Privacy and Cookie Policy

Last updated: 26 October 2026

This English version is provided as a courtesy translation. In the event of any discrepancy between this version and the Spanish version, the Spanish version shall prevail.

At lauripowerfit we take your privacy very seriously. We comply with the European General Data Protection Regulation (GDPR) to ensure that your personal information is protected at all times.

1. Data Controller

The controller of the data collected through this website is lauripowerfit. You can contact us at any time at lauripowerfit@gmail.com about any privacy matter.

2. Information we collect

At lauripowerfit we collect the following information when you use our services:

• Account information: name, email address and password when you register.
• Profile information: optional data such as age, weight, height and training goals.
• Physical activity data: when you connect services such as Google Fit, we import data from your workouts (distance, duration, pace).
• Usage data: anonymised information or analytics (via cookies) about how you use the platform, in order to improve our services.

2a. Health data

If you choose to, you can add injuries, food allergies and intolerances, medical conditions, medication and eating disorder history to your profile. The GDPR treats this as a special category of data (Art. 9), so we process it with these safeguards:

• Legal basis: your explicit consent (Art. 9(2)(a) GDPR), given by ticking a specific box in the questionnaire. It is optional: you can use the service without it, but your plans won't be able to take that information into account.
• Purpose: solely to tailor your training and nutrition plans (for example, to avoid foods you are allergic to or exercises that could aggravate an injury). It is not used for advertising or shared with third parties for any other purpose.
• Who can see it: only your trainer. If she prepares a plan with the help of artificial intelligence, that data is sent to the Google Gemini API, which acts as a data processor (see section 5).
• Withdrawal and retention: you can withdraw your consent at any time by unticking the box in your profile, and the data is deleted straight away. Otherwise it is kept for as long as your account is active.

3. How and why we use your information

We use your information on the basis of the performance of a contractual service or your express consent in order to:

• Provide and maintain our personalised training services.
• Synchronise and display your sporting activities.
• Send necessary communications relating to your account and payments.
• Comply with legal obligations and basic invoicing.

4. Cookie Policy

We use cookies and similar tracking technologies (such as the browser's local storage) to track activity on our service and to retain certain information.

• Necessary cookies: Essential for providing secure sign-in and payment services.
• Analytics cookies: Used to improve the service and observe traffic and usage patterns (Google Analytics). They require your consent, which you can give or withdraw at any time from the “Cookies” link in the footer.

5. Third-party integrations

We share information with external providers only to the extent strictly necessary to provide the service. All of them comply with the GDPR:

• Payment gateways: Where applicable, Stripe may use cookies and encrypted payment information.
• Google Fit: We only synchronise the distance and duration of physical activity, on demand and on the basis of consent that can be withdrawn at any time.
• Google Gemini (Google LLC): your trainer may use the Gemini API to draft plans. It receives the profile data needed for that (goals, physical data, preferences and, only if you have consented, health data), without your name or email. We use the paid service, under which Google acts as a data processor and does not use this data to train its models. This may involve an international transfer to the USA, covered by the EU-US Data Privacy Framework and standard contractual clauses.
• HSN (hsnstore.com): We take part in its affiliate programme. If you click one of our recommended links, we redirect you to its shop, and it is HSN that, once you are on its website, sets its own attribution cookies to recognise that you arrived from here. That processing is governed by HSN's privacy policy, not ours.

5a. Affiliate links and click statistics

Some links to third-party products are affiliate links: if you buy through them, we receive a commission at no extra cost to you. These links are marked as such wherever they appear.

When you click one of these links, we record the click in order to find out which recommendations are useful and, where applicable, to recognise the person who shared the link. Specifically, we store:

• An identifier derived from your IP address (a cryptographic hash, not the IP address in clear text), which allows us to count distinct visitors without keeping the original address.
• Your browser and device (user agent) and the referring page.
• If you are signed in, your user identifier, so that the links you share can be attributed to you.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in measuring the effectiveness of our own recommendations. We do not use this data to build advertising profiles, nor do we disclose it to third parties. Retention: individual click records are deleted after 12 months; after that we only keep aggregated totals. You can object to this processing by writing to us.

6. Security and Storage

We implement technical security measures (database encryption, passwords hashed with bcrypt) and organisational measures to protect your personal information. Your data is stored on servers located in Europe.

7. Your rights (ARCO and GDPR rights)

As a user resident in the EU, you have the right, at any time and free of charge, to:

• Access: your personal data, to find out which data we are processing.
• Rectification: of inaccurate data.
• Erasure ("Right to be forgotten"): to request the complete deletion of your profile and its data.
• Objection and Restriction: of the processing of your data for certain purposes.
• Portability: to export your data in a standard format from your account settings or by request.
• Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out before.

To exercise any of these rights, send an email to lauripowerfit@gmail.com with the subject "GDPR Rights".

If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Data retention

We keep your data for as long as your account is active. If you ask us to delete it, we will erase your personal data within a maximum of 30 days or irreversibly anonymise it, retaining only the minimum data required for tax compliance.