Privacy policy

Last updated 1 August 2026

Draft — not yet reviewed. This wording is a structural first pass written alongside the site build. It must be reviewed by a qualified adviser before launch: Soigneur processes special-category health data, which makes a template policy a genuine liability rather than a formality.

This policy explains what Soigneur collects, why, who else sees it, and what you can do about it. It covers the Soigneur website and application.

Who is responsible

The data controller is the entity named on our imprint page. For any question about this policy, or to exercise the rights below, email hello@soigneurapp.com.

What we collect

Account data

Name and email address
Password, stored only as a hash
Your role (athlete, coach) and the sports you selected
Subscription status and billing history

Health and training data

This is the category that matters most, and it is treated as special-category data under Article 9 of the GDPR:

Workouts you log or import: sport, duration, distance, date
Heart rate, power and cadence where your device or a connected service provides it
GPS routes, which reveal where and when you train
Training plans assigned to you, and whether you completed each session
Race fuel plans, including anything you record about nutrition and how a race went

We process this on the basis of your explicit consent, given when you create an account and again when you connect a third-party service. You can withdraw it by disconnecting the service or deleting your account.

Technical data

A session cookie, which is strictly necessary to keep you logged in
Server logs including IP address, for security and troubleshooting

Who else sees it

Your coach

If you invite a coach and grant them access, they can see your training plan, your logged workouts, your progress and your fuel plans for the sports you granted. You can revoke that access at any time from your settings, and it takes effect everywhere immediately.

Sub-processors

We use the following third parties to run the service:

Microsoft Azure — hosting, database and file storage, in the EU
Stripe — payment processing. We never see or store your card details.
Strava and Wahoo — only if you choose to connect them, and only to import your activities into Soigneur
Our email provider — transactional email such as invites, password resets and billing notices
Azure AI Foundry — powers the AI training assistant on the Athlete Pro plan. Your question and the relevant part of your training data are sent to generate an answer.

We do not sell your data, and we do not use it to train third-party models.

How long we keep it

Account and training data: for as long as your account exists
After account deletion: removed, except where we must keep records (for example invoices, which tax law requires us to retain)
Server logs: a short rolling window

Your rights

Under the GDPR you can ask us to:

Give you a copy of your data
Correct anything that is wrong
Delete your account and the data in it
Restrict or object to certain processing
Withdraw consent, without affecting what happened before you withdrew it

Email hello@soigneurapp.com and we will respond within one month. You also have the right to complain to your national data protection authority.

Children

Soigneur is not intended for children. If you coach athletes under 18, contact us before creating accounts for them so we can confirm what consent is required in your country.

Changes

If this policy changes materially, we will tell registered users by email rather than quietly editing the page.