Privacy policy

What data we collect

From the enquiry form: your name, phone number, optional email and what you tell us about your goals.

If you become a client, we also collect information needed to provide your service: your plan, its dates and recorded payments.

Why we use it

To respond to you, deliver the service you purchased and meet legal record-keeping requirements.

We do not sell or share your data with third parties for commercial purposes.

Health data

Information about injuries, medical conditions or assessment results is sensitive data under Law No. 29733.

It is handled separately from other data: it requires its own explicit consent, is stored with restricted access, and access is logged with the person's identity and date. It is not used for any purpose beyond what you authorised.

AI assistance

We use AI tools to assist coaches in preparing and adjusting training programs.

No decision about your training is made automatically. A person always reviews and approves it and is responsible for what they sign.

Your data and model training

Your data is not used to train AI systems. The tools, their providers and their safeguards will be listed following legal review.

Supra IA

Supra IA is GoSupra's AI assistant for client accounts. It answers general questions about training, physiology and nutrition. Questions specific to your programming are handled by your coach. For a minor's account, their parent or guardian is the person who uses Supra IA.

Using it is optional and requires separate permission. You can withdraw it at any time from the Supra IA screen. Declining or withdrawing permission does not affect the rest of your service.

It processes your messages and, only when you ask, your published Supra Lab report, nutrition plan or current week's workouts to explain them. It explains your workouts but does not change them; changes are handled by your coach.

If you send a food photo, it estimates calories within an approximate range. For a minor's account, it describes the meal without giving calorie estimates. The photo is used only to answer that message and is not stored by Supra. Your conversation retains a note that you sent a photo, your accompanying text and Supra IA's response describing what is visible. Send photos of food only, without people. You may send up to five per day.

To provide context, it also receives basic account details: your first name, program and coach, whether the account belongs to a minor, your remaining daily and monthly messages, the types, titles and dates of documents it can read, and whether workouts are available. It initially receives only these details, not the contents of the documents or workouts. It does not read the rest of your records.

Your conversations are stored. Only Supra's administrator can read them, to review and improve the assistant's responses. The list shows who used it, how many messages there are and when. The contents are only visible after opening a conversation, and each access is logged. Your coach cannot see them.

Supra IA: provider and retention

Responses are generated by an Anthropic model, provided by a US company. Your messages, photos, the basic account details described above, and the documents and workouts you ask it to read are sent to its servers to generate responses. Anthropic does not use this information to train its models.

The retention period for Supra IA conversations has yet to be defined.

Your rights

You can ask to access, correct, update or delete the data we hold about you, and withdraw consent you previously gave.

Withdrawing consent does not erase the record that it was granted: the law requires us to demonstrate the conditions under which data was processed.

How long we keep it

Retention periods for each data type are pending legal review.

Who we share it with

With providers needed to operate the service: email, hosting, messaging and, if you use Supra IA, the AI model provider. The list and each provider's purpose will be published following legal review.

How to exercise your rights

Use any of our contact options and tell us what you need. No special form is required.

Data controller, address and response timeframe: to be confirmed following legal review.