Privacy Policy

1. Introduction

This Privacy Policy explains what personal data RPE Pulse (“we”, the “Operator”) processes, for what purposes, with whom it is shared, how it is retained, and what rights you have. Privacy contact: rpepulse@gmail.com Website: https://rpepulse.app Account / data deletion: https://rpepulse.app/en/delete-account If you do not agree with this Policy, do not use the Service.

2. Controller

The controller of personal data processed through the app and website is the Operator of RPE Pulse, reachable at rpepulse@gmail.com. When a coach or institution invites athletes, that coach/institution may also act as an independent or joint controller for squad-level decisions (e.g. lawful basis of the sports relationship). We process those data to provide the technical Service.

3. Data we collect

Depending on your role and use, we may process: A) Account and identity data • Email, password (hashed via the auth provider), name and other profile fields you provide. • Role (coach / athlete), internal user identifiers. B) Sports / wellness content • Daily check-ins: sleep, fatigue, muscle soreness (DOMS), stress, mood, and optional fields (notes, pain, energy, etc.). • Sessions: RPE, duration, session type/name, timestamps, session load. • Squad (team) links, invite codes, memberships. • Metrics derived from the above (ACWR, monotony, strain, adherence, RPE Pulse Score, risk indicators). C) Subscription and billing (self-serve) • Plan (FREE/PRO/ELITE), status, Paddle customer or transaction identifier, period dates, and data needed to validate entitlement. Paddle processes payment information as Merchant of Record; we do not store full card numbers. D) Technical data • Diagnostic logs, device/OS type when provided, IP addresses in server logs, session tokens, on-device preferences. E) Communications • Messages you send by email or contact forms (name, email, content). We do not request clinical health categories beyond the product’s subjective wellness/RPE scales. Those data may still be sensitive in some jurisdictions; we process them for sports load and perceived recovery monitoring.

4. Sources

• You provide them directly (sign-up, check-ins, RPE, forms). • The Service generates derived metrics. • Paddle provides status and identifiers needed to validate web subscriptions when enabled. • A coach may invite you to a squad; joining associates your account with that squad.

5. Purposes and bases

We process data to: • Provide the Service (account, squads, dashboards, exports by plan) — contract / use relationship. • Calculate metrics and show risk/readiness — contract. • Validate and sync subscriptions processed by Paddle — contract and legitimate interest in fraud prevention. • Security, abuse prevention, continuity — legitimate interest / legal obligation. • Support and respond to contacts — contract / legitimate interest. • Comply with law — legal obligation. • Improve the product using aggregate or technical data — legitimate interest (we do not sell personal data). We do not sell personal data. We do not use your wellness/RPE data for third-party behavioral advertising.

6. Processors and third parties

We share data only as needed to operate the Service: • Backend/auth/database infrastructure (e.g. Supabase / PostgreSQL and related services) as processors. • Paddle, as Merchant of Record and billing provider for web subscriptions when enabled. • Transactional email providers (e.g. for contact forms), if configured. • Authorities when legally required. Coaches of squads you join may view your wellness/session data linked to that squad. That is an essential part of the Service.

7. International transfers

Servers and sub-processors may be located outside your country (including the EU, US, or other regions depending on infrastructure). Where required, we use appropriate transfer mechanisms (such as standard contractual clauses).

8. Retention

We retain data while your account is active and as needed to provide the Service. If you request account deletion: • Access is disabled immediately. • Permanent deletion is scheduled after a 30-day grace period (you may cancel during that window by signing in / via Settings, depending on app version). • After that period, we delete or anonymize associated personal data, except where law, disputes, security, or accounting require retention (e.g. minimal records of transactions processed by Paddle). Backups may persist for a limited time until rotated.

9. Security

We apply reasonable technical and organizational measures: TLS in transit, access controls, authentication, database RLS where applicable, and least-privilege for server keys. No system is 100% secure. If you learn of an incident affecting you, contact rpepulse@gmail.com.

10. Your rights

Depending on your jurisdiction (e.g. Argentina Law 25.326, and GDPR where applicable), you may request: • Access to your personal data. • Rectification of inaccurate data. • Erasure (including account deletion). • Objection or restriction where legally available. • Portability where applicable. • Withdrawal of consent where consent is the basis. To exercise rights: rpepulse@gmail.com or https://rpepulse.app/en/delete-account for deletion. You may also lodge a complaint with your data protection authority (in Argentina, AAIP or successor).

11. Children

The Service may be used in developmental/institutional contexts with minors only under the coach/institution’s responsibility and with required legal authorizations. It is not intended for a minor to create an account independently without supervision. If you believe we processed a minor’s data improperly, contact us to review and delete where appropriate.

12. How to delete your account and data

Recommended option (also required by Apple for account-based apps): 1. Open RPE Pulse and sign in. 2. Go to Settings / Profile. 3. Choose “Delete my account” and complete confirmations. If you cannot open the app, email rpepulse@gmail.com from the account email with subject “Delete account”, and we will process deletion under this Policy. Public instructions: https://rpepulse.app/en/delete-account

13. Cookies and local storage

The website and app may use cookies or local storage. See the Cookies Policy: https://rpepulse.app/en/cookies

14. Changes

We may update this Policy. We will publish the current version with its date. For material changes, we may notify in-app or by email when reasonable.

15. Contact

Privacy and rights: rpepulse@gmail.com General support: https://rpepulse.app/en/support