This policy explains what personal data Sensei24 collects, why we process it, how long we keep it, and the rights you have over it.
Sensei24 operates this service and is the data controller that determines the purposes and means of processing your personal data. You can reach the controller at support@sensei24.app for any question about this policy or the data we hold about you.
We process the data you provide directly — your name, email address, timezone, language, profile photo, and the coaching content you create or receive (sessions, goals, workouts, body metrics, check-ins, messages, files you upload, and the purchase and session-balance records a coach keeps for you). We also process technical data: your IP address when you accept this policy, the IP address and browser or device identifier of each sign-in session (for account security), and, if you enable notifications, the push token for your device or browser. If a coach invites you by email, we hold that address until you accept the invitation or it expires. Profile photos are served from a public link, so anyone with the link can view them. If you are a coach and use the assistant, we keep each request you type for 30 days, together with what it proposed, so you can review its changes and undo them. If you speak to the assistant on the phone, your speech is turned into text on the phone itself: the audio is never recorded or sent to us or anyone else, and only the text goes out as your request.
Every coach has a page that anyone with its link can open without an account. It shows the coach's name, photo, specialty and about text, a cover photo if they add one, and their packages with prices and usual venue if they choose to show them. It never shows email addresses, payment details, availability or anything about clients. Search engines are asked not to list these pages, and a coach can replace the link at any time, which stops the old one working.
We process your data to provide the coaching service you signed up for, on the basis of your consent (Article 6(1)(a) GDPR) and the performance of our agreement with you (Article 6(1)(b) GDPR). We do not sell your data, and we do not use it for advertising or profiling.
Your personal data is stored on servers located in the European Union (Frankfurt, Germany). We keep it for as long as your account is active. We may delete accounts that have been inactive for 1095 days, together with their associated personal data. Deleting your account yourself erases the data immediately.
We use only the cookies needed to run the service: a session cookie that keeps you signed in and a cookie that remembers your language. We use no advertising or analytics cookies.
Under the GDPR you may request access to your personal data, and its rectification, erasure, restriction of processing, or portability. You may object to processing and withdraw your consent at any time, without affecting processing carried out before withdrawal. You can delete your account and all associated personal data from the account settings page; to receive a copy of your data, write to us at the address below and we will provide it within one month. You also have the right to lodge a complaint with your local data protection supervisory authority. Privacy Policy
We rely on three infrastructure providers, each processing your data in EU regions: Amazon Web Services (hosting, file storage and inbound email — Frankfurt, and, through Amazon Bedrock, the language model behind the coach assistant — EU regions only), MongoDB Atlas (database — Frankfurt) and Resend (outbound email — Ireland). When a coach uses the assistant, Amazon Bedrock receives the request together with the names of their clients and the times of their sessions — never notes, health data or payments — and neither stores it nor uses it to train models. These providers are headquartered in the United States, so their processing is covered by the safeguards required under Chapter V of the GDPR, including Standard Contractual Clauses in their data processing terms. If you enable push notifications, each notification is delivered through your device or browser vendor’s push service (Apple, Google, Mozilla or Expo), which may process it outside the EEA. We make no other transfers outside the EEA.
For any privacy request — access, rectification, erasure, portability, or a question about this policy — write to support@sensei24.app and we will respond within one month, as the GDPR requires.
Last updated · version 2026-09-28