Privacy Policy

1. Who we are

Velorian Fitness is operated by Velorian Fitness LLC ("we", "us"). For the personal data described below, Velorian Fitness LLC is the data controller. Contact: support@velorianfitness.com.

2. What we collect

• Account data — name, email, login credentials.
• Fitness data you submit — bodyweight, progress photos, meal logs, workout logs, goal targets.
• Support messages — anything you send us by email or contact form.
• Technical/usage data — IP address, device type, browser, pages visited, basic telemetry.

Billing details (card number, billing address) are collected directly by our payment provider Paddle and are not stored on our servers.

3. Why we use it (purposes & legal basis)

• Provide your training programs, meal plans and dashboard — performance of a contract.
• Generate personalized splits and meal plans (Elite tier) — performance of a contract.
• Send transactional and check-in emails you opted into — consent / contract.
• Marketing emails — only with your consent; you can opt out at any time.
• Improve the product, troubleshoot bugs, prevent fraud and abuse, secure the service — legitimate interests.
• Meet legal, tax and accounting obligations — legal obligation.

4. Who we share it with

We do not sell your data. We share it only with:

• Service providers / subprocessors — hosting, database, email delivery, AI inference, analytics.
• Paddle.com, our Merchant of Record, for the sale of our products, subscription management, payments, tax compliance, invoicing and refunds.
• Professional advisers — legal, accounting.
• Authorities where required by law.

5. International transfers

Some of our providers are based outside the UK/EEA. Where personal data is transferred, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Retention

We keep account and fitness data for as long as your account is active and for up to 24 months after closure to handle support, disputes and legal obligations. Billing and tax records are kept for the period required by law (typically 7 years). After these periods data is deleted or anonymised.

7. Your rights

Depending on where you live, you have rights to access, rectify, erase, restrict, port, or object to processing of your personal data, to withdraw consent, and to complain to a supervisory authority. EU/UK residents have GDPR rights; California residents have CCPA rights, including opt-out of any "sale" (we don't sell data). Email support@velorianfitness.com and we will respond within 30 days.

8. Security

We use appropriate technical and organisational measures including encryption in transit, access controls, and least-privilege database policies. No system is 100% secure, but we work to protect your data.

9. Cookies

We use essential cookies for login sessions and basic first-party analytics. You can block cookies in your browser; some features may stop working.

10. Children

Velorian Fitness is not intended for users under 16. We do not knowingly collect data from children.