Personal Data Processing Consent
Version: 1.0 — April 9, 2026
This form informs you about how your personal data is processed when you use the Rutinize platform as a trainer’s client, and documents your consent in a free, informed and specific manner.
1. Parties involved
Your trainer — Data controller for your personal data. They decide what data is collected, for what purpose and for how long.
Rutinize — Operated by Arian Roque ([email protected]). Data processor: stores and processes your data solely to operate the platform. For its own technical data (session, errors), Rutinize acts as an independent controller.
2. What data is processed and why
2.1 Data necessary for the service
Entered by your trainer when creating your account or configured subsequently. Legal basis: performance of a contract — does not require your explicit consent.
| Data | Purpose |
|---|---|
| Name and email address | Identifying you and enabling communication |
| Country of residence | Content personalization and tax calculation if applicable |
| Language and time zone | Displaying dates and content in your language and time zone |
2.2 Training data and forms
Legal basis: consent (Block 1 of Section 10).
| Data | Purpose |
|---|---|
| Trainer form responses | Information to design your programs |
| Training history | Recording routines, loads, sets and frequency |
| Recorded session data | Processed by the Progression Engine to assess your progress |
| Metrics and progression | Measuring your evolution and managing progression |
If any form includes questions about health, injuries or medical conditions, that data is of a special category and its collection is the exclusive responsibility of your trainer.
2.3 Technical data processed by Rutinize
Legal basis: legitimate interest of Rutinize.
| Data | Purpose |
|---|---|
| Technical and error logs | Detecting failures and improving the platform |
| Session token, user, email and role (in your browser) | Keeping the session active |
| Exercise video cache (up to 7 days) | Reducing load times |
3. Sub-processors
| Provider | Function | Data they may access |
|---|---|---|
| Railway (USA) | Infrastructure | Data stored on the platform |
| Cloudflare (USA) | Domain and network | Traffic metadata |
| Mailgun / Sinch (USA) | Email delivery | Email and message content |
| Stripe (USA) | Payments | Your country if the trainer uses the tax feature |
Rutinize does not sell your personal data.
4. International transfers
Providers operate in the USA. Rutinize endeavors to use Standard Contractual Clauses (EU), UK Addendum (UK) and equivalent mechanisms for Brazil.
5. Retention periods
| Type of data | Period |
|---|---|
| Trainer’s data | While you are an active client |
| Rutinize technical logs | As long as necessary for the purposes described |
| Browser session (JWT) | Until logout or token expiry |
| Video cache | Up to 7 days |
| After trainer account closure | Rutinize deletes or anonymizes within 30 days |
6. Your rights
Access, rectification, erasure, portability, restriction, objection and withdrawal of consent.
- Trainer’s data → contact your trainer.
- Rutinize’s data → [email protected].
7. Right to lodge a complaint with a supervisory authority
You may lodge a complaint with the data protection authority in your country at any time, without needing to have tried other channels first.
Examples: AEPD (Spain), ICO (UK), CNIL (France), ANPD (Brazil), INAI (Mexico).
8. How to withdraw consent
- By contacting your trainer directly.
- Using the platform’s data management options.
- By sending a request to [email protected] — subject “Privacy — withdrawal of consent”.
Consequence: withdrawing Block 1 means your trainer will no longer be able to manage your history or plans through the platform.
9. Minors
If you are under the legal age of majority you need authorization from your parent or legal guardian.
10. Declaration of consent
(This form is presented interactively on the platform with the corresponding checkboxes.)
Block 1 — Training data and forms (required for the service)
☐ I consent to my trainer, using the Rutinize platform, collecting and processing my training data, history, metrics, progression, session data and form responses, in order to design and manage my personalized programs.
I understand that my trainer is the data controller, that Rutinize processes it solely to provide the service, that I can withdraw this consent at any time and that without it my trainer will not be able to manage my plans.
Acknowledgment of reading
☐ I confirm that I have read and understood this form, the Privacy Policy for Clients and the service conditions communicated by my trainer.
11. Consent record
The platform automatically saves: date and time of acceptance, document version, mechanism used (checkbox) and blocks accepted. This record serves as evidence in accordance with GDPR Art. 7.1.