Privacy Policy

Last updated: October 24, 2026

1. Introduction

TFD Coaching ("we", "us", or "our") operates the ATLAS mobile application (the "App") and the website tfdcoaching.nl (the "Website"). This Privacy Policy explains what personal data we collect, how we use, store and protect it, and what your rights are.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection law.

2. Data Controller

The data controller for your personal data is:

TFD Coaching
Email: info@tfdcoaching.nl
Website: tfdcoaching.nl

3. Data We Collect

Account Data

• Your email address and sign-in method (email and password, Google, or Apple). These are held by our authentication provider, Google Firebase Authentication, and are not shown to other users
• Username and, if you add one, a display name
• Profile picture, if you upload one
• When your account was created and when you were last active

Guest Use

You can use ATLAS without creating an account. In that case we create an anonymous account identifier so your workouts can be stored and backed up. No email address or name is attached to it. If you later create an account, your data moves to it.

Workout Data

• Workouts and workout templates you create, including custom exercises
• Workout history: exercises, sets, weights, repetitions, hold times, effort ratings (RPE) and notes
• Training program enrolments, progress and scheduled workouts
• Goals and progression levels

Social Data

• Friend requests and friend connections
• Workout posts you share, and the likes and comments you give or receive
• Your workout and friend counts

Purchase and Subscription Data

• Subscription status, plan type and renewal or expiry date
• Purchase history and transaction identifiers

Payments are handled by Apple (App Store) or Google (Google Play). We never receive your payment card details.

Device and Notification Data

• A push notification token for your device, if you allow notifications
• Device type, operating system and app version

Analytics and Crash Data

• How you use the App, such as screens viewed and features used
• Crash reports and performance data

Analytics and crash data are linked to a pseudonymous user identifier (a random ID, not your name or email address) so we can investigate problems that affect a specific account.

Coaching Data

If we deliver a personal training program to you as part of coaching, we keep a record of which program was assigned to your account.

4. How We Use Your Data

• Providing the service: workout tracking, training programs, progression, goals, and syncing and backing up your data across devices
• Social features: friend connections, sharing workouts, likes and comments
• Notifications: workout reminders and notifications about friend requests, shared workouts, likes and comments
• Subscriptions: managing your subscription and verifying which features you have access to
• Improvement and reliability: understanding how the App is used, and finding and fixing crashes and bugs
• Communication: responding to your questions and support requests

We do not use your data for advertising, and we do not make decisions about you based solely on automated processing.

5. Legal Basis for Processing

• Contract performance (Art. 6(1)(b) GDPR): processing necessary to provide the App and your subscription to you
• Legitimate interest (Art. 6(1)(f) GDPR): analytics, crash reporting, security and service improvement
• Consent (Art. 6(1)(a) GDPR): push notifications, which you can turn off at any time in the App or in your device settings

6. Who Can See Your Data

• Other ATLAS users can find you by username and see your public profile: your username, display name, profile picture, and workout and friend counts
• Your friends see the workouts you share in their activity feed, together with the likes and comments on them. You can turn off workout sharing in Settings. Shared workout posts are deleted automatically after 7 days
• Your workouts, history, goals and programs are otherwise private to your account

7. Service Providers

We do not sell your personal data. We use the following service providers, who process data on our behalf:

• Google Firebase (Google Ireland Ltd. and Google LLC): authentication, database, file storage, cloud functions, push notifications (Firebase Cloud Messaging), analytics (Google Analytics for Firebase) and crash reporting (Firebase Crashlytics). See Firebase's privacy information
• RevenueCat: subscription and in-app purchase management. RevenueCat processes your account identifier, purchase transactions and subscription status. See RevenueCat's Privacy Policy
• Apple and Google: when you sign in with Apple or Google, or buy a subscription through the App Store or Google Play, those companies process your data under their own privacy policies
• Vercel: hosts a backup copy of the exercise catalogue. When the App uses it, Vercel receives your IP address and the request, but no account data

8. Data Storage and International Transfers

Your data is stored using Google Firebase (Google Cloud Platform). Some of our service providers process data in the United States. Where data is transferred outside the EU/EEA, it is protected by the EU-U.S. Data Privacy Framework or by Standard Contractual Clauses approved by the European Commission.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction, including encrypted connections and access rules that restrict each account's private data to that account.

9. Data Retention

• We keep your account data for as long as your account exists
• Shared workout posts, with their likes and comments, are deleted automatically 7 days after posting
• Analytics and crash data are kept for a limited period under Google's retention settings and then deleted automatically
• Data from guest use is kept until you discard it in the App

10. Deleting Your Account

You can delete your account at any time in the App under Settings → Delete Account. You can also ask us to delete it by emailing info@tfdcoaching.nl from the email address linked to your account.

Deleting your account permanently removes your profile, profile picture, workouts, history, programs, goals, friend connections, workout posts, and the likes and comments you left on other people's posts. Any remaining copies in backups and logs are removed within 30 days, unless we are required by law to keep them longer. Analytics and crash data are no longer linked to an existing account and expire under the retention settings described above.

Deleting your account does not cancel an active subscription. Cancel it in your App Store or Google Play subscription settings. Apple and Google keep records of your purchases under their own policies.

11. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access: request a copy of your personal data
• Rectification: request correction of inaccurate data
• Erasure: request deletion of your data (see section 10)
• Portability: receive your data in a structured, machine-readable format
• Restriction: request that we limit how we use your data
• Objection: object to processing based on our legitimate interest
• Withdraw consent: where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us at info@tfdcoaching.nl. We respond within one month.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

12. The Website

The Website does not use advertising or tracking cookies, and it does not use analytics.

If you sign in to the Website to view your dashboard, Firebase Authentication stores your sign-in session in your browser's storage. This is strictly necessary to keep you signed in and is removed when you sign out.

The Website loads fonts from Google Fonts and, on the dashboard, a charting library from a public content delivery network. These providers receive your IP address when your browser requests those files.

13. Children's Privacy

ATLAS is rated suitable for all ages. Whatever your age, we collect only the data described in this policy, and we do not show advertising.

If you are under 16, please use ATLAS with the permission of a parent or guardian. Under Dutch law, where we rely on consent (such as for push notifications), a parent or guardian must give or approve that consent for a user under 16.

Parents and guardians can contact us at info@tfdcoaching.nl to access, correct or delete their child's data. The account can also be deleted in the App under Settings → Delete Account.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or by other appropriate means. The "Last updated" date at the top of this page shows when this policy was last revised.

15. Contact

If you have questions about this Privacy Policy or our data practices, please contact us:

TFD Coaching
Email: info@tfdcoaching.nl