PRIVACY POLICY

Entrivo

Version: 2026-10-19 · Effective date: 19 October 2026

1. Data controller

  • Data controller: Jonatan Tejedera Neri
  • Trading name: Entrivo
  • Tax ID (NIF): 45787738M
  • Professional address: Sant Climent de Llobregat, Barcelona, Spain
  • Email: privacidad@entrivo.es

Hereafter, "Entrivo" or "the Platform".

2. Personal data we process

Entrivo may process the following categories of data:

2.1 Identification and contact data

  • Full name
  • Email address
  • Phone number, where provided
  • Profile photograph, where provided
  • Account identifiers

2.2 Platform usage data

  • Bookings and sessions
  • Packages purchased
  • Activity history within the app
  • Staff data, roles and permissions
  • Invitations and operational communications
  • Billing and subscription data

2.3 Notifications

  • Notification preferences and device token for push notifications

2.4 Payment data

  • Entrivo does not store bank or card data.
  • Payments are processed exclusively by Stripe.
  • Identifiers and status of operations managed by Stripe
  • For Coaches, Stripe may request additional data (e.g. tax or bank details) to comply with its legal obligations (KYC/AML).

2.5 Technical and security data

  • IP address
  • Device identifiers
  • Technical and access logs
  • Acceptance of Platform legal documents

2.6 Electronic acceptance evidence

When a user accepts Entrivo legal documents or contractual documents configured by a Coach, Entrivo may log evidence of that acceptance, including:

  • User, document and accepted version identifiers
  • Date and time of acceptance
  • Application or channel used (web or app)
  • Available technical metadata (for example, hashed IP address and user-agent)
  • Cryptographic hash (SHA-256) of the accepted document content
  • Handwritten signature image, only where required by the Coach and provided by the user
  • Versioned PDF documents uploaded by the Coach and stored privately
  • Where the Coach requires it in a form, a record of the explicit consent given to the processing of the answers

2.7 Coach forms

A Coach may ask their Clients to answer forms with questions the Coach designs (for example, a pre-exercise health questionnaire, a medical history or a goals survey). The answers may include data concerning health or other special categories of personal data.

Before answering, the Client sees the purpose and the processing information the Coach has defined for that form and, where the Coach requires it, is asked for explicit consent through a separate, unticked box. Entrivo stores the answers together with the form version and the information that was shown, does not include their content in notifications or emails and does not assess them: Entrivo does not make diagnoses or fitness assessments. The Client can view the answers they have submitted at any time.

The Coach is the controller of those answers and Entrivo acts as processor (see section 4).

3. Purposes of processing

We process personal data to:

  • Manage registration and use of the Platform
  • Facilitate the relationship between Coaches and Clients
  • Manage bookings, sessions and packages
  • Enable payments via Stripe Connect Express
  • Record simple electronic acceptances of Platform legal documents and, where applicable, Coach contractual documents, together with related evidence
  • Comply with legal obligations
  • Respond to enquiries or requests
  • Measure the effectiveness of our Google Ads campaigns, only if you accept advertising cookies
  • Prevent fraud
  • Ensure platform security
  • Provide maintenance and technical support

4. Legal basis for processing

The legal bases are:

  • Performance of a contract (use of the Platform)
  • User consent, where applicable
  • Compliance with legal obligations
  • Legitimate interest for:
    • fraud prevention;
    • platform security;
    • incident resolution;
    • technical maintenance;
    • retention of simple electronic acceptance evidence where necessary for service integrity and defence against claims.

Regarding Coach contractual documents and forms, and Client acceptances and answers, the Coach normally acts as controller of that professional-relationship data, and Entrivo as processor under the Data Processing Agreement, without prejudice to processing that Entrivo carries out as an independent controller in relation to the user account and operation of the Platform.

4.1 Training and nutrition plans (health data)

If your Coach or centre uses the "Plans" add-on, you can record check-ins in Entrivo with your weight, your body measurements, how you feel (energy, hunger, sleep and adherence), comments, the meals you mark and your workouts (sets, loads and effort). These are, or may be, data concerning your health.

  • Controller: your Coach or centre, who decides what they are used for. Entrivo processes them on their behalf, as processor, and does not use them for its own purposes, advertising or profiling.
  • Legal basis: the one determined by your Coach, which you will see before your first record with them: your explicit consent (we will ask you for it with a checkbox) or another legal condition that we will explain to you, such as their status as a healthcare professional bound by professional secrecy. If you are under fourteen, your guardian gives or receives it.
  • Who sees them: your Coach and the members of their team whom they have given permission to view plans. Every access by their team is logged.
  • Notifications: notices and emails about your plan never include your weight, your measurements or your comments.
  • Withdrawing consent (where it is the basis): from "My plan › Health data", at any time. What has already been recorded is blocked (no one sees or uses it) and you can ask for it to be erased; your Coach decides whether it must be kept for a legal reason and you will see their decision.
  • Your rights (access, rectification, erasure, portability, restriction and objection): exercise them with your Coach or centre. If you contact Entrivo, we will forward your request to your Coach and help them respond to it.
  • Retention: for the period your Coach declares (counted from the end of each plan); after that, they are erased automatically. They are also erased when you delete your account.
  • If you request erasure: your Coach has one month to resolve it (extendable by two months, explaining the reason to you); you will see the deadline and the outcome in "My plan".
  • Records of your decisions: Entrivo keeps, separately and without health data, a minimal record of your consents, withdrawals and requests, with your identity pseudonymised, for its own retention period, in order to be able to demonstrate that your decisions were respected.

5. Payments and Stripe Connect

Entrivo uses Stripe Connect Express as an external payment service provider.

By making a payment or registering as a Coach, the user agrees that:

  • Their personal and payment data will be processed by Stripe in accordance with its Privacy Policy
  • Stripe acts as an independent controller of such data
  • Entrivo does not have access to full payment data

More information in the Stripe Privacy Policy.

6. Recipients of data

Data may be processed by technology providers necessary for the provision of the service, including hosting, authentication, storage, email, push notifications, analytics and payment processing services.

Among others, Entrivo currently relies on the following providers:

  • Supabase — database and authentication
  • Vercel — site hosting and delivery
  • Stripe — payment processing
  • Resend — email delivery
  • Firebase — push notifications
  • Google Ireland Limited — audience measurement with Google Analytics 4 on the website, only if you accept analytics cookies
  • Google Ireland Limited — conversion measurement with Google Ads (whether a demo request came from an ad), only if you accept advertising cookies. It is not used for ad personalisation or remarketing
  • Crisp IM SARL — support chat on the website, only if you accept functional cookies
  • WhatsApp Ireland Limited (Meta group) — WhatsApp support, only if you choose to message us through that channel

Contact via WhatsApp. The WhatsApp button on the website is a plain link: it does not load third-party code or set cookies in your browser until you click it. If you message us on WhatsApp, we will process your phone number, profile name and the content of the conversation to handle your enquiry, based on your consent when you start the contact and, where applicable, on taking pre-contractual steps at your request. We keep the conversation for as long as needed to resolve your enquiry and for no more than one year, unless you become a customer. WhatsApp also processes that data as an independent controller under its own privacy policy. Please do not share health data or other special-category data through this channel.

Data may also be disclosed to public authorities where required by law.

No data is transferred for commercial purposes.

7. International transfers

Certain technology providers used by Entrivo may carry out international data transfers, applying the safeguards required under the GDPR, including adequacy decisions, standard contractual clauses or adherence to the EU-U.S. Data Privacy Framework where applicable.

In particular, Google (Google Analytics 4 and Google Ads) and Stripe may process data outside the European Economic Area, mainly in the United States, under those safeguards. For web analytics and advertising measurement, the transfer only takes place if you have previously accepted analytics or advertising cookies, respectively. If you contact us on WhatsApp, Meta may process the conversation data outside the European Economic Area under the same safeguards.

8. Cookies and similar technologies

The Entrivo website uses first-party cookies that are strictly necessary for it to work and, subject to your consent, third-party analytics cookies (Google Analytics 4), functional cookies (Crisp support chat) and advertising cookies (Google Ads conversion measurement). Functional cookies also use browser local storage.

Cookies that are not strictly necessary are not installed until you give your consent, in accordance with article 22.2 of Spanish Act 34/2002 (LSSI-CE). You can accept them, reject them or configure them by category from the banner, and withdraw your consent at any time from the "Cookie settings" link in the footer.

The details of each cookie — owner, purpose and duration — are set out in our Cookie Policy.

9. Data retention

Data will be retained:

  • While a contractual relationship exists
  • As long as necessary to comply with legal obligations
  • Until the user requests erasure, where applicable

Certain information may be retained in blocked or anonymised form where necessary to comply with legal obligations or defend against potential claims.

10. User rights

The user may exercise the rights of:

  • Access
  • Rectification
  • Erasure
  • Objection
  • Restriction
  • Data portability

By sending a request to privacidad@entrivo.es.

Entrivo may request additional information reasonably necessary to verify the identity of the applicant where there are reasonable doubts about their identity.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

11. Security

Entrivo applies appropriate technical and organisational measures to ensure the security and confidentiality of personal data. Special categories of data (answers to Coach forms and check-ins in the "Plans" add-on) are additionally subject to permission-based access restrictions, logging of staff access and exclusion from notifications and emails.

Document acceptance is simple electronic acceptance with evidence logging. Entrivo does not act as a qualified trust service provider and does not offer advanced or qualified electronic signatures under Regulation (EU) No 910/2014 (eIDAS).

12. Changes to this policy

  • Entrivo reserves the right to modify this Privacy Policy.
  • Changes will be published on the Platform.

← Back to Entrivo