Privacy Policy

The uNutriCoach Application (UNC) is an educational tool developed under the Erasmus+ project “New Skills and Educational Tools for Coaches regarding Specific Nutrition in Performance Sports”, No. 2024-1-RO01-KA220-VET-000243958. It is intended for the partner sports clubs, their coaches, the athletes registered with the clubs, and the athletes' parents or legal guardians.

The controller of your personal data is Grecu Nutrition & Soft SRL, Piața Română 31, Turda, Cluj, Romania. Grecu Nutrition & Soft SRL manages the data but does not store it on its own equipment: the data is stored with the service providers listed in section 7. For any question or request about your data, contact unutricoach@nutrition-soft.ro.

• Account: email address, password (stored only in encrypted form), role (club, coach, athlete or parent/legal guardian), and the date you accepted the Terms and Conditions.
• Profile: name, country and city; for coaches, the sport; for athletes, also date of birth, sex, height, sport, position/discipline and activity level.
• Athletes' data: body measurements (weight, body composition) and performance tests, the food they log, the training plan assigned by their coach, objectives, and the nutrition recommendations generated by the app.
• Parents and legal guardians: name, email address, relationship to the child (parent or legal guardian), and the record of the consent given or withdrawn (with its date).

• to provide the app's functions: training plans, nutrition recommendations, food and measurement logs, and progress tracking;
• to connect athletes with their coach and club;
• to send the emails the app needs (account verification, password reset, consent requests and notifications to parents or legal guardians);
• to keep the accounts secure.

We do not use your data for advertising, we do not sell it, and we do not use it for automated decisions with legal effects. The recommendations are educational and general; they are not a medical or professional assessment.

• your consent, given when you create the account and accept the Terms and Conditions;
• for athletes under 18, the consent of a parent or legal guardian, given by email before the account can be used;
• the performance of the service you requested by creating an account.

• Consent. An athlete under 18 can use the app only after a parent or legal guardian has given consent. The parent or legal guardian receives an email request, can read what the app does and which data it keeps, and gives or refuses consent. A parent account is then created, from which they see, read-only, what the child sees in the app.
• Withdrawing consent. The parent or legal guardian can withdraw consent at any time. The child then cannot use the account until consent is given again. Withdrawing consent does not delete the account or its data.
• Deleting the child's account. To delete the account and its data, the parent or legal guardian must do so explicitly, from their parent account (Manage consent → Delete the account). The account is hidden immediately and permanently deleted after 30 days. Within those 30 days only the parent or legal guardian can restore it. The athlete can also delete their own account; the parent or legal guardian is then informed by email and can restore it within the same 30 days.
• At 18. When the athlete turns 18, the account becomes theirs: they confirm their email and set a new password, and the parent's or legal guardian's access ends.

• An athlete's data is visible only to the athlete, to the coach and the club they choose to connect with, and, for athletes under 18, to the parent or legal guardian who gave consent.
• Connections are always made by request and acceptance; nobody sees your data without a connection you accepted.
• A club sees its coaches' training plans, and the data of the athletes connected directly to the club.
• If you are a coach or a club, other signed-in users of uNutriCoach can find your profile by name and see your name, sport and city. You can turn this off at any time under Connections → Public profile. Athletes can never be found by name.

The data is stored and processed by the following providers:

• Vercel (hosting the app), with servers in Frankfurt, Germany;
• Neon (database), with servers in Frankfurt, Germany;
• Resend (sending emails).

Some of these providers are companies based in the United States. Where data is transferred outside the European Economic Area, this is done under the safeguards required by the GDPR (such as the EU Standard Contractual Clauses).

• Your data is kept while your account exists.
• When you delete your account (or a parent or legal guardian deletes a child's account), it is hidden immediately and permanently deleted after 30 days; within those 30 days it can be restored.
• A parent's account is deleted immediately on request. This counts as withdrawing consent for each child: the children's accounts and data are kept, but cannot be used until another parent or legal guardian gives consent.
• The record of a parent's or legal guardian's consent is kept as long as the child's account exists, as proof of consent, and is deleted together with it.

You have the right to access your data, to correct it, to delete it, to restrict or object to its processing, to data portability, and to withdraw your consent at any time. You can correct your profile and delete your account directly in the app (Settings). For any other request, contact unutricoach@nutrition-soft.ro. You also have the right to lodge a complaint with the data protection authority in your country (in Romania: ANSPDCP).

Passwords and the secret links sent by email are stored only in encrypted (hashed) form. All connections to the app are encrypted (HTTPS).

The app uses only the cookies it needs to work: one that keeps you signed in, and one that remembers the language you chose. We do not use advertising or tracking cookies. The public nutrition guide counts how often it is opened and downloaded, without any personal data.

If this policy changes, we will show the new version in the app.