Privacy Policy

Last updated: 12 October 2026

This policy explains what data valentynafit.com and its client app collect, why, where it is stored and how to delete it.

1. Who is responsible for your data

The data controller is Valentyna Chemerys, fitness coach, Vilnius, Lithuania ("I"). You can contact me about your data on Instagram @valentyna_fit or through the Telegram bot connected in your profile.

2. What data I collect

• Account: name, e-mail, password (stored only in hashed form), language, profile photo, phone (if you add it).
• Bookings and payments: session dates and times, cancellations, passes, balance, payment method, session notes.
• Workouts: exercises, sets, weights, duration, how hard it felt, calories from a fitness tracker, notes.
• Health and body data: weight, height, age, sex, activity level and goal, before/after photos, food diary, food photos.
• Telegram: chat ID, if you connected notifications yourself.
• Technical data: session cookies needed to sign in and protect forms, and server logs (IP address, request time) kept for a limited time for security.

Data about your weight, body, nutrition and wellbeing is health data (a special category under GDPR). I process it only with your explicit consent, given when you sign up.

3. Why

• so you can book and pay for sessions;
• so I can follow your progress, adjust your program and calorie targets and give advice;
• to send notifications: booking confirmations, reminders, "How was the workout?", payment confirmations;
• to count calories from a photo of your food;
• to protect the site from abuse.

I do not sell your data, use it for advertising or share it with anyone other than the services below.

4. Legal bases

• performance of our agreement (account, bookings, payments, notifications) — Art. 6(1)(b) GDPR;
• your explicit consent to processing health data — Art. 6(1)(a) and 9(2)(a) GDPR;
• legal requirements for payment records — Art. 6(1)(c) GDPR;
• legitimate interest in keeping the site secure — Art. 6(1)(f) GDPR.

5. Who else has access (processors)

• Hetzner Online GmbH (Germany, EU) — the server where all data is stored.
• Cloudflare, Inc. — protection and fast delivery of the site.
• Resend, Inc. — sending e-mails (servers in the EU, Ireland).
• Anthropic, PBC (USA) — recognising dishes in photos. A photo is sent only when you tap "Take a photo" in the food diary; Anthropic does not use this data to train its models.
• Telegram — only if you connected Telegram notifications.

Transfers outside the EU rely on the European Commission's Standard Contractual Clauses.

6. How long data is kept

• For as long as your account exists.
• When you delete your account, the data is deleted immediately, and from backups when they are next rotated.
• Payment records may be kept longer where accounting law requires it.

7. Your rights

You can:

• get a copy of your data;
• correct inaccurate data (most of it right in your profile);
• delete your account and all data: Profile → Account settings → "Delete account";
• restrict or object to processing;
• receive your data in a portable format;
• withdraw consent at any time — this does not affect processing before the withdrawal;
• complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

8. Cookies

The site uses only necessary cookies: to keep you signed in and to protect forms. Your chosen language and dismissed hints are stored in your browser. There are no advertising or analytics cookies.

9. Age

The service is intended for people aged 16 and over.

10. Changes

If this policy changes, I will update the date at the top and let you know about significant changes in the app or by e-mail.