Your data. Plain talk.

PURPOFF CORE is an AI coaching app for athletes who train and eat with intention. We're an independent team — contact us anytime at contact@purpoff.com.

Data controller: ФОП Лєпьошкін Михайло Євгенович, tax number 3778401593, бул. Шевченко 472, Черкаси, Черкаська область, 18006, Україна.

EU representative (Art. 27 GDPR): As our data controller is established outside the EU, we have appointed a representative in the European Union whom you — or a supervisory authority — may contact on all matters relating to the processing of your personal data. iuro Rechtsanwälte GmbH t/a Prighter, Schellinggasse 3, 1010 Vienna, Austria. Contact: app.prighter.com/portal/17436604695.

Only what we need to coach you well. Specifically:

• Your account — email and a Supabase-hashed password.
• Your profile — height, current weight, goal, training level (if gym-related).
• Your training data — programs, sessions, sets, reps, weights, RPE, session notes.
• Your nutrition data — meals synced from your catering provider plus any manual logs.
• Your activities — walks, runs, yoga, and anything else you log.
• Your coaching briefs — the daily output written specifically for you.
• Your weight history if you log it.

So we can write you a useful coaching brief. That's it. The brief reads your last 30 days of training + meals + recovery and synthesises one short prescription per morning. Your data never leaves this purpose.

Your data lives in Supabase, hosted in the Paris (EU, eu-west-3) region. Encrypted at rest, encrypted in transit. Some processing (AI coaching via Google) involves a transfer to the United States, carried out under the EU Standard Contractual Clauses / EU-US Data Privacy Framework. We do not store backups outside the EU.

Two narrow exceptions:

• AI provider (Google) receives a pseudonymised summary of your training + nutrition + recovery (and any photo you attach in chat) to generate your coaching. No email, no name, no account ID. We use Google's paid API, under which your data is not used to train Google's models.
• Your catering provider To fetch and edit your meal plan on your behalf, we store the email and password you enter for your catering account, encrypted (AES-256-GCM). They are used only to log in to your catering provider and are deleted when you delete your account.
• Analytics (PostHog) — only with your consent If you accept analytics cookies, PostHog receives your page visits and anonymous feature usage, keyed to a random account identifier. It is hosted in the EU, so no transfer outside the EEA is involved, and it never receives your health, nutrition or training data. If you decline, or later withdraw, nothing is sent at all.
• Session replay (PostHog) — separate, optional consent If you additionally allow session replay, we record how you move through the app: which elements you click, where you scroll, and how long screens take to respond. Before anything leaves your device, everything you or your caterer put into the app — meals, weights, macros, notes, coaching text and anything you type — is replaced with placeholder characters, and photos and video are not recorded at all. The app's own labels and buttons stay readable, because they are the same for every user and without them a recording would show nothing anyone could act on. We keep this consent separate from analytics: accepting analytics never turns replay on, and you can withdraw either one on its own at any time. Recordings are stored in the EU and deleted after 30 days.
• Infrastructure providers Our hosting providers (Supabase for the database, Railway for the API, Vercel for the website) process data on our behalf under data-processing agreements. OpenFoodFacts is queried for barcode lookups (no personal data).

We never sell, trade, or share your data with advertisers, data brokers, insurance companies, or any other third party.

You own your data and you can:

• Access & move it — export all your data as a JSON file from Settings (Art. 15 & 20).
• Correct it — every profile + training value is editable in-app (Art. 16).
• Delete it — one tap in Settings (or the Delete-account page) permanently deletes your account and all data, including saved catering logins. Irreversible (Art. 17).
• Withdraw consent — turn off any consent in Settings; as easy to withdraw as to give (Art. 7).
• Object / restrict — email us and we'll stop processing (Art. 18 & 21).

You can also email contact@purpoff.com and we'll action any request within one month. You also have the right to lodge a complaint with your supervisory authority — in Poland, the UODO (uodo.gov.pl).

Product analytics, if you accept it, rests on your consent (Art. 6(1)(a)) and is withdrawable at any time from Settings → Privacy — withdrawing is exactly as easy as accepting was. Your subscription and billing records are processed to perform our contract with you (Art. 6(1)(b)) and are kept for as long as tax law requires, regardless of your cookie choice.

We process your health & nutrition data (special-category data under GDPR Art. 9) on the basis of your explicit consent, given at signup and withdrawable at any time. Your data is kept for as long as your account exists; deleting your account permanently erases it, and time-limited caches are purged on a rolling schedule. Encrypted database backups may retain a copy for a short rotation window (up to 30 days) before they are overwritten. No archive, no shadow copies.

No advertising cookies, no data brokers, no cross-site tracking — ever. Here is every cookie we set:

• Strictly necessary Your sign-in session, your language preference, and your cookie choice itself. These are required for the app to work, so they do not need consent.
• Analytics — only if you say yes We use PostHog (hosted in the EU) to understand which parts of PURPOFF people actually use and where they get stuck. It is off until you accept it in the cookie banner, and you can change your mind at any time from Settings → Privacy or the link in the footer. Rejecting costs you nothing: every feature works the same.

What analytics never receives: your meals, weight, training data, injuries, coaching text, or anything you type to the AI coach. It sees page visits and anonymous feature usage — for example "a swap was applied", never which meal. We do not record your screen.

Analytics events are kept for 12 months and then deleted automatically. Your IP address is anonymised before it is stored, and analytics requests are served from our own domain rather than a third-party one.

PURPOFF CORE is for athletes aged 16 and over. We don't knowingly collect data from anyone younger.

If we materially change anything — what we collect, who else sees it — we'll email every active user 14 days before the change takes effect. The current effective date sits at the top of this page.

Questions, exports, deletions, complaints — write to contact@purpoff.com or contact@purpoff.com for anything else.