Privacy policy

Data controller

The data controller is Matthieu Vanderkelen, physiotherapist and coach, who runs the “12 weeks” coaching program. For any question about your data: support@matthieuvanderkelen.com.

Data collected

• Identity & account: name, e-mail address (linked to your invitation), cohort and program start date.
• Health data (special category, Art. 9 GDPR): sleep, energy, nutrition, movement, pain and body signals that you enter during the initial assessment and your weekly check-ins.
• Program tracking: goals, decisions made with the coach, wins (text and, if you add one, a photo), call feedback, notification preferences.

Purpose

This data is used exclusively for your coach to follow your program: adapting the coaching, measuring your progress, and personalizing your goals and feedback. It is neither sold nor used for advertising.

Legal basis

The processing of your health data is based on your explicit consent (Art. 9(2)(a) GDPR), collected during the initial assessment. Account and tracking data are based on the performance of the coaching service. You can withdraw your consent at any time.

Retention period

Your data is kept for the duration of your coaching, then for a limited period after the end of the program (for follow-up and continuity purposes), before being deleted or anonymized. You can request erasure at any time.

Your rights

• Access & portability: get a copy of your data. From your profile, the “Exporter mes données” (export my data) button downloads all of it in JSON format.
• Erasure: delete your account and all associated data, from the “Mes données” (my data) section of your profile.
• Withdrawal of consent: at any time, without conditions (deleting your account counts as withdrawal).
• Rectification: correct inaccurate information.

To exercise a right that is not directly available in the app, write to support@matthieuvanderkelen.com. You also have the right to lodge a complaint with the competent supervisory authority.

Hosting & processors

The application relies on technical hosting and infrastructure providers (in particular for the database and deployment), bound by data processing agreements. Data is hosted within the European Union.

AI features of the CCFT prep (optional)

Some optional features of the CCFT prep rely on artificial intelligence services. They only start with your consent, given through a checkbox that names the provider. The AI does not grade, does not validate and does not unlock any step of your path: what it produces is a draft, labelled “AI draft”.

• Tutor (after a wrong answer in an exercise): your messages, the practice question and excerpts from our lessons, cards and glossary are sent to Anthropic PBC (United States), never your name or email. Conversations are erased after 90 days; you can delete them sooner.
• Simulated client: your messages and the scenario, which is fictional, are sent to Anthropic. Do not enter any real health data. Conversations and debriefs are kept until you delete them. If you turn on voice dictation, your voice goes through your browser’s speech recognition service (Google for Chrome).
• Coaching mirror: the audio of your class is sent to ElevenLabs (United States) for transcription, then the coach’s sentences, with first names masked, to Anthropic for analysis. The audio is deleted as soon as it is transcribed, and at the latest 24 hours after upload. The transcript, visible to you only, is erased after 30 days. The report is kept until you delete it; your coach can read it, without the first names. Before recording, you confirm that you informed the members present and that none of them objected: they may object to this processing.
• Submission pre-review (coach side): the brief, the rubric and the text of your submission, with its PDF if any, are sent to Anthropic, never your videos, images or name. Only if you accepted it on the applications page, where you can withdraw that consent at any time. Your coach reviews and decides; nothing is saved without them.

Your coach only reads your conversations with the tutor or the simulated client if you choose to share them. Transfers outside the European Union are covered by the European Commission’s standard contractual clauses, included in these providers’ data processing agreements. Everything is erased with your account.