Legal
Privacy Policy
Last updated: 18 April 2026 · GDPR-aligned · EU/Switzerland
Zelos is Europe-born and built with privacy as a default, not an afterthought. We collect only what is necessary to deliver the coaching service. We do not sell your data, ever.
What we collect
- Identity data: name, preferred name, email address, WhatsApp number
- Training data: session reports, performance metrics, Intervals.icu data synced via API
- Usage data: message timestamps, feature interactions, subscription tier
- Technical data: timezone, device identifiers for WhatsApp delivery
How we use your data
- To deliver your daily training brief via WhatsApp
- To adapt your protocol based on session feedback and performance signals
- To calculate and update your Zelos Index nightly
- To send weekly recaps and protocol adjustment notifications
- To process subscription payments (via Stripe — we do not store card data)
Data we do not collect
- Health or medical records (any health question is redirected to professionals)
- Location data beyond your declared timezone
- Behavioural tracking pixels, ad identifiers, or third-party analytics cookies
- Biometric data beyond what you explicitly share in session reports
Data retention
- Active accounts: data retained for the duration of your subscription
- Cancelled accounts: Zelos Stack exportable for 90 days, then deleted
- WhatsApp messages: stored for 12 months for coaching context, then purged
- Payment records: retained for 7 years per Swiss accounting requirements
Your rights (GDPR)
- Right to access: request a copy of all data we hold about you
- Right to rectification: correct inaccurate personal data
- Right to erasure: request deletion of your account and all associated data
- Right to portability: export your Zelos Stack as CSV or JSON at any time
- Right to object: object to processing based on legitimate interests
Third-party services
- Intervals.icu: your API key is stored encrypted and used only to sync training data
- Supabase: database and authentication infrastructure, EU-hosted
- Stripe: payment processing (PCI-DSS compliant)
- WhatsApp Business API: message delivery via Meta-approved partner
To exercise any of your rights, contact privacy@zelos-coach.com. We respond within 30 days.