Privacy policy
Last updated: October 19, 2026
In brief
Your coaching data is used for one thing only: coaching you. It is hosted in Europe, never sold and never used to train third-party AIs. You can retrieve it or delete it whenever you want. On the website, a cookie-free audience measurement counts visits, and analytics cookies are set only if you accept them (see “Cookies” and “Cookie-free audience measurement”).
Data controller
QS Software, 47 rue Vivienne, 75002 Paris, reachable at contact@elyocoach.com.
Data collected
- Account : first name, email address (the one from your Apple Account if you sign in with Apple, which you can hide, or the one you enter), time zone.
- Conversations : the messages you exchange with ELYO, including the photos you send it (meals, screenshots).
- Sports data : activities and measurements from the services you connect (for example Strava), read-only, with your permission, which you can withdraw at any time.
- Data you provide : goals, injuries, preferences and information you choose to share to personalize your coaching.
- Payment : handled by our payment provider; we do not store your card number.
Purposes and legal bases
Your data is processed to provide the coaching service (performance of the contract), ensure the security and proper functioning of the service (legitimate interest), and, where applicable, for processing subject to your explicit consent, which you can withdraw at any time.
On the site, analytics with cookies (Google Analytics and PostHog) is based on your consent, and cookieless audience measurement (Vercel) on our legitimate interest.
Hosting and subprocessors
Service data is hosted on servers located in Europe. Some technical providers are involved in delivering the service: [TO BE COMPLETED: list of subprocessors, including hosting provider, AI model providers, payment provider], Vercel Inc. (website hosting and audience measurement, United States) and PostHog Inc. (website analytics with your consent; a US company, data hosted in Germany, in Frankfurt; any access from the United States, for example for support, is covered by the European Commission's standard contractual clauses), each bound by data protection commitments that comply with the GDPR.
Google Analytics, provided by Google, measures the pages visited, traffic sources, device used and interactions with the site with your consent. Google may process this data outside the European Union. Read Google's privacy policy. Google.
Your data is never resold or used to train third-party AI.
Country and pricing region
On the Pricing page, the country estimated by our hosting provider from your IP address is used to suggest a region. We do not request your GPS location. You can change the region; your choice is kept in your browser’s session storage for this tab. This estimate does not verify your billing country.
Cookie-free audience measurement
Separately from cookies, a cookie-free audience measurement counts visits. It is designed to fall under the consent exemption provided by the CNIL (the French data protection authority): anonymous statistics, to improve the site, with no tracking from one site to another. It therefore does not ask for your consent, but you can object to it.
To see which pages are read and improve the site, we use Vercel Web Analytics and Vercel Speed Insights, the tools of our host (Vercel Inc.). They place no cookie or identifier on your device. On each page, they send the page address, the site you came from, your country and approximate city (derived from your IP address), your device type, your operating system, your browser, your connection type, the loading speed and a few actions (click on the free review button, the full coaching button or the App Store link, FAQ question opened, article read to the end). To count unique visitors, Vercel computes a temporary code from your request, renewed every day and deleted after 24 hours. We only see totals. These tools cannot recognize you from one day to the next or from one site to another.
This measurement is based on our legitimate interest in understanding how the site is used. Vercel is a US company: this data may be processed in the United States. This transfer is covered by Vercel's certification under the EU-US Data Privacy Framework and by the European Commission's standard contractual clauses. The statistics remain viewable for no more than 12 months. You can object to this measurement at any time on this device:
Your choice is stored in your browser, only so it can be respected. You need to make it again on each device and each browser, and after clearing your browsing data. If your browser sends the Global Privacy Control signal, measurement is turned off automatically.
If you are reading from the United States: we do not sell or share your personal data within the meaning of California law (CCPA/CPRA).
Get notified at launch
If you leave your email to be notified when the app launches, it is used only to write to you on launch day. This is based on your consent. We record your email, your browser language, the page where you left it and the date, in a Google spreadsheet (Google LLC, a US company certified under the EU-US Data Privacy Framework). Your email is deleted no later than 3 months after the launch email is sent, unless you agree to receive other news. To remove it sooner, write to contact@elyocoach.com.
Retention periods
Website visit statistics remain viewable for no more than 12 months in our dashboard; the temporary visit code is deleted after 24 hours. If you accept analytics cookies, they last no more than 13 months after your last visit and your choice is kept for 6 months; at PostHog, analytics data is kept for 12 months and visit recordings for one month, then deleted. Service data is kept for as long as you use the service, then [TO BE COMPLETED: specific periods by category]. When your account is deleted, your data is erased or anonymized within [TO BE COMPLETED].
Your rights
Under the GDPR, you have the right to access, rectify, erase, port, restrict and object to the processing of your data. To exercise these rights, write to contact@elyocoach.com. You can also file a complaint with the CNIL (cnil.fr).
AI transparency
ELYO is a coach based on artificial intelligence: you are talking with an automated system, not a human. It reminds you of this if the question comes up.