elevatd

Privacy Policy

Last updated: August 12, 2026

This Privacy Policy ("Policy") describes how GoodSign Limited, a company incorporated under New Zealand law ("elevatd," "Company," "we," "us," or "our"), collects, uses, processes, and protects personal information when you use elevatd, including our website at https://elevatd.coach and all related services (collectively, the "Service").

We are committed to protecting your privacy and handling your personal information responsibly and in compliance with applicable data protection laws, including the New Zealand Privacy Act 2020, the European Union General Data Protection Regulation (GDPR), and other relevant privacy legislation.

BY USING OUR SERVICE, YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS DESCRIBED IN THIS POLICY.

1. Information We Collect

1.1 Information You Provide Directly

We collect personal information that you voluntarily provide when you:

  • Buy a training plan (your name and email address)
  • Answer the training questionnaire — your goals, running history, and available training days, including any optional injury or health details you choose to share so your coach can account for them
  • Pay for a plan (billing is handled by Stripe; we never see or store your card number)
  • Contact us for support

1.2 Information Collected Automatically

When you use our Service, we automatically collect:

  • Technical information (IP address, browser type, operating system)
  • Session information (login times, session duration)
  • Server logs for security and reliability

1.3 Information from Third Parties

We may receive information about you from:

  • Stripe, our payment processor, for payment and transaction status

2. How We Use Your Information

2.1 Service Provision

  • Generating your personalised training plan from your questionnaire answers, including any injury notes you provide
  • Delivering your plan and follow-up emails
  • Processing your payment
  • Providing customer support

2.2 Service Improvement

  • Analyzing usage patterns to enhance the Service
  • Optimizing performance and reliability

2.3 Communication

  • Sending transactional emails (purchase confirmation, your plan, password resets)
  • Responding to support inquiries
  • Notifying you of important changes to the Service or policies

2.4 Legal and Security

  • Complying with legal obligations
  • Protecting against fraud, abuse, and security threats
  • Enforcing our Terms of Service

3. Legal Basis for Processing

3.1 Contractual Necessity

Processing necessary to perform our contract with you and provide the Service you requested.

3.2 Legitimate Interests

Processing necessary for our legitimate business interests, including service improvement, security and fraud prevention, and administrative purposes.

3.3 Legal Compliance

Processing required to comply with applicable laws, regulations, and legal obligations.

3.4 Consent

Processing based on your explicit consent, which you may withdraw at any time. Any injury or health details you choose to include in your questionnaire answers are shared with us, and with your assigned coach, only for the purpose of building and adjusting your training plan.

4. Information Sharing and Disclosure

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating the Service:

  • Stripe (payment processing and billing)
  • Cloudflare (email delivery, DNS and network services)
  • Anthropic (generating the text of your training plan from your questionnaire answers)
  • Hetzner (cloud hosting and data storage)

We do not sell your personal information, and we do not use advertising or cross-site tracking services.

4.2 Legal Requirements

We may disclose information when required by law or to:

  • Comply with legal process, court orders, or government requests
  • Protect our rights, property, and safety
  • Investigate potential violations of our Terms of Service
  • Prevent fraud, abuse, or illegal activities

4.3 Business Transactions

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to appropriate privacy protections.

5. Data Retention

5.1 Retention Periods

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

5.2 Account Deletion

If you ask us to delete your data, we will delete or anonymize your personal information — including your questionnaire answers and training plan — within a reasonable timeframe, retaining only what is required by law or legitimate business interests.

6. Data Security and Protection

6.1 Security Measures

We implement security measures including:

  • Encryption of data in transit (HTTPS everywhere)
  • Hashed credentials and reset tokens
  • Access controls and authentication
  • Regular backups and incident response procedures

6.2 Security Limitations

While we implement robust security measures, no system is completely secure.

7. International Data Transfers

Our servers are operated by Hetzner. Your information may be transferred to and stored in countries outside your residence. For transfers to countries without adequate data protection, we implement appropriate safeguards.

8. Cookies

We use a small number of first-party cookies strictly for operating the Service: session cookies, a "remember me" login cookie, and security (CSRF) cookies. We do not use advertising or third-party tracking cookies.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your personal information
  • Restriction: Request limitation of processing activities
  • Portability: Request transfer of your data in a machine-readable format
  • Objection: Object to certain types of processing

To exercise these rights, contact us at privacy@elevatd.coach.

10. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

11. California Privacy Rights (CCPA)

California residents have additional rights including the right to know what personal information is collected, the right to delete personal information, the right to opt-out of the sale of personal information, and the right to non-discrimination for exercising privacy rights. We do not sell personal information.

12. European Union Privacy Rights (GDPR)

For EU residents, we comply with the General Data Protection Regulation, including lawful basis for all processing activities and data protection by design and default. EU residents may lodge complaints with their local data protection supervisory authority.

13. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will investigate and contain the incident, notify relevant authorities within 72 hours, inform affected individuals without undue delay, and provide guidance on protective measures.

14. Changes to This Policy

We may update this Policy periodically. We will notify you of material changes through email notification or prominent notice on our website. The "Last updated" date above will be revised accordingly.

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy, please contact us:

GoodSign Limited
Privacy Officer
2 Stuart Street, Ponsonby
Auckland 1011, New Zealand

Email: privacy@elevatd.coach
Data Protection Officer: John Ballinger
Email: privacy@elevatd.coach