Privacy Policy

Last updated: 12 October 2026

This Privacy Policy explains how personal data is processed when you use ai-fitnessroutines.com, purchase a digital product, contact us, or join the Unbound Coach waitlist.

1. Controller

Nico Steiert
Friedenheimer Brücke 19
80639 München
Germany

Email: naiathletix@gmail.com

2. Website hosting and server logs

The website is hosted by GoDaddy. When you visit the website, technical data such as your IP address, date and time of access, requested page, browser, operating system, and referring page may be processed in server logs. This processing is necessary to deliver and secure the website and is based on our legitimate interests under Article 6(1)(f) GDPR.

3. Contact form and email enquiries

If you contact us, we process the information you provide, such as your name, email address, subject, and message, to answer your enquiry. The legal basis is Article 6(1)(b) GDPR when your enquiry concerns a contract or pre-contractual steps, and otherwise Article 6(1)(f) GDPR. The contact form is provided through WPForms. Form messages are delivered by email; WPForms Lite does not store entries in the WordPress dashboard.

4. Unbound Coach waitlist

If you join the waitlist, we process your email address to send launch news and early-access invitations for Unbound Coach. The legal basis is your consent under Article 6(1)(a) GDPR. Brevo is used to manage the waitlist and send emails. You may withdraw your consent at any time, for example through an unsubscribe link or by contacting us. Withdrawal does not affect processing carried out before withdrawal.

5. Orders, digital products, and payments

When you buy the 12-Week Challenge or another digital product, we process the information needed to handle your order, provide access to the product, communicate with you, and meet legal record-keeping duties. The legal bases are Article 6(1)(b) GDPR and Article 6(1)(c) GDPR. SureCart supports the store and checkout. Payments are processed by the payment provider shown during checkout, such as Stripe. Payment card details are handled by the payment provider rather than stored by us.

6. Cookies and similar technologies

The website currently uses only cookies or similar storage that are necessary for core website, security, checkout, and account functions. These are used under Section 25(2) TDDDG. Google Analytics is not currently active on the website. If optional analytics or marketing tools are introduced later, this policy and the consent process will be updated before those tools are used.

7. Service providers and recipients

Personal data may be shared with service providers only where needed to operate the website and deliver the requested service. These providers may include GoDaddy for hosting, Brevo for waitlist emails, SureCart for store functions, Stripe or another provider displayed at checkout for payment processing, and email or technical service providers. Data may also be disclosed where required by law.

8. International transfers

Some service providers may process data outside the European Economic Area. Where required, transfers are protected by an adequacy decision, Standard Contractual Clauses, or another lawful safeguard under the GDPR.

9. Retention

Personal data is kept only for as long as needed for the purpose for which it was collected and for any applicable legal retention period. Waitlist data is kept until you withdraw consent or the waitlist purpose ends, unless another legal basis requires longer retention.

10. Your rights

Subject to the legal conditions, you may request access, correction, erasure, restriction of processing, and data portability. You may object to processing based on legitimate interests and withdraw consent at any time. You also have the right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact naiathletix@gmail.com.

11. Security

Appropriate technical and organisational measures are used to protect personal data against loss, misuse, and unauthorised access.

12. Changes to this policy

This Privacy Policy may be updated when the website, services, or legal requirements change. The current version will be posted on this page.