Volver a la app

Privacy Policy

Cielo Fitness Coaching

Effective date: 26/08/2026 Last updated: 26/08/2026

1. Who we are (Data Controller)

This app, Cielo Fitness Coaching ("the app", "we", "us"), is operated by Cielo Natali Reyes, a self-employed personal trainer (sole trader) based in Cork, Ireland. For the purposes of the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, Cielo Natali Reyes is the data controller of the personal data described below.

  • Contact for privacy matters: cielonatalireyes@gmail.com

2. What data we collect

We only collect data needed to provide personal training and to run your account.

a. Account and profile data

  • Name and email address (to create and access your account).
  • Date of birth, gender, height, weight, training goal, experience level, days

available to train.

  • Profile photo, if you choose to upload one.

b. Health data (special category data)

  • Injuries and physical limitations you tell us about.
  • Medical history or notes you provide.
  • Body composition measurements recorded during an assessment (for example body fat,

skeletal muscle mass, lean mass, visceral fat, BMR, target weight).

This is "special category" data under Article 9 GDPR and is treated with extra care. See section 4 for the legal basis.

c. Training and usage data

  • Your assigned routines and the sets you log (weight in kg, reps, RIR, session notes).
  • Messages you exchange with your coach through the in-app chat.
  • Records of payments you tell us you have made (date, amount, plan). We do not

collect or store card or bank card numbers (see section 6).

3. How we use your data

  • To create and manage your account and log you in.
  • To build and deliver your training programme and track your progress.
  • To communicate with you (chat, notices about your plan or payment).
  • To keep records of the coaching service provided to you.

We do not sell your data, and we do not use it for third-party advertising.

4. Legal basis for processing

  • Account, profile, training and communication data: processed to perform our

contract with you (Article 6(1)(b) GDPR) and, where relevant, our legitimate interest in running the coaching service (Article 6(1)(f)).

  • Health data (special category): processed only with your explicit consent

(Article 9(2)(a) GDPR). You give this consent separately (see the Health Data Consent form) and you can withdraw it at any time (section 8). Withdrawing consent does not affect processing already carried out before withdrawal.

5. Who can see your data

  • Your coach (Cielo Natali Reyes) can see your account, profile, health and

training data in order to coach you.

  • Other clients cannot see your data. Access is technically restricted per user

(row-level security), so each client only sees their own information.

  • We use the following service providers ("processors") who host the data on our

behalf under their own security and data-processing terms: - Supabase: database, authentication and file storage (hosted in the European Union). - Vercel: application hosting.

We do not otherwise share your data, except where we are legally required to.

6. Payments

Payments are made directly to us via Revolut or bank transfer. The app only records that a payment relates to you (date, amount, plan) so we can confirm it. We do not collect, process or store your card number or bank card details inside the app.

7. Data storage and international transfers

Your data is stored on infrastructure located in the European Union. Some service providers may process limited technical data outside the EU/EEA; where that happens it is covered by the provider's safeguards (such as Standard Contractual Clauses).

8. Your rights

Under GDPR you have the right to:

  • Access the data we hold about you.
  • Rectify data that is wrong or out of date.
  • Erase your data ("right to be forgotten").
  • Restrict or object to certain processing.
  • Data portability (receive your data in a usable format).
  • Withdraw consent for health data at any time.

To exercise any of these, contact us at cielonatalireyes@gmail.com. We will respond within one month.

You also have the right to complain to the Irish supervisory authority: Data Protection Commission (DPC), www.dataprotection.ie.

9. How long we keep your data

We retain a student's personal and health data for 12 months following the last account activity. After that period, the data is deleted or anonymised, unless a longer retention period is required by law.

10. Security

We protect your data with per-user access controls (row-level security), encrypted connections, and access limited to your coach. No system is perfectly secure, but we take reasonable steps to protect your information.

11. Children

The app is intended for adults aged 18 or over, and we do not intend to collect data from anyone under 18. If you are under 18, please do not use the app without involving a parent or guardian, and contact us first.

12. Changes to this policy

We may update this policy. We will post the new version in the app and update the "last updated" date.