Your data, explained

Who is responsible

Alexander Kapp, Rehgasse 21, Innsbruck, Austria, is responsible for Foil and the personal data it processes. Contact support@foil.fit about privacy, access or deletion.

When you visit this website

The site is hosted on Vercel. Hosting services process technical request information, including IP addresses, to deliver and protect the website. Foil uses temporary connection information to limit repeated signup requests. This processing supports the legitimate interest of operating a reliable, secure site.

Foil does not include advertising pixels or session recording on these pages. A saved theme preference is kept in your browser. Signing in uses authentication cookies; browsing templates or changing the custom preview does not connect your training data.

When you join the beta list

We save your email address, signup time, the consent wording you saw and the referring page when supplied by your browser. If you choose to answer the follow-up question, we also save your sport and goal.

We use this information to send beta invitations and understand what prospective athletes want. The legal basis is your consent. These fields are optional except for the email address needed to contact you. Joining the list does not create a coaching account.

You can withdraw consent and ask us to remove your signup at any time by emailing support@foil.fit. Withdrawal does not affect the lawfulness of processing before withdrawal. We keep your signup while we are using the list for beta invitations, unless you ask us to delete it sooner. Deletion is handled manually.

Health data

Your sleep, heart rate variability, resting heart rate, heart rate during activity, and how you tell the coach you are feeling are health data: special-category data under Article 9 of the GDPR. Foil processes them only on your explicit consent, which you give as its own separate tick at sign-up. We record the wording you were shown and the date you agreed to it.

You can withdraw that consent at any time. Withdrawing it means Foil can no longer coach you, because there is nothing left for the coach to reason about, so the way to withdraw it is to delete your account from Settings. Withdrawal does not affect processing that already happened while the consent stood.

What the coaching app stores

Your account details: email address, display name and timezone. Your connected activities and their measurements. Your daily readiness readings. The conversation, including voice note audio, its transcript, and the coach’s spoken replies. Your check-ins and the rules you set for the coach yourself. The plan and its sessions. The coach’s decisions and the evidence each one cited. And operational records: which jobs ran, which syncs succeeded, and what each model call cost.

Why, and on what basis

Performing the coaching service for you — storing your data, adapting the plan, replying in the conversation — is processing necessary to perform our contract with you. Processing your health data rests on your explicit consent under Article 9(2)(a). Keeping the service secure and knowing what it costs to run rests on our legitimate interest in operating it responsibly.

Where information goes

Supabase provides Foil’s database and account authentication, and the clock that schedules the background work. Vercel hosts the website and runs the server functions that work is dispatched to. Anthropic’s Claude models generate coaching replies, weekly planning and background classification from the context Foil sends them. Deepgram transcribes your voice notes. ElevenLabs generates the coach’s spoken replies. Resend delivers sign-in codes and invitation emails. intervals.icu and Whoop are your own connected sources, read with a grant you give at those providers. Your beta signup is not sent to the coaching model.

Foil does not sell your information or use it to train models. Anthropic describes its API training policy in its commercial customer privacy information. Provider retention and international processing are governed by their applicable service terms and data processing arrangements; this notice does not claim that all processing stays in Austria or the EU.

Provider information: Supabase, Vercel, Anthropic, Deepgram, ElevenLabs and Resend.

Getting a copy, and deleting it

Coaching accounts retain training history and conversations so the coach can refer to earlier sessions and decisions. Two things are self-serve from Settings. A download produces a file with every row Foil holds about your account. A delete schedules removal: it takes effect after seven days, and until then one button undoes it.

Deletion reaches everything Foil holds about you, including the conversation, the synced training data and the record of what your account cost to run. What remains is a dated note that an account was deleted, when, at whose request and how many rows went, with nothing in it a person could be recognised from. It does not reach the grants at intervals.icu and Whoop, which belong to you and are revoked at those providers, and provider logs and backups have their own retention periods. In the download, the tokens Foil holds for those sources are redacted, because they are credentials rather than training data.

Your choices and rights

Beyond the download and the delete, you can request access to your information, correction, restriction of processing or a portable copy where applicable, and you can object to processing based on legitimate interests. Email support@foil.fit; we may need to verify that the request concerns your information.

You may complain to the Austrian Data Protection Authority. The authority explains these rights and how to exercise them.