How we handle your data

Andmag AB is the data controller for Coach AMA. Company and contact details appear at the bottom of this page.

• Account and identity: name, email address, Discord ID, username, language, discipline and member number.
• Training and health: data you connect from intervals.icu, such as activities, power, heart rate, HRV, sleep, resting heart rate, load, recovery and readiness.
• Coaching and messages: what you write to the coach, including illness or injury details when you choose to share them, plus plans, recommendations and coaching history.
• Application and waitlist: contact details, Discord handle, application source, status and invitation history.
• Payment and membership: Stripe customer, price and subscription IDs, tier, status, trial, billing period, cancellation status, and payment and invoice information. We do not store full card details.
• Support and withdrawal: email, messages, attachments, contract reference, request and timestamp.
• Technical data: necessary session, locale, invite and signup cookies, plus limited security and error logs.

We receive data directly from you, from your Discord login and chat, from intervals.icu when you connect it, from Stripe when you start or manage membership, and from your use of the portal.

We do not sell personal data or use it for third-party advertising.

• Contract and steps before contract (GDPR art. 6(1)(b)): account, application, service delivery, support, membership and payment.
• Consent (art. 6(1)(a)) and explicit consent (art. 9(2)(a)): training and health data for personal coaching. You may withdraw consent at any time.
• Legal obligation (art. 6(1)(c)): accounting, tax, consumer law and legal claims.
• Legitimate interests (art. 6(1)(f)): security, abuse prevention, debugging and necessary support follow-up. We balance this against your rights.

Anthropic and OpenAI may process relevant instructions, messages and training context to generate coaching. Coach AMA is an AI system and a human owner oversees operations. The service does not make solely automated decisions that produce legal or similarly significant effects for you.

Some processing may take place outside the EU/EEA. Where it does, the provider and we use applicable safeguards such as an adequacy decision, the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

• Discord — login and the private chat channel where coaching takes place.
• intervals.icu — source of training and health data you choose to connect.
• Neon — database.
• Vercel — portal hosting and server functions.
• Stripe — Checkout, payment, invoicing and customer portal. Depending on the processing, Stripe may act both as our processor and as an independent controller.
• Resend — outbound and inbound email for support, invitations and withdrawal confirmations.
• Anthropic and OpenAI — AI models used to generate coaching.

When you choose “Delete my data”, Coach AMA asks Stripe to delete the Customer record and its payment methods, which also cancels active subscriptions, before the rest of the erasure starts. Stripe may still retain transaction, invoice or other data required for accounting, fraud prevention or legal obligations that Stripe processes as an independent controller.

Erasure in Coach AMA does not automatically erase data that Discord or intervals.icu process as independent controllers. You may need to contact them separately.

• Active account and coaching: while you use the service. When you choose “Delete my data”, portal and coaching-system account, message, training and health data is erased the same day, except data we must or may retain by law.
• Payment and accounting: for the period required by Swedish accounting, tax and consumer law, normally through the seventh year after the relevant calendar year.
• Support and withdrawal: while needed to handle the matter, normally no more than 12 months after closure, or longer where required for a legal claim.
• Waitlist: until a place is accepted or declined, you withdraw the request, or the data is no longer needed for the purpose.
• Security and error logs: for the shortest period necessary for security and debugging.

The portal uses only necessary cookies for login, locale, invitation and paid signup. We currently use no advertising cookies or cookies for behavioural marketing.

We use access controls, private coaching channels, encrypted transfer, provider separation and limited storage of secrets. No service can guarantee absolute security; contact us if you suspect an incident.

You may request access, rectification, erasure, restriction and data portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting prior lawful processing. We may need to verify your identity.

Contact support@coach-ama.com. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

We update this policy when the service or processing changes. Material changes are published here and, where needed, communicated directly.

Swedish Authority for Privacy Protection (IMY)