Privacy Policy

1. Introduction

ATHEVIO is a workspace for independent personal trainers and coaches to manage clients, record body-measurement assessments, compare progress, and generate branded PDF reports. This Policy covers the information involved in providing that service - both information about you as a coach, and, separately, information you as a coach choose to enter about your own clients.

2. Who Operates ATHEVIO

ATHEVIO is currently offered as a product and service rather than through a separately incorporated company, LLC, or Ltd. entity, and is operated from Türkiye. In this Policy, "ATHEVIO," "we," "us," and "our" refer to the individual(s) operating the ATHEVIO service, unless and until a separate legal entity is formally incorporated to operate it. You can reach us at hello@athevio.com.

3. Scope of This Policy

This Policy covers information ATHEVIO itself collects and processes to operate the service - for example, your own account and profile information, and the technical information generated by your use of ATHEVIO. Coaches also enter information about their own clients into ATHEVIO; Section 5 and Section 19 explain that data specifically, and how responsibility for it is divided between ATHEVIO and the coach who entered it. If you are a client whose information a coach has entered into ATHEVIO, see Section 5 and Section 18 for how this affects you.

4. Information We Collect From You

If you are a coach with an ATHEVIO account, we collect:

• Account and authentication data: your email address, account-verification status, and your password - your password is handled by our authentication provider, Supabase, and is not stored by ATHEVIO itself.
• Profile information you provide: display name, business or brand name, business logo, the contact email, phone, and website shown on your PDF reports, your timezone, your display language, and your appearance (light/dark/system) preference.
• Billing information: see Section 9 (Payment Information).
• Technical information: your IP address and similar request metadata, processed for security purposes such as applying reasonable limits on repeated sign-in or account-creation attempts.

5. Information Coaches Provide About Clients

If you are a coach, ATHEVIO lets you create records for your own clients, which may include: the client's name and, optionally, email, phone, and free-text notes; body-measurement assessments, including the assessment date and any of the following measurement types you choose to record - weight, body fat percentage, and neck, shoulder, chest, upper-arm, waist, hip, thigh, and calf measurements; and any comment you add when generating a PDF progress report.

This measurement and assessment information relates to physical body composition and fitness progress. ATHEVIO does not treat it as a medical record, and does not provide medical diagnosis or medical advice - but depending on applicable law, some of it may be treated as a special or sensitive category of personal data. Coaches should treat it accordingly and ensure they have appropriate permission to collect it (see Section 19).

ATHEVIO does not collect client information directly from clients - it is entered by the coach, and is visible only within that coach's own account, never to other coaches.

6. How We Use Information

We use the information described above to:

• operate and provide ATHEVIO - authenticate you, store your data, generate progress comparisons and PDF reports, and deliver the emails described in this Policy;
• maintain the security of the service and prevent abuse, including applying reasonable usage limits;
• communicate with you about your account - for example, email verification, password reset, billing, and the retention/deletion warnings described in Section 13;
• respond to requests you send to hello@athevio.com; and
• comply with our legal obligations.

We do not use your account or client data to serve you advertising, and we do not sell personal information.

7. Legal Bases for Processing

Depending on where you or your clients are located, applicable law may require us to have a legal basis for processing personal data. Where this applies, we generally rely on: performing our contract with you (providing the ATHEVIO service you signed up for); our legitimate interests in operating, securing, and improving the service; complying with legal obligations; and, where required, your consent.

Coaches independently determine why and on what basis they collect and use information about their own clients within ATHEVIO; that determination is the coach's responsibility, not ATHEVIO's (see Section 19). Depending on the data category and the law that applies, ATHEVIO's own role may be that of a data controller for account-level information, and a data processor (or an equivalent role) for information a coach enters about their clients. We have not exhaustively classified every data flow against every applicable law; where your rights depend on this classification, please contact us, and consider seeking independent legal advice.

8. How Information Is Shared

We do not sell your personal information. We share it only:

• with the service providers described in Section 10, who help us operate ATHEVIO;
• within your own account - a client's information stays visible only to the coach who entered it, never to other coaches;
• where required by law, or to protect ATHEVIO's rights or the safety of any person; or
• if ATHEVIO's business changes hands (for example, a merger or acquisition), in which case information may be transferred as part of that transaction, subject to this Policy or its successor.

9. Payment Information

When you subscribe to a paid plan, checkout and payment collection happen on pages hosted directly by Polar, our payment processor - ATHEVIO's own servers do not receive or store your full card number or other complete payment-card details. ATHEVIO stores billing metadata about your subscription, such as your Polar customer and subscription identifiers, selected plan, billing status, and billing-period dates, so we can determine your plan and account access. Polar's own privacy policy and terms govern its handling of your payment details.

10. Service Providers We Use

We use the following service providers to operate ATHEVIO. Each processes information only as necessary to provide its service to us:

• Supabase - authentication, database, and private file storage. Your account data, client records, and generated PDF/export files are stored here.
• Polar - subscription billing and payment processing (see Section 9).
• Resend - delivery of transactional emails, such as account verification, password reset, and the retention/deletion warning emails described in Section 13.
• Vercel - application hosting and content delivery.

11. International Data Processing

ATHEVIO is operated from Türkiye. Our database and file-storage provider, Supabase, hosts ATHEVIO's production data in the European Union (Ireland). Other service providers listed in Section 10 may process information in additional countries, including the United States. As a result, information may be processed in a country other than the one you or your clients are located in, which may have different data-protection laws than your own.

We have not independently documented the specific legal transfer mechanism (such as standard contractual clauses or an adequacy decision) that applies to every such transfer. If the specific safeguards that apply to your information are important to you, please contact us at hello@athevio.com, or seek independent legal advice.

12. Cookies & Similar Technologies

ATHEVIO uses only a small number of essential cookies needed to operate the service:

• authentication/session cookies, set by Supabase, that keep you signed in;
• a cookie that remembers your selected display language; and
• a cookie that remembers your selected appearance (light/dark/system) preference.

We do not currently use advertising or analytics cookies, or any third-party tracking pixels or scripts, on ATHEVIO. If this changes, we will update this Policy.

13. Data Retention

We keep your account and client data while your account is active - during your free trial, and for as long as you maintain a subscription. If your trial or subscription ends without renewal, your account becomes read-only: your existing data stays safe and remains viewable, downloadable, and exportable, but new clients, assessments, and reports cannot be created. If an account remains read-only for six months without a new subscription, it becomes scheduled for permanent deletion, with advance email warning before that date - see Section 14.

Individual client records are archived, not deleted, when you no longer work with that client, and individual assessments cannot be deleted once created - both persist until your account itself is deleted or you request erasure. You can delete an individual generated PDF report yourself at any time. Generated export files (see Section 15) are automatically removed a short time after they become available. Billing and subscription records are kept only as long as your account exists; Polar, our payment processor, separately maintains its own transaction records for its own legal and tax purposes, independent of ATHEVIO's account-deletion process.

14. Account Cancellation & Data Deletion

Cancelling a paid subscription does not itself delete your account or data - see Section 13 for what happens next.

You may request permanent erasure of your account and all associated personal and client data at any time by emailing hello@athevio.com from your registered account email address. Because this is irreversible, we verify that you control the account, and understand the consequences of erasure, before making any change; once verified, we complete the erasure within 30 days of your request, unless we are legally required to retain particular information for longer (for example, under a legal hold).

When your account is erased, or reaches the end of the automatic retention window described in Section 13, we remove your stored files - including logos, generated PDF reports, and export archives - and delete your account, profile, client, assessment, report, and billing records from our database, along with your authentication account. A minimal record is kept afterward, solely that an account existed and was deleted, when, and why; it does not include any of your client's information.

15. Data Export

You can request a downloadable ZIP archive of your account's records - clients, assessments, and reports - at any time from Settings, without needing to cancel or delete your account. We apply reasonable limits on how often you can request a new export to protect the service from abuse. Generated export files are automatically removed a short time after they become available, so we recommend downloading your export promptly once it is ready.

16. Security

We use reasonable technical and organizational measures designed to protect the information in ATHEVIO, including access controls that keep each coach's client data isolated to their own account, and encryption of data in transit. No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your information.

17. Children's & Minors' Information

ATHEVIO's own account registration is intended for coaches, not for their clients - clients do not create ATHEVIO accounts or provide information to us directly. ATHEVIO does not currently ask for or verify the age of clients whose information a coach enters, and does not have a parental-consent workflow built into the product. If you are a coach who works with minors (for example, youth athletes), you are responsible for obtaining any parental or guardian consent, and any other authorization, required by applicable law before entering that minor's information into ATHEVIO.

If you believe a minor has provided us with personal information directly, without appropriate consent, please contact us at hello@athevio.com.

18. Your Rights

Depending on where you live and the law that applies to you, you may have rights relating to the personal information we hold about you, which can include the right to access, correct, or delete it; restrict or object to certain processing; receive a copy of it in a portable format; and withdraw consent where processing relies on consent. Not every right applies in every jurisdiction, and some are subject to exceptions.

To exercise these rights over your own ATHEVIO account, contact us at hello@athevio.com, or use the export (Section 15) and erasure (Section 14) features described above.

If you are a client whose information was entered into ATHEVIO by a coach, your primary relationship for that information is with your coach, not ATHEVIO - we encourage you to contact your coach first. If you contact ATHEVIO directly about a coach's client data, we may need to coordinate with the relevant coach to act on your request, depending on our role with respect to that information (see Section 7).

You may also have the right to lodge a complaint with a data protection authority in your country, where one exists.

19. Coach Responsibilities for Client Data

If you are a coach, you are responsible for the client information you enter into ATHEVIO, including: having an appropriate legal basis, permission, or consent to collect and store that information; the accuracy of the information you enter; using assessments, measurements, and reports appropriately as coaching tools, never as a medical diagnosis; and your own compliance with any data-protection law that applies to you as the person who collected your clients' information. ATHEVIO processes this information on your instructions, to provide you the service you signed up for.

20. Changes to This Policy

We may update this Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continuing to use ATHEVIO after a change takes effect means you accept the updated Policy.

21. Contact

Questions about this Policy, or requests relating to your information, can be sent to hello@athevio.com. See also our Terms of Service.