Privacy notice

Last updated: 2 October 2026

Who we are

The controller of your data is José Pedro (Nutrivious), based in Porto, Portugal. Contact: jose.guimaraes.fontes@gmail.com.

What we collect

When you join the waitlist: your email, the language of the page, the time you agreed and the version of the wording you agreed to. If you choose to add it: your sport, your goal date, how you heard about us, what you think this would be worth to you per year, and whether you would hold a place with a refundable deposit. From the link you came from: campaign tags such as utm_source, if present.

We do not collect health data at this stage. We do not use advertising or tracking cookies.

Why, and on what basis

To email you about the Nutrivious pilot and to understand who is interested. The basis is your consent (GDPR Art. 6(1)(a)). The bot check and security logs rely on our legitimate interest in keeping the site safe (Art. 6(1)(f)).

Who processes it

Supabase (database, EU region), Cloudflare (hosting, security and the bot check, which processes technical data such as your IP address). These providers act on our instructions. Where data is processed outside the European Economic Area, it is covered by the European Commission’s standard contractual clauses or an adequacy decision.

How long we keep it

Until you withdraw consent, and in any case no longer than 24 months after you join, unless you become a pilot participant, in which case we tell you what applies before the pilot.

Your rights

You can ask us at any time to access, correct, delete, restrict or export your data, to object to processing, and to withdraw your consent. Withdrawing does not affect what was done before. Write to jose.guimaraes.fontes@gmail.com. You can also complain to the Portuguese data protection authority, the CNPD.

Young people

If you are under 18, ask a parent or guardian to join the list with you.

Changes

If we change this notice in a way that matters, we tell you by email before it applies.