Privacy Policy

1. Data We Collect

1.1 Personal Information

We collect only the access code provided by your coach to authenticate your sessions.

1.2 Conversation Data

Your conversations are encrypted end-to-end using AES-256 encryption and stored locally on your device. We cannot access or read your conversations.

1.3 Technical Data

We collect minimal technical information (IP address, browser type) for security and rate limiting purposes only.

2. How We Use Your Data

• Authentication: To verify your identity and provide access to your personal coaching space
• Security: To protect against unauthorized access and abuse
• Service Improvement: To improve our platform and user experience

3. End-to-End Encryption

All your conversations are encrypted using AES-256 encryption before being stored. The encryption key is derived from your access code, which means:

• Only you can decrypt and read your conversations
• Your coach cannot read your messages
• We (Coaching People) cannot read your messages
• No third party can access your data

4. Data Storage

Your encrypted conversations are stored locally in your browser using localStorage. No conversation data is sent to our servers or stored in any cloud database.

5. Third-Party Services

5.1 Anthropic Claude API

We use Anthropic's Claude AI to power the coaching assistant. Your messages are sent to Anthropic's API for processing but are not stored by Anthropic. Please refer to Anthropic's privacy policy for more information.

5.2 Vercel Hosting

Our application is hosted on Vercel. Standard web server logs (IP addresses, access times) may be collected by Vercel for security and operational purposes.

5.3 Supabase Database

User account information (encrypted access codes, usage quotas) is stored in Supabase, a GDPR-compliant database hosted in the EU. Conversation content remains locally stored and encrypted on your device.

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data
• Delete your conversations at any time (from your browser settings)
• Request account deletion by contacting your coach
• Export your conversation history
• Data portability - receive your data in a structured format
• Lodge a complaint with a supervisory authority (CNIL in France)

6b. Legal Basis (GDPR)

We process your data based on:

• Contractual necessity - to provide coaching services
• Legitimate interest - for security and fraud prevention

Data Controller: Coaching People, France

7. Data Retention

Your encrypted conversations remain in your browser's local storage until you manually clear them or clear your browser data. We do not have access to or control over this data.

8. Security Measures

• End-to-end encryption (AES-256)
• HTTPS/TLS for all connections
• Rate limiting to prevent abuse
• Regular security audits
• No server-side storage of conversations

9. Contact

For any privacy-related questions or concerns, please contact us at: contact@coaching-people.fr

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this policy.