and text of the notification (for chat: the first 80 characters of the message)
Google / YouTube
Purpose
Video embedding for course lessons and exercise videos
Data
IP address and player data when a video is played
Vimeo
Purpose
Alternative video embedding for exercise videos
Data
IP address and player data when a video is played
jsDelivr
Purpose
Loads the emoji database for the emoji picker in the chat
Data
IP address when the emoji picker is opened
unpkg
Purpose
Loads program code for video compression in the browser when a video is attached to a chat message
Data
IP address when a video is attached; the video itself stays local in the browser
Sentry
Purpose
Error reports from the web app and the client app — only if an error-reporting address is configured
Data
stack traces and request data; cookies and credentials are explicitly filtered out. In the app additionally: device/OS and app-version information, a random installation identifier, a pseudonymous device identifier and the network requests the app made before the error (method, status code and an address shortened to server and table, function or storage area) — but no names, e-mails, chat/form/training content, no file names or file paths, and no query strings in links, the IP address is not stored there. In the web app, screen recordings additionally mask all text
Particularly important: data concerning health, voice messages, push content
We want to mention three points explicitly here, because they concern particularly sensitive data:
- At the coach's request, the Coach Pilot (AI assistant in the coach area) passes data concerning health — body measurements, sleep, mood, check-ins — on to Anthropic. Suggested replies and template texts pass chat content on to OpenRouter.
- Voice messages in the chat are transmitted as a complete audio file to OpenAI (Whisper) for transcription.
- A push notification about a new chat message contains the first 80 characters of the actual message in plain text and is delivered via Expo and, on iOS, Apple.
Video embeds and program code loaded from third parties
If you open a course lesson or an exercise video that is embedded via YouTube or Vimeo, your IP address reaches the respective provider — regardless of whether you have an account there. If you attach a video to a chat message, your browser loads program code for the compression from the CDN unpkg; the video itself does not leave your browser. The emoji picker in the chat loads its emoji database from the CDN jsDelivr when it is first opened.
Rights of data subjects
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, contact Steventhiel@globalnet-strategies.com or your coach. How you delete your account or your access with a coach yourself is explained on the page Delete account.
Retention
Log texts from AI calls (e.g. requests to the Coach Pilot) are emptied automatically 30 days after they are created — only the text, not the technical log entry itself.
We currently do not create backup copies (backups) of our database.
Supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).