Security & privacy
Client health data deserves care.
Here is what we do, in plain words. The legal details will be in the privacy policy.
Data in the EU
Accounts, plans, logs and chats are stored on servers in the EU.
Encryption
Encrypted in transit (TLS). Backups to your Google Drive are encrypted before upload.
No passwords
Login by email and one-time code. Optional second step with an authenticator app. New devices are confirmed.
Export
Export clients, plans, notes, receipts and your rulebook as files, any time.
Deletion
A deletion request is recorded and the data is deleted within 30 days. The person gets a confirmation by email.
AI is labelled
Clients always see when they talk to the AI assistant. It never claims to be a human or the trainer.
Roles and permissions
Team members see only the clients and chats you allow. Every change lands in the audit log.
Manipulated text
Text written by clients is handed to the AI as client content, never as instructions.
Payments by Stripe
Card data never touches PRIME. Stripe handles it.
GDPR: who is responsible for what
You, the trainer
You are the controller for your clients’ data. You decide what is collected and why.
PRIME PT
We process that data on your behalf, under a data processing agreement (AVV) you accept at sign-up.
Processors we use
The list of processors (hosting, payments, AI model, email) is published with the privacy policy before sign-up opens.
What we do not do
- We do not sell data and we show no advertising.
- This website sets no cookies and loads no tracking scripts.
- We never show a trainer’s home address on a map.
- We do not ask for card data on this website.