Privacy Policy

01

Who is responsible

İsoClub is a personal coaching and digital-product platform and the service party responsible for the personal-data processing described here. Contact hello@isoclub.az for privacy requests.

02

Data we collect

• Account data: name, email, authentication identifier, language and access status.
• Planning data: age, sex, height, weight, measurements, goals, training days and performance indicators.
• Special-category data: allergies, sensitivities, injury, pain and health restrictions, only with explicit consent.
• Usage data: plan completion, working weights, steps, measurements, feedback, messages and reward results.
• Enquiry data: the name, email, goal and marketing choice you give when asking about membership. İsoClub neither collects nor stores payment or card details.
• Technical data: security logs, device/browser type, errors and anonymous performance measurements.

03

Purposes and legal bases

• Contract: provide the account, coach communication and plans.
• Explicit consent: process health-related data for personalisation and send marketing only when separately selected. Consent can be withdrawn for future processing.
• Legitimate interests: secure the service, prevent abuse, fix errors and use privacy-preserving product analytics.
• Legal obligation: retain required accounting, tax and consumer records and establish or defend legal claims.

04

Automated calculations

BMI, calorie, macro and plan-fit calculations inform users and support coach decisions. İsoClub does not make solely automated decisions producing legal or similarly significant effects; an authorised coach makes the final personal-plan decision.

05

Who receives data

• Supabase and Google for accounts, plans and optional Google sign-in; Vercel for hosting, security and consented analytics; Lark/Brevo for operational email.
• Your authorised coach and limited technical staff where access is necessary.
• Competent authorities and professional advisers when law, rights or safety require it.

06

International transfers

Some providers may process data outside the EEA. Where this occurs, we rely on an adequacy decision, Standard Contractual Clauses or another safeguard recognised by applicable law.

07

Retention

We keep data no longer than necessary. Account and plan records are retained while the account is active and as needed for legal claims; marketing choices until withdrawal; enquiries for response and dispute handling; and transaction records for applicable tax and accounting periods. Data is then deleted or anonymised.

08

Your rights

• Request access, correction, deletion, restriction and portability.
• Object to legitimate-interest processing and withdraw consent at any time.
• Complain to the competent data-protection authority in your country.
• Email hello@isoclub.az from your account address. We may verify identity to protect your data.

09

Security and minors

Passwords are not stored in readable form. We use access controls, database-level permissions, secure transport and limited staff access. No system is risk-free; material incidents will be notified where law requires.

The service is not intended for independent use by minors without a parent or legal representative. Contact us if a child’s data may have been supplied without permission.

10

Changes

We will update the date and provide suitable notice for material changes. A new incompatible purpose requires its own lawful basis and, where necessary, new consent.