Privacy Policy
Last updated: 6 November 2026
Short version: we only collect what we need to build and update your program, we never sell your data, we don't use advertising cookies, and you can ask us to delete everything at any time.
Who is responsible
VelexFit is the controller of your personal data. Contact: support@velexfit.com.
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Name and email | To deliver your program, send check-in reminders and answer you | Performing our contract with you |
| Age, sex, height, weight, daily activity, training experience, schedule, equipment, exercise preferences | To build your program and calculate nutrition targets | Performing our contract with you |
| Pain or injury areas you select, and check-in answers (bodyweight, lifts, pain) | To leave out exercises that could aggravate them and to update your program | Your explicit consent (this is health data). You give it with the checkbox at checkout and can withdraw it at any time |
| Payment details (name, email, transaction ID, amount) | To process your order, refunds and keep accounting records | Contract and legal obligations (tax and accounting) |
| Email for the free template | To send the template | Your request |
| Tips and offers by email | Only if you ticked the box. Unsubscribe anytime | Your consent |
| Technical data (IP address, browser) in server logs | Security and preventing abuse | Our legitimate interest in keeping the service safe |
We don't make decisions with legal or similarly significant effects about you by automated means. Your program is generated automatically from your answers, but it is only a training suggestion.
Who we share it with
We never sell your data. We only use these service providers, who process it on our behalf:
- Cloudflare: hosts the website and database.
- Resend: sends our emails.
- PayPal: processes payments as an independent controller under its own privacy policy.
- Cloudflare Web Analytics: counts visits without cookies and without collecting personal data.
Some of these providers may process data outside Serbia and the EU (for example in the United States). Where that happens, transfers are protected by standard contractual clauses or an equivalent safeguard.
Cookies
We don't use advertising or tracking cookies. Our visitor statistics are cookie-free. PayPal may set its own cookies when you pay.
How long we keep it
- Program and check-in data: for as long as you use your program and up to 24 months after your last activity, then it is deleted.
- Payment and invoice records: as long as tax and accounting law requires.
- Free template and marketing emails: until you unsubscribe or ask us to delete them.
- Backups are overwritten within 30 days.
Your rights
You can ask us to access, correct, delete or export your data, to restrict or object to its use, and to withdraw any consent you gave (this doesn't affect what we did before). Email support@velexfit.com and we'll respond within 30 days. If you withdraw consent for health data, we delete your pain and injury answers. Your program then can't be adjusted for them.
You can also complain to a data protection authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs), or the authority in your own country.
Security
The site uses HTTPS. Your program can only be opened with its private link, our admin area is password-protected, and the database is backed up automatically.
Children
The service is for people aged 16 and over. If you believe a younger child has given us data, contact us and we'll delete it.
Changes
If we change this policy, we'll update the date at the top. Important changes are announced on the site or by email.