Privacy Notice

1. Who the controller is

The controller is Chillian Solutions, vl. Ian Balen, Rožmanići 23 B, 51221 Kostrena, Hrvatska. For any question about personal data, write to support@my-workout-plan.com.

2. What data we collect

• Answers to the questions: where you will train, your equipment and the weights you have, days per week, session length, experience, other physical activity, goal, movements you would rather skip, what stopped you before, and start date. Every question is answered by choosing from fixed options. There are no free-text fields, apart from a dumbbell weight in kg (a number).
• Answers to the follow-on block questions: the weight you now use for legs, pushing and pulling moves, or that you are not sure. This is data about equipment and load, not health data.
• E-mail address: to send the PDF, the contract confirmation and messages about your order.
• Order data: what you bought, amount, date, payment and refund status, Link’s transaction reference, and what Link tells us (section 5a): your billing country, the amount and currency you paid and the status of any chargeback.
• Record of your consent to the start of delivery: the exact text of the consent as shown to you, the version of the Terms, date and time (UTC), language and the browser identifier (user-agent string). We do not store your IP address in this record.
• Record of your answers in the cookie notice: a random consent id (kept in your browser in the sp_cid cookie, section 8), the purpose, your answer, the time, the question you were shown and its exact version, the language and the browser identifier (user-agent string), without your IP address. An order also keeps that id and your answers at the time of ordering. We keep this record with an order for 6 years; if you never ordered, for 13 months after your last answer (section 7). A consent we could not record does not take effect.
• Withdrawal statements and complaints: name, e-mail address, order number, content, date and time.
• Refund requests: e-mail address, order number if you enter it, a reason only if you choose to give one, date and time.
• The gift recipient’s e-mail address, only if the recipient enters it, so that we can send the PDF.
• E-mail address for an availability notice, if you leave it yourself in a country where sales are not yet open.
• Messages you send us by e-mail (for example to the support address): the sender’s address and name if you give one, subject, content, date and time, and the names and sizes of attached files. We do not store the files themselves in our system.
• Delivery data for the messages we send you: whether a message was delivered, delayed, bounced or marked as spam. If our message to an address is permanently rejected or the recipient marks it as spam, we record the address so that we send no more reminders to it.
• Technical server logs: IP address, time and requested page.

3. What we do not collect

• Health data. We do not ask about health, age, body weight or height. Please do not enter such data in the reason for a refund request or in messages you send us.
• Data about your workouts. We keep no training log and do not record which sessions you did. Besides the equipment you list in the questions, the only weights we store are the ones you give when you order a follow-on block (section 2).
• Card data. You enter it in Link’s payment form; we do not see it.
• The gift recipient’s e-mail address from the buyer. The buyer passes the gift link on.

4. Why we process data and on what legal basis

Legal bases refer to the General Data Protection Regulation (GDPR).

• Creating the preview and the plan from your answers, creating a follow-on block from your answers to its questions, delivering the PDF (also to a gift recipient, at the address the recipient enters), handling orders, withdrawals and refunds: performance of a contract and steps at your request before a contract (Art. 6(1)(b)).
• E-mail reminders, if you bought them: performance of a contract (Art. 6(1)(b)).
• Answering messages you send us and keeping a copy of them: performance of a contract or steps at your request (Art. 6(1)(b)) and, where a message is not about an order, our legitimate interest in answering it (Art. 6(1)(f)).
• Tracking whether our messages are delivered, and stopping reminders to an address that rejects them or whose recipient marks them as spam: legitimate interest in our messages arriving and in not sending unwanted mail (Art. 6(1)(f)).
• Bookkeeping records and the record of complaints: legal obligation (Art. 6(1)(c)).
• The record of consent to the start of delivery and the record of your answers in the cookie notice: legal obligation and our legitimate interest in being able to prove what was agreed (Art. 6(1)(c) and (f)).
• Site usage statistics without cookies or device identifiers, and server logs for security: legitimate interest in keeping the site working and improving it (Art. 6(1)(f)).
• Where the visit came from (section 9): your consent (Art. 6(1)(a) GDPR and electronic communications law).
• Availability notices and marketing e-mails: only with your separate consent (Art. 6(1)(a)). You can withdraw consent at any time, by the link in the message or by e-mail.

The data marked as required for the order is necessary to make and perform the contract. Without it we cannot create or deliver the plan.

5. Who receives the data

We do not sell your data. We pass it only to the recipients named in this section and in section 5a and, if you consent, to Meta and to PostHog as described in the sections “Meta Pixel and Conversions API” and “Analytics with PostHog” (each shown in this notice when that tool is switched on). The following service providers process data for us, under contract and on our instructions (processors):

• Site hosting: Vercel (Vercel Inc., USA); the site runs on its servers in Frankfurt, Germany.
• Database: Neon, a Databricks service (Databricks, Inc., USA), on servers in Frankfurt, Germany.
• Protection against too many requests (rate limiting): Upstash (Upstash, Inc., USA), on servers in Frankfurt, Germany.
• Error reports from the site: Sentry (Functional Software, Inc., USA), with the data stored in Frankfurt, Germany.
• Sending and receiving e-mail: Resend (Plus Five Five, Inc., USA). It processes e-mail addresses and names where given, the content of the messages we send you and you send us, and delivery data (whether a message was delivered, bounced or marked as spam). It keeps this data for 30 days.

Payment is handled by Link (section 5a). We may give data to competent authorities where the law requires it. We do not send your answers to the questions or to the follow-on block questions to advertising companies. With your consent, analytics (PostHog) receives your answers to the questions as the options you chose, and the recording of your visit shows the questions and the follow-on block questions with what you choose; it never receives the movements you would rather skip (section “Analytics with PostHog”).

Demonstration videos: the moves in the PDF have links and QR codes that lead to videos on YouTube. Neither the PDF nor our pages load anything from YouTube, so we send no data to YouTube or Google. When you open a video link, you open YouTube; from then on YouTube’s (Google’s) own privacy terms apply.

5a. Payment through Link

Payment, the receipt and refunds are handled by Link (Sold through Link, LLC, a Stripe group company). For the data you enter in Link’s payment form (card and payment data, e-mail address, billing address and any other data asked for there), Stripe is an independent controller, as the Link Privacy Center states (link.com/privacy-center); Link’s privacy policy is linked in the payment form. From us it receives the amount, the order description, our order reference and your e-mail address; we receive from it the payment confirmation, your billing country, the amount and currency you paid, the transaction reference, refund details and, if there is one, the status of a chargeback. Link issues your receipt, sends the payment and refund confirmations, and keeps them. Stripe may process this data in the USA. On our payment step, Stripe’s payment script also collects data about your device and how you use that page, and sets the cookies __stripe_mid and __stripe_sid (section 8), to prevent payment fraud; Stripe is an independent controller for this too.

6. Transfers outside the European Economic Area

Some service providers may process data outside the European Economic Area, for example in the USA. In that case the transfer is based on a European Commission adequacy decision (the EU–US Data Privacy Framework) or on standard contractual clauses. Resend stores data in the USA; the transfer is based on the standard contractual clauses in its data processing agreement and on its participation in the EU–US Data Privacy Framework. Vercel, Neon (Databricks), Upstash and Sentry keep our data in Frankfurt, but they are US companies and may access it from the USA; such a transfer is based on their participation in the EU–US Data Privacy Framework and on the standard contractual clauses in their data processing agreements. You can ask for a copy of the safeguards by e-mail.

7. How long we keep data

These are the periods in our data retention policy. An automatic deletion procedure runs on a schedule and applies them.

• Answers without a purchase: 30 days, then we delete them.
• E-mail address without a purchase: 30 days, then we delete it.
• Records of a started payment (payment session): 30 days. The order itself is kept as stated below.
• E-mail address left for an availability notice: until ordering opens in your country and we have sent you one message about it, at most 12 months, or until you withdraw consent.
• The plan (your answers and the plan content the PDF is made from), answers to the follow-on block questions, the gift recipient’s e-mail address and the download links: 24 months from purchase, then we delete them.
• Orders, the record of consent to the start of delivery, the record of your answers in the cookie notice that belongs to an order, withdrawal statements and refund requests: 6 years.
• The record of your answers in the cookie notice if you never ordered: 13 months after your last answer.
• Bookkeeping documents: as long as tax and accounting rules require, 11 years under our policy.
• Complaints: 3 years (the law requires at least one year).
• Copies of the e-mails we sent you, with their delivery data, kept in our own system: 30 days.
• Messages you send us by e-mail: 30 days in our own system; Resend also keeps them for 30 days. A withdrawal statement, complaint or refund request sent by e-mail is kept as stated above.
• An address recorded because our message to it was permanently rejected or marked as spam: 24 months.
• Server logs: 30 days.
• Unused gift link: until the link expires, plus 30 days.

8. Cookies and browser storage

The cookies listed here are strictly necessary for the site to work; by law they do not need consent. Without your consent none of them is used for advertising or analytics. If you consent, sp_q, sp_order and sp_plan also tie the questions you finished and your order to what you agreed to (section 9 and the sections “Meta Pixel and Conversions API” and “Analytics with PostHog”).

• sp_locale: remembers the country and language you chose in the switcher. It is set only when you use the switcher. Lifetime: 12 months.
• sp_q: links your browser to the questions you finished, so that the preview and the order page can show your plan. Lifetime: 30 days.
• sp_order: lets the browser that placed an order open that order’s page (the confirmation, the PDF download and resending the message). It is signed, so it cannot be forged. Lifetime: 2 days.
• sp_plan: set when you open your PDF from the link in an e-mail (for a gift plan: when the recipient finishes the questions or reopens the plan with the gift link). It remembers that plan in that browser, so that the PDF can be downloaded without the link staying in the address bar and the withdrawal and refund forms can be prefilled with the order number. Lifetime: about 13 months (400 days).
• sp_gift: set when a gift recipient presses the button to start the questions; removed when the plan is created. Lifetime: at most 2 days.
• sp_consent: remembers your choice in the advertising-cookie notice. That notice is shown only if Meta’s tools are switched on. Lifetime: 12 months.
• sp_analytics: remembers your choice about analytics cookies (PostHog). The question is shown only if analytics with PostHog is switched on. Lifetime: 12 months.
• sp_cid: a random identifier that links your answers in the cookie notice to our record of them (section 2). It is set when you answer the notice. Lifetime: 12 months.
• __stripe_mid and __stripe_sid: set by Stripe’s payment script on the payment step, only after you tick the consent box, so that Stripe can prevent payment fraud. Stripe is an independent controller for them (section 5a). Lifetime: __stripe_mid 1 year, __stripe_sid 30 minutes.

We also use your browser’s own storage, which is not a cookie and stays on your device:

• sessionStorage: keeps your answers while you are answering the questions and your add-on choice on the order page, until you close the tab or the order is sent.
• sp_ft: only if you accepted analytics or advertising cookies, keeps where the visit came from (section 9) until you close the tab, so that it is not lost between the first page and the questions.

No cookie is set merely because you open the site in a particular language. We use no advertising or analytics cookies unless you accept them in the cookie notice. That notice is shown only when Meta’s tools or analytics with PostHog are switched on; the section “Meta Pixel and Conversions API” or “Analytics with PostHog” is then part of this notice. You can delete or block cookies in your browser settings; without the necessary cookies the questions, ordering and the PDF download may not work.

9. Statistics without cookies

We count how many times each step was reached (for example page viewed, questions started and finished, plan preview, order page, purchase). We do this on our own server. With each step we record the language, the country and the number of the ad variant that led to the visit. The country comes from the country label that our hosting provider derives from the IP address; the IP address itself is not stored. For this we store nothing on your device and use no cookie and no visitor identifier. From the order step on, the records that belong to an order carry our internal order number, so that we can count sales per ad variant; through the order they can be linked to the buyer. We do not share this data with anyone.

If you accept analytics or advertising cookies, we also keep with your answers and your order where the visit came from, as it was in the address of the first page you opened: the campaign, ad set and ad (utm parameters and ad codes, with any age or gender band taken out of the names), the page variant, the site that linked to us (its name only), whether the link carried Meta’s click code (not the code itself), and the type of device (phone, tablet or computer). Without that consent we keep only the number of the ad variant, which also decides the headline you saw; if you later withdraw both consents, what is kept with your answers and your orders is cut down to that number. A follow-on block keeps where the visit came from only if it is bought within 90 days of your first order (never for a plan received as a gift). We keep this for 90 days.

Analytics with PostHog

Only if you consent, and only if we have switched this tool on, we use PostHog to see how visitors use our site and where they get stuck: which pages they open, what they click or tap, where they stop or hesitate, which errors appear and which adverts brought them, so that we can make the site clearer and fix problems. PostHog, Inc. (USA) does this for us as our processor; the data is stored in PostHog’s EU cloud in Frankfurt, Germany. Your browser sends the data through our own site, and our cookies are not passed on to PostHog. Without your consent nothing loads and nothing is sent.

• What is collected: a random identifier stored in your browser (details below); the pages you open on our site and the address of the page that brought you to us, with addresses shortened so that they never contain link codes, order numbers or ad click codes; what you click or tap and the forms you send (which button, link or option, never what you type); heatmaps: where on a page visitors click, tap, move the cursor and scroll; a recording of your visit (below); how fast the pages load and respond; errors on the page and messages in your browser’s console; the steps of an order: home page, questions started, each question answered, preview, order page, e-mail address entered (not the address itself), Link’s payment form opened, purchase, the add-on, the follow-on block, the e-mail with the PDF sent, the PDF downloaded, a refund requested; your answers to the questions as the option you chose, weights included (for a weight you type in or a date you pick, only that you chose another one), except the movements you would rather skip; where the visit came from (section 9) and the campaign codes in the address (utm parameters); language, country, the type of device, browser and operating system, screen size and time zone; at purchase the amount, currency and product codes. With each request PostHog’s servers receive the IP address of the connection (our hosting provider passes it on); PostHog is set to discard it, not to store it and not to derive a location from it.
• What is never collected: the movements you would rather skip (below); what you type into a field, such as your e-mail address, name or order number; your e-mail address in readable form or as a hash; link codes, order numbers and Meta’s click and browser codes; the content of the PDF; or anything about health. We do not tell PostHog who you are: your events are kept only under the random identifier, without your name, e-mail address or a person profile.
• Linking to your order: when you order, our server stores the PostHog identifier from your browser with the order, so that the purchase, the e-mail with the PDF, a PDF download and a refund request are attributed to the same anonymous visitor; a follow-on block is linked the same way only if it is bought within 90 days of your first order, and never for a plan received as a gift. We delete it from the order after 90 days, or as soon as you withdraw consent in a browser in which you ordered or opened your PDF; you can also ask us by e-mail to delete it.
• Recording of your visit: only after your consent, unless we switch recordings off. PostHog records your visit to our site, the pages with the questions included: what is shown on the screen, where the cursor or a finger moves, clicks, taps and scrolling, and messages in your browser’s console, but not the content of the site’s network requests. Every field you type in is hidden in your browser before anything is sent, and so is any e-mail address shown on a page. The question about movements you would rather skip is never recorded: while it is on the screen the recording pauses and none of your clicks or taps on it is sent (not even to heatmaps), and the lines of the preview that name those movements are hidden. Such movements could reveal something about your health, which we do not want to know.
• Legal basis: your consent (Art. 6(1)(a) GDPR and electronic communications law).
• Transfers: PostHog, Inc. stores the data in the EU but may access it from outside the European Economic Area, including from the USA. The transfer is based on the standard contractual clauses in its data processing agreement and on its participation in the EU–US Data Privacy Framework.
• How long: under our current plan PostHog keeps the events and heatmaps for one year and recordings of visits for 30 days, then deletes them.
• Cookies and browser storage: ph_…_posthog and ph_…_posthog_cpm (the random identifier and the current visit; … is our PostHog project code), lifetime 6 months, and entries starting with ph_ in your browser’s local storage and session storage, which stay until you withdraw consent or clear your browser data (in session storage only until you close the tab). Your choice is kept in the sp_analytics cookie (section 8).
• You can withdraw consent at any time through the “Cookie settings” link in the footer; withdrawing is as easy as giving consent. After that nothing more is sent and a recording stops at once, PostHog’s cookies and its entries in browser storage are deleted from your browser, and nothing more is reported to PostHog about an order you sent from that browser or whose PDF you opened there. Withdrawal does not affect what was sent before.

10. Your rights

At any time you can ask for:

• access to your data and a copy of it,
• correction of inaccurate data,
• erasure of data,
• restriction of processing,
• transfer of the data you gave us, in a commonly used electronic format,
• an end to processing based on legitimate interest (objection), and to direct marketing in every case,
• withdrawal of consent, without affecting processing before the withdrawal.

Send your request to support@my-workout-plan.com. We reply within one month at the latest. Exercising your rights is free.

You have the right to lodge a complaint with the supervisory authority: the Croatian Personal Data Protection Agency (AZOP), Zagreb, www.azop.hr. If you live in another EU member state, you can also contact that state’s supervisory authority.

11. If you received the plan as a gift

We do not get your data from the buyer. The buyer passed the gift link on to you. When you open the link, before you start the questions, we tell you that finishing them uses the gift and creates your plan, that using the plan means accepting the terms of use, and where to find this notice. When you press the button to start, we set the sp_gift cookie (section 8). While you are answering, your answers stay in your browser; we store them when you finish the questions. From then on, everything in this notice applies to you. You do not have to give your e-mail address; if you enter it, we use it only to send you your PDF. The same gift link keeps opening your PDF, so anyone who has the link can open it, the buyer included if the buyer kept the link. We do not show the buyer your answers or your plan in any other way. Keep the link safe and do not pass it on.

12. Children

The site and the plan are intended for adults (18 and over). We do not knowingly collect children’s data.

13. Automated processing

The plan and each follow-on block are created automatically, by fixed rules, from your answers to the questions and to the follow-on block questions. In doing so we make no decisions that would have legal or similarly significant effects for you. The price is the same for all buyers in the same country and does not depend on your answers.

14. Changes and version

Version of this notice: 2026-11-14. If we change it materially, we will publish the new version on this page and tell buyers by e-mail.