Privacy Policy

A. Personal Data You Provide to Us

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

• Identity Data: Name, username, or similar identifier.
• Contact Data: Email address (used for waitlist, login, and communication).
• Profile Data: Your password, preferences, feedback, and survey responses.

B. Sensitive Personal Data (Health Data)

When you use our Mobile App or Web Platform to track workouts, body metrics (weight, height, body fat %), nutrition logs, or progress photos, we process data concerning your health ("Health Data").

• Legal Basis: We process this data ONLY based on your explicit consent (Article 9(2)(a) GDPR), which you provide when you start using the tracking features. You can withdraw this consent at any time by deleting your account or data.

C. Information Automatically Collected

When you visit our Site or App, our servers automatically collect certain technical information, including:

• Log and Usage Data: IP address, browser type, device settings, operating system, and crash data.
• Cookies and Tracking Technologies: We may use cookies (like Google Analytics 4 and Meta Pixel) to access or store information. Specific details are set out in our Cookie Policy.

We use the information we collect or receive:

• To provide the Service: To create your account, track your fitness progress, and deliver coaching content.
• To manage the Waitlist: To send you updates about our launch and grant you access when ready.
• To send administrative information: Changes to our terms, conditions, and policies.
• To protect our Services: For fraud monitoring and prevention.
• For Marketing (with your consent): To send you promotional emails via Mailchimp. You can opt-out at any time.

We do not sell your personal information. We share information with the following third-party vendors who perform services for us (Data Processors):

Primary Storage Location

We store all user data (including Health Data) on secure servers located in Frankfurt, Germany (EU), provided by our partner Supabase. We have specifically selected this region to ensure that your personal data remains within the European Economic Area (EEA) to the maximum extent possible.

Legal Framework for US Transfers

Although our servers are in the EU, Just Jimmy LLC is a company incorporated in the United States. Therefore, we may access your data from the US for technical support, maintenance, or legal purposes. To ensure your data remains protected during such access, we rely on:

• Standard Contractual Clauses (SCCs): We have signed Data Processing Agreements (DPAs) with our vendors that include the European Commission's Standard Contractual Clauses.

We use administrative, technical, and physical security measures to protect your personal information.

• Encryption: Data is encrypted in transit (SSL/TLS) and at rest.
• Access Control: We utilize Row Level Security (RLS) within our database (Supabase) to ensure strict access control, meaning each user can only access their own data.
• Server Security: Our data is stored in ISO 27001 certified data centers.

Depending on your location, you may have the following rights:

1. 1The right to access: Request copies of your personal data.
2. 2The right to rectification: Request that we correct any information you believe is inaccurate.
3. 3The right to erasure ("Right to be forgotten"): Request that we erase your personal data (e.g., delete your account).
4. 4The right to restrict processing: Request that we restrict the processing of your personal data.
5. 5The right to withdraw consent: You can unsubscribe from our emails or withdraw consent for health data processing at any time.

To exercise these rights, please contact us at: hello@jimmycoach.com.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy (e.g., until you delete your account), unless a longer retention period is required by law.

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Revised" date and will be effective as soon as it is accessible.

If you have questions or comments about this policy, you may contact us at:

Just Jimmy LLC, 800 North King Street, Suite 304, Wilmington, DE 19801, US.

Email: legal@jimmycoach.com