Privacy Policy

TRAINR is operated by Streetonaut by Saugy (Einzelunternehmen), based in Stockenweg 35, 8906 Bonstetten, Switzerland. We are the data controller for the personal data described in this policy. Reach us at hello@trainr.ch.

We collect only the data we need to run the platform:

• Account data: email, password (stored hashed), name, role (athlete / coach / admin).
• Coach profile data: bio, tagline, specialties, languages, pricing, training locations, optional avatar photo.
• Booking data: session date, type, price, location, athlete, coach, status. Cancellation reason if provided.
• Payment data: handled by Stripe (we never see your card details). We store: transaction id, amount, currency, status.
• Communications: email content sent throughTRAINR (confirmations, reviews, cancellations).
• Reviews: rating + optional comment you leave about a coach after a session.
• Technical data: IP address, browser type, device id, language preference. Server logs of API calls. No third-party analytics or advertising cookies at this time.

• Contract performance (Art. 6(1)(b) GDPR / Art. 31 revDSG): to run your account, process bookings, route payments, and let coaches and athletes communicate.
• Legal obligation (Art. 6(1)(c) GDPR): tax, accounting and AML record retention.
• Legitimate interest (Art. 6(1)(f) GDPR): fraud prevention, platform safety, anonymous usage analytics, and product improvement.
• Consent (Art. 6(1)(a) GDPR): optional marketing emails (opt-in only, none today).

We use a small set of trusted processors. They are contractually bound to handle your data only on our instructions, with appropriate safeguards.

• Supabase (database + auth) — EU servers (Ireland).
• Vercel (web hosting) — global edge with EU fallback.
• Stripe (payments) — registered Swiss / EU / US data processor; handles all card data under PCI-DSS.
• Resend (transactional email) — EU region (eu- west-1, Ireland).
• Mapbox (maps + geocoding) — anonymous map tile requests, no personal data shared.
• Hostpoint (DNS + email forwarding) — Swiss servers.

We do not sell your personal data. We do not share it with advertisers. We never share coach profiles or booking history with third parties for marketing.

Some processors (notably Vercel and Stripe) may transfer data outside Switzerland or the EU/EEA. These transfers are protected by EU Standard Contractual Clauses and the Swiss-US Data Privacy Framework where applicable.

• Account data: until you delete your account.
• Booking + payment records: 10 years after the session, as required by Swiss accounting law (OR Art. 958f).
• Communications: 24 months for support continuity.
• Server logs: 30 days.
• Reviews: kept indefinitely (anonymised after account deletion).

You have the right to:

• access the personal data we hold about you,
• rectify inaccurate data,
• request deletion (subject to legal retention obligations),
• restrict or object to processing,
• data portability (export your data in a machine-readable format),
• withdraw consent at any time for consent-based processing.

To exercise any of these rights, email hello@trainr.ch. We respond within 30 days. You also have the right to lodge a complaint with the Swiss FDPIC or an EU supervisory authority.

We use only essential cookies required for authentication and session continuity. We do not use third-party analytics, advertising or fingerprinting cookies. No cookie banner is shown because we have no non-essential cookies to consent to.

All connections to TRAINR are TLS-encrypted. Passwords are hashed (bcrypt). Database access is restricted by row-level security. Payment processing is delegated to PCI-DSS-compliant Stripe — we never store your card number or CVC. We will notify affected users without undue delay if a breach occurs.

TRAINR is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has registered, contact us and we will delete the account.

We may update this policy as the product or law evolves. Material changes are emailed to registered users at least 30 days before taking effect.

Privacy questions, data requests, complaints — please write to hello@trainr.ch or Stockenweg 35, 8906 Bonstetten, Switzerland.