1. Who we are
This Privacy Policy describes how EasyCoach(“we”, “us”, “our”), based in Rotterdam, the Netherlands, processes personal data in connection with the CoachPlan platform. EasyCoach is the data controller for the purposes of the General Data Protection Regulation (GDPR).
Questions or requests relating to your data can be sent to legal@coachplan.app.
2. Data we collect
We collect and process the following categories of personal data:
Account data
Your email address and display name, collected when you register. We use this to identify your account, send essential service communications, and authenticate you.
Content you create
Exercises, training sessions, player profiles, and club data that you add to the platform. This data is created and controlled by you. It is stored on your behalf so you can access it across devices.
Usage and analytics data
With your consent, we collect anonymised data about how you use the platform via Google Analytics — including pages visited, session duration, and device/browser type. IP addresses are anonymised before collection. See our Cookies Policy for details.
3. Legal basis for processing
Under the GDPR, we rely on the following legal bases:
- Performance of a contract (Art. 6(1)(b)): Processing your account data and user-created content is necessary to provide the Service you signed up for.
- Legitimate interests (Art. 6(1)(f)): We process access logs and security data to protect the platform from abuse and to maintain service integrity. We have assessed that our interests do not override your rights.
- Consent (Art. 6(1)(a)): We only set analytics cookies and process usage data after you have given your explicit consent. You can withdraw this at any time.
4. How we store your data
Your data is stored securely in cloud infrastructure provided by Supabase, Inc. (supabase.com), a third-party data processor. Supabase provides industry-standard security, including encryption at rest and in transit. As a data processor acting on our instructions, Supabase is contractually bound to protect your data in accordance with the GDPR.
Data may be stored on servers located outside the European Economic Area (EEA). Where this occurs, Supabase ensures adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission.
5. Data retention
- Account data and user content is retained for as long as your account is active.
- If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.
- Anonymised analytics data (via Google Analytics) is retained for up to 26 months in accordance with Google's default retention settings.
- Server access logs are retained for up to 90 days for security purposes.
6. Your rights under GDPR
As a data subject under the GDPR, you have the following rights:
Right of access (Art. 15)
You can request a copy of the personal data we hold about you.
Right to rectification (Art. 16)
You can ask us to correct inaccurate or incomplete data.
Right to erasure (Art. 17)
You can ask us to delete your personal data where there is no overriding reason for us to continue processing it.
Right to restriction of processing (Art. 18)
You can ask us to temporarily restrict how we use your data while a dispute is resolved.
Right to data portability (Art. 20)
You can request your data in a structured, machine-readable format.
Right to object (Art. 21)
You can object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent
Where processing is based on consent (e.g. analytics cookies), you can withdraw it at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint
You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
To exercise any of these rights, email us at legal@coachplan.app. We will respond within 30 days.
7. Third-party services
We share data with the following third-party processors who are bound by appropriate data processing agreements:
- Supabase, Inc. — database hosting and authentication
- Google LLC — analytics (only with your consent; data anonymised)
We do not sell your personal data to any third party.
8. Changes to this policy
We may update this Privacy Policy periodically. Changes will be reflected in the “Last updated” date at the top of this page. For significant changes, we will notify users via email or an in-app notice.
9. Contact
For any privacy-related questions or to exercise your rights, contact us at legal@coachplan.app.