Privacy Policy

Effective Date: July 1, 2025
Last Updated: September 11, 2026

1. Introduction

Elite You is operated by Inter Chain Inc., a corporation organized under the laws of the State of Delaware, United States ("Inter Chain," "Company," "we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our fitness tracking and coaching platform located at www.eliteyou.app (the "Service").

By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you provide directly to us, including:

Account Information: Name, email address, password, and profile information
Fitness Data: Training goals, preferences, and fitness-related information
Manual Activity Data: Activities you enter yourself (for example, distance, duration, pace, notes, and workout type)
Coach Applications: Qualifications, experience, bio, and profile pictures (for coach applicants)
Communication: Messages sent through our platform and support requests
Payment Information: Payment method details (processed securely by our payment providers)

2.2 Information We Collect Automatically

When you use our Service, we automatically collect:

Usage Data: How you interact with our Service, features used, and pages visited
Device Information: Device type, operating system, browser type, and IP address
Location Data: General location information (city/country level) for service optimization
Cookies and Similar Technologies: Information stored on your device to enhance your experience

2.3 Information from Third Parties

We may receive information from:

Strava (with your consent): Profile information and activity data, which may include activity type, start time, duration, distance, pace or speed, elevation, heart rate, calories, route or GPS/map data when available, and related fitness metrics
Garmin Connect (with your consent): Activity and fitness data from your Garmin account and compatible devices, which may include activity type, start time, duration, distance, pace or speed, elevation, heart rate and other biometric or wellness metrics when available, calories, route or GPS data, activity files (such as FIT, GPX, or TCX), and related workout details
Google Analytics: Website usage statistics and user behavior data
Payment Processors: Payment confirmation and transaction details

Some activity and wellness data from Strava or Garmin may be considered health-related information. We only access this data after you connect the relevant account and authorize the scopes or permissions presented during that connection.

3. How We Use Your Information

We use the information we collect to:

3.1 Provide and Improve Our Service

Create and manage your account
Display synced and manually entered activities in your calendar and related features
Generate personalized AI training plans and adjust plans based on your activity and fitness data
Award progress or points features tied to completed activities (where applicable)
Provide coaching services and facilitate coach-user connections
Process payments and manage subscriptions
Send service-related communications (account updates, security alerts)

3.2 Personalize Your Experience

Customize training recommendations based on your fitness and activity data
Improve our AI algorithms for better training plan generation
Provide relevant content and features

3.3 Analytics and Research

Analyze usage patterns to improve our Service
Conduct research to enhance training plan effectiveness
Generate aggregated, anonymized statistics

3.4 Marketing Communications

Send promotional emails about new features and services (with your consent)
Provide updates about Elite You news and events
You can opt out of marketing communications at any time

3.5 Legal and Security Purposes

Comply with legal obligations
Protect against fraud and security threats
Enforce our Terms of Service
Respond to legal requests and investigations

We do not use Strava or Garmin activity data for third-party advertising, and we do not sell that data.

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information—including Strava or Garmin activity data—to third parties for their marketing purposes.

4.2 Service Providers

We may share your information with trusted service providers who assist us in operating our Service:

Google Cloud Platform (GCP): Data hosting and storage (USA)
Brevo: Email services and communications
Paystack: Payment processing for traditional payments
Arrel: Cryptocurrency payment processing
OpenAI: AI training plan generation and related plan features, which may process fitness and activity data you provide or sync (including data originating from Strava or Garmin) as needed to generate or adjust plans
Google Analytics: Website analytics and user behavior tracking

These providers process information on our behalf under contractual and security obligations. They are not authorized to use your activity data for their own marketing.

4.3 Coach Services

When you interact with coaches through our platform:

Coaches can see your profile information and fitness data you choose to share, which may include synced activity summaries
Messages between you and coaches are stored securely on our platform
We do not share your personal contact information with coaches

4.4 Public and Shared Calendars

If you create a public or shared calendar link, people with that link may view training plan and activity information included on the shared calendar. You control whether to create or revoke such links.

4.5 No Transfer of Activity Data Back to Garmin

Unless you separately and expressly authorize a feature that uploads or transfers data into Garmin Connect, we do not send your Elite You account data or third-party activity data back to Garmin. Connecting Garmin is used to import authorized activity data into the Service.

4.6 Legal Requirements

We may disclose your information if required by law or in response to:

Legal process or government requests
Protection of our rights, property, or safety
Investigation of potential violations of our Terms of Service

4.7 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the same privacy protections.

5. Data Retention

5.1 Retention Periods

We retain your information for the following periods:

Account Data: 5 years from your last activity or account deletion
Fitness Data: 5 years from your last activity
Communication Data: 3 years from the last interaction
Payment Data: 7 years (for tax and legal compliance)
Analytics Data: 2 years (aggregated and anonymized)

5.2 Account Deletion

When you delete your account:

Your personal information is immediately removed from active use
Data is retained for legal and regulatory purposes for the specified retention periods
You may request complete data deletion by contacting our support team

6. Data Security

6.1 Security Measures

We implement appropriate technical and organizational measures to protect your information:

Encryption: Data is encrypted in transit and at rest
Access Controls: Limited access to personal information on a need-to-know basis
Regular Security Audits: We conduct regular security assessments
Data Backup: Secure backup procedures with disaster recovery plans

6.2 Data Breach Response

In the unlikely event of a data breach, we will:

Notify affected users within 72 hours (as required by GDPR)
Take immediate steps to contain and remediate the breach
Cooperate with relevant authorities
Provide guidance on protective measures users can take

7. Your Rights and Choices

7.1 Access and Control

You have the following rights regarding your personal information:

Access: Request a copy of your personal information
Correction: Update or correct inaccurate information
Deletion: Request deletion of your personal information
Portability: Receive your data in a structured, machine-readable format
Restriction: Limit how we process your information
Objection: Object to certain types of processing

7.2 Marketing Preferences

You can control marketing communications by:

Unsubscribing from marketing emails using the link in each email
Updating your preferences in your account settings
Contacting our support team

7.3 Cookies and Tracking

You can control cookies and tracking by:

Adjusting your browser settings
Using our cookie consent management tools
Opting out of Google Analytics tracking

8. International Data Transfers

8.1 Data Location

Your data is primarily stored in the United States (Google Cloud Platform) and may be processed in other countries where our service providers operate.

8.2 Adequacy and Safeguards

For international transfers, we ensure adequate protection through:

Standard Contractual Clauses (SCCs) for GDPR compliance
Adequacy decisions where applicable
Other appropriate safeguards as required by law

9. Children's Privacy

9.1 Age Requirements

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

9.2 Parental Consent

If you are under 18, you represent that your parent or legal guardian has reviewed and agreed to this Privacy Policy on your behalf.

10. Third-Party Services

10.1 External Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

10.2 Third-Party Integrations (Strava and Garmin Connect)

When you connect third-party fitness integrations such as Strava or Garmin Connect:

You authorize us to access and process the activity and profile data described in Section 2.3, limited to the permissions you grant
We use that data as described in Sections 3 and 4 (including displaying activities, personalizing and generating training plans, coaching features you enable, and processing by service providers such as OpenAI where needed for those features)
The third party's own terms and privacy policy also apply to data held in their systems (for example, Strava's privacy policy and Garmin's Privacy Policy for Garmin Connect and Compatible Garmin Devices at https://www.garmin.com/privacy/connect)
You can disconnect these integrations at any time through your Elite You account settings and/or through the third-party account's connected-apps or permissions settings
Disconnecting stops new data sync from that provider; previously synced activity data remains in your Elite You account until you delete it, delete your account, or request deletion under Section 7
You may also withdraw consent by contacting us using the details in Section 15

11. Changes to This Privacy Policy

11.1 Updates

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy on our Service
Sending email notifications to registered users
Displaying prominent notices on our Service

11.2 Continued Use

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

12. Legal Basis for Processing (GDPR)

12.1 Legal Grounds

We process your personal information based on the following legal grounds:

Consent: For marketing communications and optional features
Contract Performance: To provide our services and fulfill our obligations
Legitimate Interest: For service improvement, security, and fraud prevention
Legal Obligation: To comply with applicable laws and regulations

12.2 Your Rights Under GDPR

If you are in the European Union, you have additional rights under GDPR:

Right to lodge a complaint with a supervisory authority
Right to withdraw consent at any time
Right to data portability
Right to be forgotten (subject to legal requirements)

13. United States Privacy Rights

13.1 California and Other State Privacy Laws

If you are a resident of California or another U.S. state with a comprehensive privacy law (including, where applicable, the California Consumer Privacy Act as amended by the CPRA), you may have additional rights, such as to:

Know the categories of personal information we collect, use, and disclose
Request access to or deletion of your personal information
Correct inaccurate personal information
Opt out of the "sale" or "sharing" of personal information (we do not sell your personal information)
Not be discriminated against for exercising your privacy rights

To exercise these rights, contact us using the details in Section 15. We will verify your request before fulfilling it.

13.2 Do Not Sell or Share

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

14. South African Privacy Law (POPI Act)

14.1 POPI Act Compliance

If you are in South Africa, we process your personal information in line with the Protection of Personal Information Act (POPI Act). We:

Process personal information lawfully and reasonably
Collect information directly from you when possible
Use information for the purpose for which it was collected
Maintain data quality and security standards

14.2 Your Rights Under POPI Act

You have the right to:

Be notified when personal information is collected
Know why personal information is being collected
Access and correct your personal information
Object to the processing of your personal information
Lodge a complaint with the Information Regulator

15. Contact Information

15.1 Privacy Inquiries

For questions about this Privacy Policy or to exercise your rights, please contact us:

Company: Inter Chain Inc., a Delaware corporation
Email: hello@eliteyou.app
Registered jurisdiction: State of Delaware, United States
Privacy Contact: Inter Chain Inc.

15.2 Data Protection Officer

For GDPR-related inquiries, you may also contact our Data Protection Officer at the same email address.

15.3 Response Times

We will respond to your privacy requests within:

General Inquiries: 30 days
Data Subject Requests (GDPR): 30 days
POPI Act Requests: 30 days
Data Breach Notifications: 72 hours (GDPR requirement)

16. Definitions

Personal Information: Any information that identifies or can be used to identify an individual
Processing: Any operation performed on personal information
Data Controller: Inter Chain Inc., responsible for determining how and why personal information is processed
Data Processor: Third-party service providers who process data on our behalf
Data Subject: The individual whose personal information is being processed

By using the Elite You Service, you acknowledge that you have read, understood, and agree to this Privacy Policy.