Privacy

Who is responsible

Tvrbo is operated by the Tvrbo team. For privacy questions, contact privacy@tvrbo.io.

What we store

• Account: email address, encrypted password (or Google identifier).
• Profile: name, unit preference, weekly volume, race goal, weight goal.
• Training data: workouts (planned and logged), weight entries, notes.
• Technical: IP address and user-agent on each request, kept up to 30 days for abuse prevention.

Why we store it

To deliver the service you signed up for: generate your training plan, track your progress, and show your history. Legal basis: performance of contract (GDPR Art. 6 (1)(b)) and our legitimate interest in keeping the service secure (Art. 6 (1)(f)).

Who else processes it

We use the following sub-processors. Each is bound by a data-processing agreement.

• Supabase (database, authentication) — EU region.
• Cloudflare (hosting, CDN, edge runtime).
• Lovable Cloud (managed deployment of the above).

We do not sell your data and do not share it with advertisers.

Your rights

Under GDPR you can access, correct, export, restrict, or delete your data, and you can object to processing. Most of these are self-serve in the app:

• Access & export: Review tab → CSV export (Art. 15 / Art. 20).
• Correct: Profile (Art. 16).
• Delete: Profile → Account → Delete account, which permanently removes all your data within 30 days (Art. 17).

You can also lodge a complaint with your local data-protection authority.

Cookies

We use a single first-party cookie to keep you signed in. We do not use tracking or advertising cookies.

Changes

We will update this page when we change how data is processed and surface the change in-app for material updates.