Privacy Notice

PE LEPETUKHA KYRYLO, trading as “ProtoFit” (the “Service”, “we”, “us”), is the data controller responsible for the personal data described in this notice. You can contact us at protofitsupport@gmail.com.

• Account data — email address, login credentials (stored hashed), display name, chosen language.
• Programme data — answers you give in the quiz, goals, weight and progress entries you enter yourself.
• Support and chat messages — the content of messages you exchange with our support channel and the in-app AI assistant.
• Consent records — the terms you accepted, date and time, IP address and a device identifier.
• Usage and technical data — pages viewed, device and browser type, approximate location derived from IP, cookie and analytics identifiers.
• Order data — the plan purchased, subscription status and invoice references. Full card details are never received or stored by us; they are handled by our payment provider.

• Creating your account and providing the Service — performance of our contract with you.
• Processing orders, subscriptions, invoices and tax — performance of a contract and legal obligation.
• Customer support and in-app AI assistant — performance of a contract.
• Security, fraud prevention and abuse detection — our legitimate interests in keeping the Service safe.
• Product analytics and improvement — legitimate interests, or your consent where cookies require it.
• Service emails (billing reminders, receipts) — contract and legal obligation. Marketing emails — your consent, withdrawable at any time.

• Our Merchant of Record / payment provider — processes the sale, payment, subscription management, invoicing, tax compliance and refunds, and acts as a controller for the data it collects at checkout.
• Service providers (processors) — hosting and database, email delivery, analytics and support tooling, acting only on our instructions.
• Messaging platforms — Telegram, where you voluntarily connect our bot.
• Professional advisers — legal and accounting advisers, where necessary.
• Authorities — where required by law or to establish, exercise or defend legal claims.

We do not sell personal data.

Our providers may process data outside your country, including outside the UK/EEA. Where this happens we rely on adequacy decisions or Standard Contractual Clauses with appropriate additional safeguards.

Account and programme data are kept while your account is active and for up to 24 months after it is closed, so that you can return without losing progress. Consent records and transaction data are kept for the period required by accounting and consumer-protection law (generally up to 7 years). After these periods data is deleted or anonymised.

Depending on where you live, you may ask us to give you access to your data, correct it, delete it, restrict or object to its processing, provide it in a portable format, or withdraw consent you previously gave. Write to protofitsupport@gmail.com and we will respond within one month. If you are in the UK/EEA you also have the right to complain to your local data protection supervisory authority.

We apply appropriate technical and organisational measures, including encryption in transit, hashed credentials, row-level access controls in our database and restricted administrative access. No online service can be guaranteed to be completely secure.

We use essential cookies needed for login and checkout, analytics cookies to understand how the site is used, and marketing cookies from advertising platforms to measure campaigns. You can manage or delete cookies in your browser settings and withdraw consent to non-essential cookies at any time.

We will update this notice when our practices change and publish the new edition date at the top of this page. Questions: protofitsupport@gmail.com.