Privacy Policy

Last updated: 19 July 2026

AI Coach Plus (“we”, “us”) is operated by XVN Web Services. This policy explains what personal data we collect on aicoach.plus, why, and the rights you have over it. The data controller is XVN Web Services, contactable at [email protected].

1. What we collect

• Account details — your email address, display name and a securely hashed password when you register. We never store passwords in plain text.
• Content you create — anything you save in your account so the service can function.
• AI processing — text or files you submit for AI features may be sent to our AI model providers (such as Anthropic or OpenAI) to generate results. We send only what is needed for your request, and we do not permit providers to use it to train their models where such controls are offered.
• Technical data — standard server logs (IP address, browser type, pages requested, timestamps) kept for security and troubleshooting, and deleted on a rolling basis.

2. Why we use it (legal bases)

• To provide the service you signed up for (performance of a contract).
• To keep the service secure — fraud and abuse prevention, debugging (legitimate interests).
• To respond when you contact us (legitimate interests).
• Where required, with your consent — which you can withdraw at any time.

We do not sell personal data, we do not run third-party advertising, and we do not use third-party analytics trackers on this site.

3. Cookies

This site uses essential cookies only — a session/login cookie so you stay signed in, and security cookies (e.g. CSRF protection). Because we use no advertising or analytics cookies, there is nothing that requires consent under the ePrivacy rules; the notice you may see on your first visit is informational.

4. Who we share data with

Only the service providers needed to run the site: our hosting infrastructure, Cloudflare (content delivery and security), our AI model providers for generation requests. Each acts under contractual data-protection obligations. We disclose data if the law requires it.

5. International transfers

Some providers may process data outside the UK/EEA. Where that happens, transfers rely on recognised safeguards such as adequacy decisions or Standard Contractual Clauses.

6. Retention

Account data is kept while your account is active and deleted or anonymised when you delete your account or after a prolonged period of inactivity. Server logs are kept for a short rolling window. You can request deletion at any time.

7. Your rights

Under UK and EU GDPR you can ask us to: access the data we hold about you, correct it, delete it, restrict or object to processing, and receive a portable copy. Email [email protected] and we will respond within one month. You can also complain to your supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).

8. Changes

If we change this policy we will update this page and the date above. Significant changes will be flagged on the site.

9. Contact

XVN Web Services · [email protected]