FuelPro Privacy Policy

Effective date: 14 July 2026 Version: 2026-07-14

This Privacy Policy explains how FuelPro collects, uses, stores, shares and protects personal data when you use the FuelPro website, authenticated application, controlled beta programme, integrations and support channels.

1. Controller

FuelPro is currently operated by an individual. The controller responsible for the purposes and means of processing is:

Pablo Benko Cerje Samoborsko 1/8 10430 Samobor Republic of Croatia support@fuelpronutrition.com

FuelPro has not appointed a data protection officer. Privacy questions and rights requests can be sent to support@fuelpronutrition.com.

2. Scope

This Policy applies to FuelPro's public website, application, controlled beta, onboarding, support, optional integrations, analytics and AI-supported features.

It does not govern third-party websites or services that you visit independently, even if FuelPro links to them.

3. Data FuelPro processes

Depending on the features you use, FuelPro may process the following categories.

3.1 Account and identity data

email address;
authentication identifiers and session information;
display name or full name;
athlete or coach role;
account status, creation and update timestamps;
onboarding state, age confirmation and legal acknowledgements;
consent type, version, status and timestamp;
optional Google sign-in information where that method is enabled and selected.

FuelPro does not need your password in readable form. Authentication is handled through Supabase and its authentication systems.

3.2 Athlete profile and body information

age;
sex;
body weight and height;
optional body-fat percentage;
baseline daily activity level;
sport, training context and athlete preferences.

Body, nutrition and performance information may reveal information about health or physiology and can require additional protection under data-protection law.

3.3 Training and performance information

planned and completed training sessions;
sport or activity type;
dates, times, duration, distance, intensity and actual training zone;
training stress, energy expenditure and related estimates;
planned-versus-completed status;
race, taper and carbohydrate-loading context;
training notes and source information;
derived workload, readiness, recovery and fuel-availability indicators.

3.4 Nutrition and meal information

meal descriptions, ingredient names, notes and free text;
voice recordings submitted for transcription and resulting transcripts;
estimated or corrected calories, carbohydrate, protein and fat;
meal timing and portion information;
hydration, sodium or electrolyte information where entered or calculated;
daily nutrition targets and totals;
pre-, during- and post-session fuelling information;
intra-session carbohydrate intake and fuelling rate;
estimated fuel availability, recovery guidance, underfuelling and overfuelling indicators;
meal estimation results, corrections, error metrics, model identifier and prompt version used for quality evaluation.

3.5 Gastrointestinal and tolerance information

gastrointestinal severity and outcome;
gut-training profile;
carbohydrate-per-hour targets;
tolerance and progression state.

This information can be health-related and is processed only with the applicable explicit consent.

3.6 Location, weather and device context

If you choose to enable weather-location processing, FuelPro may process:

browser-provided latitude and longitude;
timezone;
a location label and source;
location update time;
local forecast and environmental conditions obtained through Open-Meteo.

FuelPro does not intentionally use this feature to store movement histories or GPS routes. Location is optional and can be disabled.

3.7 Strava information

If you connect Strava, FuelPro may process:

Strava athlete identifier and granted scopes;
encrypted access and refresh tokens;
completed-activity summaries;
activity type, time, duration and distance;
summary speed, pace, heart-rate and power fields where available;
imported activity identifiers and matching status.

FuelPro does not intentionally collect Strava GPS routes, maps, polylines, streams, segments, social data or detailed coordinate traces, and FuelPro does not write activities to Strava.

3.8 Coach-athlete relationship data

If you establish an active coach-athlete relationship, FuelPro may process the link status and make specified profile, training and nutrition information available to the linked coach. Gut-training tables are designed not to be shared with coaches through that access layer.

3.9 Analytics and technical data

Where you consent to optional analytics, FuelPro may process:

internal account identifier;
account role;
page views, feature events and broad interaction events;
browser, device and technical information;
masked session replay where enabled;
error and performance information.

FuelPro's analytics sanitisation is designed to exclude meal text, notes, macros, calories, detailed training data, email, name, Strava identifiers, invite tokens and other sensitive event properties. PostHog still uses an internal account identifier to associate authenticated events. Analytics data and session recordings are retained for no longer than 30 days.

3.10 Support and feedback data

FuelPro may process messages sent to support, bug reports, screenshots, interview notes, beta feedback and Canny feedback information you choose to provide.

Do not include unnecessary medical or highly sensitive information in support messages.

4. Sources of data

FuelPro obtains data:

directly from you;
from your device and browser when you enable a feature;
from Strava when you connect it;
from a linked coach or athlete relationship where authorised;
from service providers that support authentication, hosting, weather, analytics, AI or support;
by deriving estimates and indicators from the information available in FuelPro.

FuelPro distinguishes user-entered, imported, derived and AI-generated information where reasonably possible.

5. Purposes and legal bases

FuelPro uses personal data for the purposes below.

Purpose	Main data	GDPR legal basis
Create and manage the account, authenticate users and provide the requested beta service	Account, profile, session and service data	Performance of a contract or steps requested before entering a contract; legitimate interests in operating a secure beta service
Personalise fuelling, hydration, recovery and meal timing	Body, training, nutrition, GI and derived data	Explicit consent for health-related or special-category data; consent and performance of the requested service for other data
Process optional Strava activities	Strava account, tokens and activity summaries	Consent and your request to enable the integration
Use optional location for weather context	Latitude, longitude, timezone and forecast data	Consent
Provide AI meal estimation, voice transcription or AI Dietitian features	Meal text, audio, nutrition context and generated output	Consent; explicit consent where health-related information is involved
Provide coach-athlete sharing	Link status and selected athlete information	Your request to enable the relationship; explicit consent where required for health-related data
Provide support and manage the beta	Contact, account, diagnostics and feedback	Performance of the service and legitimate interests in support and product operation
Protect accounts, investigate misuse and maintain security	Technical logs, identifiers and security events	Legitimate interests and compliance with legal obligations
Optional product analytics and masked session replay	Limited event and interaction data	Consent; storage or access on the device is not used for optional analytics before consent
Comply with law, respond to authorities and protect legal rights	Relevant account and transaction records	Legal obligation and legitimate interests in establishing, exercising or defending legal claims

Where FuelPro relies on legitimate interests, it considers the necessity of the processing, the impact on users and reasonable safeguards. You may object where the GDPR gives you that right.

6. Health-related and special-category data

FuelPro's personalisation can involve body measurements, nutrition, gastrointestinal outcomes, recovery and other information that may reveal health or physiological information.

FuelPro requests explicit consent for health and nutrition personalisation. Optional AI, Strava and weather features have separate consents or permissions.

You may withdraw consent at any time. Withdrawal does not make earlier lawful processing unlawful. It stops future processing for that purpose, but FuelPro may retain limited records where required to demonstrate the consent, comply with law or resolve disputes.

If you withdraw the consent required for core health and nutrition personalisation, FuelPro may no longer be able to provide personalised guidance and may ask you to delete or pause the account.

7. AI processing

FuelPro uses OpenAI-supported services for limited, consent-gated functions, including:

meal text estimation and parsing;
voice transcription of an uploaded meal recording;
AI-supported meal suggestions.

Information sent can include the meal text or audio you submit, meal context, relevant planned or recommended meal context, meal-memory or calibration context, and a limited nutrition or session summary needed for the feature.

FuelPro's intended boundary is that imported Strava activity data is not included in AI prompts. FuelPro does not intentionally send your email address or name as part of the AI prompt.

OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring unless different account controls apply or longer retention is legally required. FuelPro does not currently have confirmed Zero Data Retention status and therefore does not promise zero provider retention.

FuelPro stores certain meal inputs, estimates and corrections to evaluate accuracy and improve the product. FuelPro does not currently use identifiable beta-user information to train or fine-tune AI models. Any future use of identifiable athlete data for model training or fine-tuning would require a separate lawful basis and, where required, separate explicit consent.

AI outputs are advisory and can be corrected, ignored or deleted. FuelPro does not use AI to make decisions that produce legal or similarly significant effects about you.

8. Analytics, cookies and local storage

FuelPro uses necessary browser storage and authentication technology to keep you signed in, preserve onboarding state, protect password recovery, remember requested product states and operate integrations.

Optional PostHog analytics and masked session replay must be activated only after your consent. You may reject optional analytics without losing core FuelPro functionality and may withdraw consent later.

FuelPro does not use advertising pixels, cross-context behavioural advertising or data-broker services.

More information is available in the FuelPro Cookie and Analytics Notice.

9. Sharing and service providers

FuelPro does not sell personal data and does not share personal data for cross-context behavioural advertising.

FuelPro may disclose data to the following categories of recipients only as necessary:

Supabase - authentication, database, storage and backend infrastructure;
Vercel - application and website hosting;
OpenAI - consent-gated AI meal processing, transcription and suggestions;
PostHog - optional product analytics and masked session replay;
Strava - optional integration initiated by you;
Open-Meteo - geocoding and weather data based on location information you provide or permit;
Google Workspace - support email and related communications;
Google - optional sign-in where enabled and chosen;
Canny - external feedback boards if you choose to visit or submit feedback;
professional advisers, authorities or courts where legally required;
a future successor or purchaser if FuelPro is reorganised, financed or transferred, subject to appropriate confidentiality and legal safeguards.

FuelPro expects service providers to process data under appropriate contractual and security obligations. Their own services may also be governed by their privacy policies.

10. International transfers

Some providers may process personal data outside Croatia or the European Economic Area. Where the GDPR requires safeguards, FuelPro relies on mechanisms such as adequacy decisions, Standard Contractual Clauses and supplementary technical or organisational measures.

Because FuelPro is a small controlled beta, vendor-region and transfer settings are reviewed as the product develops. FuelPro will not describe data as exclusively EU-hosted unless that is technically and contractually verified for the relevant flow.

11. Retention

FuelPro applies the following retention approach:

Account, profile, training and nutrition data: retained while your account is active and the data is needed to provide the Service.
Deletion requests: verified requests are handled without undue delay and ordinarily completed in active FuelPro systems within 30 days, unless retention is legally required.
PostHog analytics and session recordings: no longer than 30 days.
OpenAI API monitoring data: may be retained by OpenAI for up to 30 days, subject to its current controls and legal exceptions.
Support correspondence: ordinarily retained for up to 12 months after the matter is resolved, unless longer retention is necessary for a dispute, security event or legal obligation.
Consent, legal acknowledgement, deletion and security evidence: retained only for the period reasonably necessary to demonstrate compliance, protect legal rights or meet legal obligations.
Meal-estimation quality records: retained while needed to evaluate the beta and linked to your account; removed or de-identified when no longer needed or when deletion is required.
Backups: deleted data may remain temporarily in secured backups until normal provider backup rotation and will not be restored to active use except for disaster recovery or legal necessity.

FuelPro periodically reviews retention and intends to introduce automated deletion as the product matures.

12. Security

FuelPro uses measures intended to protect personal data, including:

authentication and access controls;
database row-level security and scoped permissions;
encrypted storage of Strava tokens;
consent enforcement for sensitive features;
separation between staging and production;
analytics sanitisation and input masking;
restrictions on logging secrets and sensitive payloads;
testing, release checks and controlled production access.

No online service can guarantee absolute security. Notify support@fuelpronutrition.com promptly if you suspect an account or data incident.

13. Your rights

Subject to applicable law, you may have the right to:

receive information about processing;
access your personal data;
correct inaccurate or incomplete data;
request deletion;
restrict processing;
object to processing based on legitimate interests;
receive portable data in a structured, commonly used and machine-readable format;
withdraw consent at any time;
complain to a supervisory authority;
avoid decisions based solely on automated processing that produce legal or similarly significant effects.

FuelPro does not currently provide a fully automated export tool, but can prepare a manual export where required.

Send a request to support@fuelpronutrition.com. FuelPro may ask for information necessary to verify your identity. FuelPro aims to respond within one month, subject to lawful extensions for complex or numerous requests.

You may complain to the Croatian supervisory authority:

Agencija za zaštitu osobnih podataka (AZOP) Selska cesta 136 10000 Zagreb, Croatia azop@azop.hr

You may also contact the supervisory authority in the EU or EEA country where you live, work or believe a violation occurred.

14. Consent withdrawal and feature controls

You can withdraw optional consent through available FuelPro controls or by contacting support. You can also:

disconnect Strava;
revoke browser location permission;
reject or withdraw optional analytics;
stop using AI meal or AI Dietitian features;
request termination of a coach-athlete link;
request account deletion.

Withdrawal affects future processing and may disable the related feature.

15. Children

FuelPro is intended only for adults aged 18 or over. FuelPro does not knowingly offer the Service to children. If FuelPro learns that an underage person has created an account, FuelPro may suspend the account and delete the data, subject to legal requirements.

16. Automated recommendations

FuelPro uses deterministic calculations and limited AI-supported outputs to generate nutrition guidance. Recommendations are not automatically applied outside FuelPro. You can edit, correct, ignore or decline them.

FuelPro does not use these recommendations to determine employment, insurance, credit, education, access to essential services, legal rights or pricing.

17. California privacy notice

This section applies only to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA), applies to FuelPro or FuelPro voluntarily honours the request.

During the preceding 12 months, FuelPro may have collected the categories described in this Policy, including identifiers, account and authentication data, internet or electronic activity, geolocation, body and health-related information, training and nutrition information, inferences and support communications.

FuelPro collects these categories from you, your device, optional Strava connections, linked relationships and service providers. FuelPro uses them for the business and commercial purposes described in Section 5.

FuelPro may disclose these categories to service providers and contractors listed in Section 9 for service provision, security, analytics, AI processing, support and infrastructure.

FuelPro:

does not sell personal information;
does not share personal information for cross-context behavioural advertising;
does not offer financial incentives in exchange for personal information;
does not knowingly sell or share information of persons under 16;
does not use sensitive personal information to infer characteristics for advertising.

Where the CCPA applies, California residents may request access to categories and specific pieces of information, correction, deletion and portability, and may exercise applicable rights concerning sale, sharing and sensitive personal information. FuelPro will not discriminate against you for exercising a right.

Requests may be sent to support@fuelpronutrition.com. FuelPro may verify your identity and the authority of an authorised agent. Because FuelPro does not sell or share personal information for cross-context behavioural advertising, FuelPro does not provide a “Do Not Sell or Share My Personal Information” link.

FuelPro is not claiming that it currently meets the CCPA definition of a covered business. Applicability depends on legal thresholds and business practices that must be reassessed as FuelPro grows.

18. Changes to this Policy

FuelPro may update this Policy when the product, providers, law or processing changes. The current version and effective date will be published in the Service.

Material changes may require a new acknowledgement or consent before the affected processing continues.

19. Contact

For privacy questions, access, correction, export, deletion, consent withdrawal or complaints, contact:

Pablo Benko Cerje Samoborsko 1/8 10430 Samobor Republic of Croatia support@fuelpronutrition.com