Privacy policy

Last updated: 2026-11-14

Draft text: to be legally reviewed before launch. Details marked [PLACEHOLDER] follow after company registration.

Who we are

[PLACEHOLDER] Baddie Balance B.V. i.o., [PLACEHOLDER] Straatnaam 1, 1000 AA Amsterdam, [PLACEHOLDER] KvK 00000000. Contact: hello@baddiebalance.nl. We are the controller for the personal data you share via baddiebalance.nl and our apps.

What we collect and why

Orders (name, address, email, optional phone, order, payment status): to deliver your order (contract, Art. 6(1)(b) GDPR) and for our tax retention duty (7 years, Art. 6(1)(c)).
Account and plan (email, quiz answers about goals, experience, training days, diet, allergies): to build your personal plan (contract).
Health data (optional: age, height, weight, injuries, pregnancy, relationship with food, cycle preference, check-ins, progress): only with your explicit consent (Art. 9(2)(a) GDPR). Without consent, we build your plan without this data. Withdraw consent anytime via My account → Privacy.
Progress photos stay on your own device unless you choose to share them with your coach.
Newsletter (email): with your consent, via double opt-in. Unsubscribe in every email.
WhatsApp coaching: your phone number and messages, to deliver coaching. Automated WhatsApp notifications never contain health details.

AI personalisation

Your plan is built from our expert templates. Optionally an AI model (Anthropic) writes a short personal intro. We only send a pseudonymised summary (goal, training days, setting), never your name, email, age, height or weight. No automated decision-making with legal effects takes place.

Processors

Vercel (hosting, EU region Frankfurt), Neon (database, EU), Mollie (payments, NL), Resend (email), Meta (WhatsApp Business), Anthropic (AI copy, pseudonymised), OpenFreeMap/OpenStreetMap (maps, no personal data). We have data processing agreements with all processors. Transfers outside the EEA rely on the EU-US Data Privacy Framework or standard contractual clauses.

Retention

Quiz drafts without an account: max. 30 days. Account, plan and tracker: as long as your account exists. Check-ins: up to 24 months after your subscription ends. Orders and invoices: 7 years (tax law).

Your rights

You can access, rectify, erase, restrict, port and object. Download your data or delete your account directly via My account → Privacy. Questions? Email hello@baddiebalance.nl. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

Encrypted connections (HTTPS), httpOnly session cookies, health data only accessible to you and (with coaching) your coach, role-based access for staff.