This Privacy Notice explains how 90 PLUS Danışmanlık Sanayi ve Ticaret Limited Şirketi (trading as "Championa", "we", "us", or "our") collects, uses, and protects personal data when you use the Championa platform (the "Service"). For the personal data described here, Championa acts as the data controller.

1. Personal data we collect

Account data: name, email address, password (hashed), profile details.
Content data: information you upload to the Service, including champion profiles, training notes, and uploaded files.
Support data: messages, attachments, and metadata when you contact support.
Usage and device data: log data, IP address, browser type, device identifiers, pages viewed, and feature interactions.
Cookies and similar technologies: see "Cookies" below.

Payment card details are not collected or stored by us. Payments are processed by our reseller and Merchant of Record, Paddle (see "Sharing" below).

2. How we use personal data and legal bases

Provide the Service — create and manage your account, deliver features (legal basis: performance of a contract).
Customer support — respond to inquiries (contract / legitimate interests).
Security and fraud prevention — detect abuse, secure the platform (legitimate interests; legal obligation).
Product improvement and analytics — understand usage to improve the Service (legitimate interests).
Marketing communications — only where you have opted in or as permitted by law (consent / legitimate interests).
Legal compliance — comply with tax, accounting, and other legal obligations (legal obligation).

3. Who we share data with

Paddle — our online reseller and Merchant of Record. Paddle handles checkout, billing, payment processing, tax compliance, invoicing, and refunds. See Paddle's Privacy Notice.
Service providers / sub-processors — hosting, database, email delivery, analytics, and customer support tooling, under appropriate contractual safeguards.
AI processing — the Lovable AI Gateway and its model providers (Google, OpenAI) process the content of AI requests to deliver AI features. Google user data is never included.
Professional advisers — legal, accounting, and audit advisers when needed.
Authorities — where required by law, court order, or to protect rights and safety.
Successors — in connection with a merger, acquisition, or sale of assets, with continued protection of your data.

We do not sell your personal data.

4. International transfers

Some of our service providers operate outside Türkiye, the UK, and the EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, UK International Data Transfer Addendum, or adequacy decisions.

5. Data retention

We retain personal data only as long as necessary to provide the Service, comply with legal obligations (e.g. tax and accounting records typically up to 10 years in Türkiye), resolve disputes, and enforce our agreements. Account and content data are deleted or anonymised after a reasonable period following account closure.

6. Your rights

Subject to applicable law, you have the right to:

access the personal data we hold about you;
request correction of inaccurate data;
request deletion ("right to be forgotten");
restrict or object to certain processing;
data portability;
withdraw consent at any time where processing is based on consent;
lodge a complaint with your local data protection supervisory authority.

To exercise your rights, email privacy@championa.app. We aim to respond within one month.

7. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, audit logging, and least-privilege principles. No system is 100% secure; please use a strong, unique password and notify us promptly of any suspected unauthorised access.

8. Google user data (Google Calendar integration)

Championa offers an optional Google Calendar integration for coaches. If you choose to connect your Google Account, Championa requests the following Google API scopes:

https://www.googleapis.com/auth/calendar.events.owned — limited to calendars you own; Championa only uses your primary calendar. It lets us read the events on that calendar so busy times are blocked from your bookable availability (clients only ever see free/busy, never titles or details), and create, update and delete the calendar events for coaching sessions booked through Championa.
openid and userinfo.email — to identify which Google Account is connected and show it in your settings.

Sign in with Google is a separate, optional way to log in to Championa. It requests no Google API data: we receive and store only your email address and your name, used to create and identify your Championa account. We do not store your Google profile picture or any other profile field.

What we store: your Google account email address, the connected calendar id, OAuth tokens (encrypted at rest with AES-256-GCM), and a copy of event times, titles and attendee names needed to display your schedule inside Championa. Google data is stored on our EU-hosted database and is visible only to you, the connected coach. Clients never see your event titles, descriptions or attendees — only whether a time slot is busy or free.

Who can access it: Google user data is stored and processed only by our infrastructure providers (our EU-hosted database and application hosting), acting on our behalf. We do not share it with advertisers, data brokers, analytics or error-monitoring services, or any third-party AI/ML service. Emails and reminders are generated only from sessions created in Championa, never from imported Google events. We do not create aggregated or anonymized datasets from Google user data; the only derived data are internal sync counters used to operate the integration.

Retention and deletion: you can disconnect Google Calendar at any time in Championa (Settings → Calendar → Disconnect) or revoke access at myaccount.google.com/permissions. Disconnecting in Championa immediately revokes the access with Google and deletes the stored tokens together with all Google event data imported into Championa (imported events, sync history, pending updates, calendar and notification records). Sessions you created in Championa are kept, with their Google link removed. Deleting your Championa account removes all of it.

Limited Use: Championa's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, do not transfer it to third parties except as necessary to provide the integration or to comply with law, and do not allow humans to read it except with your explicit consent, for security purposes, or where required by law.

We do not use Google user data to develop, improve or train generalised AI or machine learning models.

AI features and Google user data

Some Championa features use AI models — the AI program builder, program refinement, nutrition estimates and meal suggestions, check-in reply suggestions, motivational messages, business and progress insights, exercise-library tagging, and voice-to-prompt dictation (a coach's voice recording is transcribed once and not stored; only the text the coach approves is used), and the calendar assistant (which reads only Championa-created training sessions and champion names, never Google Calendar events, and changes nothing until the coach confirms). These requests are processed server-side through the Lovable AI Gateway, which routes them to model providers Google (Gemini models) and OpenAI (GPT models). Google user data — including Google Calendar events, event details, attendees, the connected Google account, and any counts, statistics or other data derived from them — is never included in any AI request. It is technically excluded from every AI feature and is never transferred to any AI or machine-learning provider, so it cannot be used to create, train or improve any AI or machine-learning model. We do not use self-hosted or offline AI models.

9. Cookies

We use essential cookies required to run the Service (authentication, security). With your consent where required, we also use analytics cookies to understand usage and improve the product. You can manage cookie preferences in your browser settings; disabling essential cookies may break the Service.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has provided us personal data, please contact us so we can delete it.

11. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated by email or in-product notice.

12. Contact

Data controller: 90 PLUS Danışmanlık Sanayi ve Ticaret Limited Şirketi. For privacy inquiries, contact privacy@championa.app.