Privacy Policy

1. Data controller

The controller of personal data processing is ABCreate, reachable at [email protected].

2. Data we collect

NoSpot collects the following personal data:

• Registration data: name, email address and password in encrypted form.
• Workout data: programs, sets, reps, loads and progress entered by the user.
• Usage data: technical information needed to operate and improve the service.

3. Purpose of processing

We process personal data only to:

• Provide and improve the NoSpot service.
• Manage the relationship between coaches and athletes inside the platform.
• Send service communications such as password reset or account notices.

We do not sell personal data to third parties and we do not use it for behavioral advertising.

4. Legal basis

Processing is based on the contract between the user and NoSpot under article 6(1)(b) GDPR and, where required, on legitimate interest or explicit consent.

5. Data retention

Data is retained for the lifetime of the account. If the account is deleted, personal data is removed within 30 days unless legal obligations require longer retention.

6. Data subject rights

Users may access, rectify, erase or export their data and may object to or restrict processing. To exercise these rights, contact [email protected].

7. Security

Data is stored on European infrastructure and protected with encryption in transit and at rest. Access is restricted to authorized personnel only.

8. Changes

This policy may be updated. If material changes are introduced, registered users will be notified by email.