Privacy

A summary in English of how ELEVAS handles your personal data.

This summary is for information only. The legally binding version is the Política de privacidad, in Spanish, updated in September 2026.

Who is responsible

The data controller is Julia Vas Cano, based in Seville, Spain. For anything related to your data, write to contacto@elevas-fitness.com. ELEVAS follows the EU General Data Protection Regulation (GDPR) and Spanish data protection law.

What data we process

The identification data you give us when you register: name, surname, email, date of birth, city and country. Your physical and training data: weight, height, sports experience, goal, weights lifted and the plans generated for you.

To provide the service we also process health data, a special category under Article 9 of the GDPR: the dates and length of your menstrual cycle, any injuries or discomfort you tell us about and, if you select it, your pregnancy, postpartum or menopause status. These data are essential to adapt your training and we process them only with your explicit consent.

Payment data are handled entirely by Stripe. ELEVAS never stores or sees your card.

Why we process it

To provide the service and generate your plans (performance of the contract and, for health data, your explicit consent, which you can withdraw at any time by deleting those data or your account). To manage your subscription, payments and invoicing. To send you operational messages about the service. To keep the platform secure and prevent fraud.

We do not sell your data, we do not use it for third-party advertising and we do not take automated decisions with legal effects on you. Plans are adapted automatically to the data you enter, starting from programmes designed and reviewed by a person; this adaptation is guidance only.

Who has access

Only the providers we need to run the service, acting as processors: Supabase (database and authentication), Stripe (payments), Cloudflare (hosting of the website and the app) and IONOS (email). If you accept analytics cookies on the website, Google (Google Ireland Limited) processes usage data for statistics. Some of these providers may process data outside the European Economic Area, under Standard Contractual Clauses approved by the European Commission or another valid GDPR mechanism. We do not share your data with anyone else unless the law requires it.

How long we keep it

For as long as your account is active. If you delete your account from your profile, all your data (profile, cycle, injuries, weights, plans and subscription) is removed from our database immediately and permanently. After that we keep only a minimal record of the cancellation (email and reason) for up to twelve months, and invoicing data for the periods required by Spanish tax and commercial law.

Your rights

You can access, rectify, delete, object to, restrict and port your data at any time by writing to contacto@elevas-fitness.com from the email you registered with. We answer within one month at most. You can also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security and age

Your data always travels encrypted (HTTPS/TLS) and is stored with per-user access controls, so each user can only reach her own information. ELEVAS is for adults only: do not register if you are under 18.

Cookies

The app keeps in your browser's local storage only the technical data it needs to work, such as your session and the state of your plan. On this website we use Google Analytics cookies only if you accept them in the cookie notice; if you reject them, the site works normally. We do not use advertising cookies. You can change your choice at any time by clearing your browser's cookies and site data.

← Back to ELEVAS