Privacy Policy

The by Nigel mobile app and the website at bynigel.fit are operated by Nigel Schat, sole trader, based in the Netherlands. Contact: info@bynigel.fit. Where this policy uses "we", "us" or "our" it refers to that sole trader. Where it uses "the app" it refers to the by Nigel iOS application.

If you choose to enable cycle tracking, the cycle phase information you provide is treated as special-category health data under GDPR Article 9. It is used only to adjust your training intensity guidance and is visible only to you and your coach. It is never sent to AI providers, never used for advertising, and you can disable cycle tracking and delete the data at any time from the profile settings.

Solely to provide the coaching service:

• Designing and reviewing your personalised programme;
• Tracking your progress over time;
• Supporting food logging and any meal plan your coach creates;
• Enabling direct communication with your coach;
• Sending essential account notifications (password resets, programme updates) and, only if you opt in, push notifications.

We do not use your data for advertising. We do not profile you for marketing purposes.

The app uses Anthropic's Claude API for three specific tasks. In all three cases, the data sent is the minimum needed to do the job, Anthropic does not retain or train on it, and a human (Coach Nigel) reviews any output before it reaches you when applicable.

• Programme draft: your onboarding answers (goal, equipment, injury notes) are sent to Claude to generate a draft training programme. Coach Nigel reviews and approves every draft before it reaches you.
• Photo of your plate: if you log a meal by photo, the image is sent to Anthropic's vision API to identify items and estimate macros. Photos are processed in-flight and are not retained for AI training.
• AI-suggested meal plan: if your coach generates an AI meal plan, the macro targets and food preferences you have set are sent to Anthropic for that single request.
• What we never send: your name, email, payment details, message history with your coach, and cycle-tracking data are never sent to Anthropic.
• Your consent: AI features run only after you tap "I consent" in the relevant flow. You can withdraw consent at any time by emailing info@bynigel.fit; existing programmes will continue to work and any future programme will be designed without AI assistance.

For users in the European Economic Area, the United Kingdom and Switzerland, we rely on the following legal bases under the GDPR:

• Performance of a contract (Art. 6(1)(b)) for delivering the coaching service you signed up for.
• Your explicit consent (Art. 6(1)(a) and Art. 9(2)(a)) for processing health-related data such as injury notes, cycle-tracking data, and for sending data to the AI provider.
• Legal obligation (Art. 6(1)(c)) for keeping invoices and payment records as required by Dutch tax law.

The app itself is free to use. Coaching services are arranged and paid for separately, outside the app, between you and Nigel. The app does not collect or process payment data.

We do not sell, rent, or trade your personal data. We do work with a small number of trusted services that process data on our behalf:

• Anthropic PBC — AI programme drafts, photo-of-plate analysis, and AI-suggested meal plans (see above).
• Replit, Inc. — hosts our backend service and database.
• Apple Inc. and Google LLC — App Store and Play Store delivery only. No payment data.
• Expo (650 Industries, Inc.) — over-the-air app updates and crash diagnostics.
• Resend (Resend, Inc.) — transactional emails such as password resets and invitations.

Each of these services processes data only as needed to deliver their function, and is bound by their own privacy commitments and, where data leaves the EEA, by the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism.

Most of your data is stored on servers operated by our backend provider, with data centres in the European Union and the United States. Some subprocessors process data in the United States. We rely on the European Commission's Standard Contractual Clauses for transfers outside the EEA.

Your data is transmitted over HTTPS and stored using industry-standard encryption at rest. Passwords are hashed and never stored in plain text. Access to the production database is limited to the operator of the service.

We retain your data for as long as your account is active. When you ask us to delete your account we will:

• Disable your account immediately;
• Permanently delete your personal data within 30 days, with the exception of records we are required to keep by law (under Dutch tax law, invoices and related payment records must be retained for seven years);
• Delete meal photos automatically 90 days after upload;
• Anonymise any aggregate, non-identifying statistics we wish to retain for service improvement.

Wherever you live, you can ask us to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your data (subject to the legal-retention exception);
• Export your data in a portable format;
• Withdraw a previously-given consent (e.g. AI consent);
• Object to or restrict certain processing.

To exercise any of these rights, email info@bynigel.fit. We will respond within 30 days. If you live in the EEA and you believe we are mishandling your data, you have the right to lodge a complaint with your national data-protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

The app is not intended for, and should not be used by, anyone under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated through an in-app notice and a fresh "Last updated" date at the top of this page. Continued use of the app after a material change constitutes acceptance of the updated policy.

Questions, requests, or complaints? info@bynigel.fit.