Coach AMA
·

Privacy policy

How we handle your data

Last updated 2026-09-11 · v5

This policy describes how Andmag AB processes personal data when you apply for, use, pay for or contact Coach AMA.

1. Data controller

Andmag AB is the data controller for Coach AMA. Company and contact details appear at the bottom of this page.

2. Data we process

  • Account and identity: name, email address, Discord ID, username, language, discipline and member number.
  • Training and health: data you connect from intervals.icu, such as activities, power, heart rate, HRV, sleep, resting heart rate, load, recovery and readiness.
  • Coaching and messages: what you write to the coach, including illness or injury details when you choose to share them, plus plans, recommendations and coaching history.
  • Application and waitlist: contact details, Discord handle, application source, status and invitation history.
  • Payment and membership: Stripe customer, price and subscription IDs, tier, status, trial, billing period, cancellation status, and payment and invoice information. We do not store full card details.
  • Support and withdrawal: email, messages, attachments, contract reference, request and timestamp.
  • Technical data: necessary session, locale, invite and signup cookies, plus limited security and error logs.
  • Visit statistics: cookieless, aggregated measurement of page views and page performance, such as the page visited, the referring page, approximate country, device type and browser. We build no profile and do not link the statistics to your account.

3. Sources

We receive data directly from you, from your Discord login and chat, from intervals.icu when you connect it, from Stripe when you start or manage membership, and from your use of the portal.

4. Purposes and legal bases

We do not sell personal data. With your separate, optional consent (Art. 6(1)(a)), we use limited information to measure and improve our ads on Meta. Declining does not affect your coaching.

  • Contract and steps before contract (GDPR art. 6(1)(b)): account, application, service delivery, support, membership and payment.
  • Consent (art. 6(1)(a)) and explicit consent (art. 9(2)(a)): training and health data for personal coaching. You may withdraw consent at any time.
  • Legal obligation (art. 6(1)(c)): accounting, tax, consumer law and legal claims.
  • Legitimate interests (art. 6(1)(f)): security, abuse prevention, debugging, aggregated visit statistics to improve the portal, and necessary support follow-up. We balance this against your rights.

5. AI processing

Anthropic and OpenAI may process relevant instructions, messages and training context to generate coaching. Coach AMA is an AI system and a human owner oversees operations. The service does not make solely automated decisions that produce legal or similarly significant effects for you.

6. Recipients and providers

Some processing may take place outside the EU/EEA. Where it does, the provider and we use applicable safeguards such as an adequacy decision, the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

  • Discord — login and the private chat channel where coaching takes place.
  • intervals.icu — source of training and health data you choose to connect.
  • Neon — database.
  • Vercel — portal hosting and server functions, plus cookieless visit and performance statistics.
  • Meta Platforms Ireland — optional ad measurement through the Meta pixel and Conversions API. After consent we share visits to selected public information pages, registration, trial start and first payment, with timestamps, random event IDs, ad click IDs and browser type. Purchases also include amount and currency. Meta also receives your IP address through pixel requests and may link this information to your Facebook or Instagram account. We never send chats, training or health data, names, email, Discord IDs or content from private portal pages.
  • Stripe — Checkout, payment, invoicing and customer portal. Depending on the processing, Stripe may act both as our processor and as an independent controller.
  • Resend — outbound and inbound email for support, invitations and withdrawal confirmations.
  • Anthropic and OpenAI — AI models used to generate coaching.

7. Retention and deletion

When you choose “Delete my data”, Coach AMA asks Stripe to delete the Customer record and its payment methods, which also cancels active subscriptions, before the rest of the erasure starts. Stripe may still retain transaction, invoice or other data required for accounting, fraud prevention or legal obligations that Stripe processes as an independent controller.

Erasure in Coach AMA does not automatically erase data that Discord or intervals.icu process as independent controllers. You may need to contact them separately.

  • Active account and coaching: while you use the service. When you choose “Delete my data”, portal and coaching-system account, message, training and health data is erased the same day, except data we must or may retain by law.
  • Payment and accounting: for the period required by Swedish accounting, tax and consumer law, normally through the seventh year after the relevant calendar year.
  • Support and withdrawal: while needed to handle the matter, normally no more than 12 months after closure, or longer where required for a legal claim.
  • Waitlist: until a place is accepted or declined, you withdraw the request, or the data is no longer needed for the purpose.
  • Security and error logs: for the shortest period necessary for security and debugging.
  • Ad measurement: we delete our consent, matching and conversion records on withdrawal or account erasure, or when consent expires after 90 days (at the next scheduled cleanup). Meta handles information already received under its privacy policy. Contact us for help exercising your rights.
  • Visit statistics: processed by Vercel as our processor for as long as it is needed to provide the service. Our plan's reporting window governs how far back we can view the statistics, not how long Vercel stores them — Vercel may keep them longer. We can request deletion at any time, and the data is deleted within a reasonable time after our agreement with Vercel ends, except where law requires continued retention. We do not copy the statistics into our own database.

8. Cookies

The portal uses necessary cookies for login, locale, invitation and paid signup. ama_marketing remembers your choice about optional Meta measurement for 90 days. The pixel contacts Meta only after you allow measurement; Meta may then use its own advertising cookies. Declining is as easy as accepting, and Cookie settings on every page lets you withdraw. Withdrawal stops future measurement and deletes our matching data and queued events. Information already sent to Meta is not automatically deleted there. See Meta’s privacy and cookie policies at facebook.com/privacy/policy and facebook.com/privacy/policies/cookies. Our cookieless Vercel statistics are separate.

9. Security

We use access controls, private coaching channels, encrypted transfer, provider separation and limited storage of secrets. No service can guarantee absolute security; contact us if you suspect an incident.

10. Your rights

You may request access, rectification, erasure, restriction and data portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting prior lawful processing. We may need to verify your identity.

Contact support@coach-ama.com. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

11. Changes

We update this policy when the service or processing changes. Material changes are published here and, where needed, communicated directly.

Contact

Andmag AB
c/o Anders Andersen
Vattengränd 31
192 74 Sollentuna
Sverige
Org.nr 556983-8401
VAT SE556983840101
support@coach-ama.com

Swedish Authority for Privacy Protection (IMY)