Legal

Privacy Notice

Last updated · 27 July 2026

This notice explains what personal data I collect when you use amirardekani.com, how I use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR). It is written to be readable — if anything is unclear, email me and I will explain.

1. Who is the data controller?

Amir Ardekani, sole trader, is the data controller for this site. You can reach me at amirardekanian@gmail.com. I operate from the United Kingdom.

2. What I collect and why

2.1 Coaching intake form

When you complete the application form at /form.html, you voluntarily submit information such as your name, email address, tennis background, training history, health-relevant information (including injuries), goals, and logistics (availability, equipment). I need this information to assess suitability for coaching and to design a safe and appropriate programme for you.

Lawful basis: performance of a contract (Article 6(1)(b) UK/EU GDPR), and, for health-relevant information you disclose about injuries or medical history, your explicit consent (Article 9(2)(a) UK/EU GDPR).

Your submission is saved directly to my own secure database, provided by Supabase (EU region, London), where only I can read it — this is the durable record I work from. A copy is also delivered to my email inbox as a notification via Web3Forms, a form-relay service. Both Supabase and Web3Forms act as processors on my behalf and do not use your data for their own purposes; you can review their privacy policies on their sites.

If you are a coaching client using your private training app, the app records your training progress — which sessions and exercises you complete, weights logged, effort (RPE) ratings, pre-session readiness check-ins, and any notes you add. This information is saved on your device and also backed up to a secure database provided by Supabase (hosted in the EU), so that I, as your coach, can review your progress and support your training. Only I can access it; Supabase acts as a processor on my behalf. This data is kept for as long as you are an active coaching client and removed on request.

2.2 Programme app data

If I build a programme for you, it lives at amirardekani.com/program.html?client=<your ID>. Your daily programme content is served as a static JSON file. The app uses your browser’s local storage on your device to remember your progress (completed sessions, weight logs, RPE scores, session notes, readiness answers, and interface preferences).

This progress is also backed up to my database so that I can coach you properly: I need to see whether you finished a session, what you lifted, and what you told me about it. The backup is hosted on Supabase (EU region, London). Each athlete’s record is protected by a private key embedded in your personal link, and only I can read it — other athletes cannot. Messages you send me through the app are stored in the same database. If you clear your browser data, the local copy is deleted but the backup remains until you ask me to delete it (see section 6).

Lawful basis: contract (Article 6(1)(b)) — delivering the coaching you have paid for.

2.3 Habit tracker and leaderboard

The habit tracker at amirardekani.com/habits.html?client=<your ID> works the same way: what you tick off each day is stored on your device first and backed up to the same private record. Your points and levels are calculated from that history — they are never stored, only recomputed. The one exception is the titles you unlock by levelling up: a record that you reached a level is kept, so that a reward stays yours after the scores reset each season. It is a list of title names against your athlete ID and nothing else. You can correct or fill in the last few days of your own log inside the app; older days are closed to editing.

The tracker includes an optional leaderboard. It is off unless you join it. If you choose to join, other athletes of mine can see the display name you pick yourself (you do not have to use your real name), your points and rank, and the title you have chosen to show, if any. A title is a reward you unlock by levelling up (such as “Ironclad”); showing one is optional, you choose which, and you can show none. Your habits, your logs, your programme, your real name and your athlete ID are never shared. Only signed-in athletes with a valid key can view the board; it is not public. You can rename yourself or leave at any time from inside the app, and leaving removes your entry immediately.

Joining the board also lets you use Roll Call: one short sentence a day that other athletes on the board can read. This is entirely voluntary — you never have to write one, and the tracker works exactly the same if you do not. If you do write one, four things are visible to the other athletes on the board for seven days: your display name, the title you have chosen to show (if any), the sentence you wrote, and how much of that day’s habits you had completed, as a single percentage. Habits are not all worth the same — a training session counts for more than a supplement — so that one number is weighted, and a reader who knows the weights could make a reasonable guess at which habits were behind it. It is still one number: the app never sends the list. Please do not put anything sensitive in it — in particular nothing about your health, injuries, medication or anything else you would not want another client to read. You can change or delete your sentence at any time before midnight, after which it stays as written. Leaving the leaderboard immediately hides every sentence you have written, and you can ask me to delete them outright (see section 6). I can also remove any line from the wall myself.

Lawful basis: consent (Article 6(1)(a)) — you are only listed if you opt in, only a sentence you choose to write is shown, and you can withdraw at any time.

2.4 Jump test

The jump test at amirardekani.com/jump.html is different from everything else on this page: nothing you put into it ever leaves your device. There is no account, no login and no backend.

Your video is never uploaded. When you choose a clip, your browser reads the file directly from your phone and analyses it there. It is not sent to me, it is not sent to Supabase, and it is not sent to any third party. Close the page and the video is gone from the app entirely.

Three things are saved in your browser’s local storage, on your device only, under the keys aa_jump_cfg, aa_jump_log and aa_jump_meta: the details you enter about yourself (a name if you give one, standing height, and optionally body mass, sex, age and footwear), the conditions of each test, and your saved results. I cannot see any of it. There is a Clear all jump data on this device button in the app that deletes the lot, and clearing your browser data does the same.

The page loads fonts from Google Fonts, which is noted in section 4. Nothing else on the page makes a network request.

Lawful basis: not applicable — no personal data reaches me, so there is no processing by me to have a basis for. The storage on your device is strictly necessary for the tool you asked to use.

2.5 Habit tracker signups (AA Proof)

The habit tracker is also offered free to people who are not coaching clients, through amirardekani.com/proof.html. That form collects three things: a display name you choose, your email address and your WhatsApp number. The form is delivered to me by Web3Forms, the same service as the coaching application.

I use your email and WhatsApp number for two things: to send you your private link, and occasionally to ask how you are getting on with it. I do not add you to a mailing list, I do not sell or share your details, and I do not pass them to advertisers. Your contact details are stored in the same Supabase database (EU region, London) and are readable only by me — never by other athletes, and never in the public part of the site.

Once set up, the free tracker works exactly as described in 2.3: what you log is stored on your device and backed up to your own private record, and the leaderboard and Roll Call remain opt-in. Free users and coached athletes share the same board, so if you join it, my coaching clients can see your display name, points, rank and chosen title — and your Roll Call sentence if you write one.

Ask me at any time and I will delete your account, your contact details and everything you have logged. There is no notice period and you do not have to give a reason.

Lawful basis: consent (Article 6(1)(a)) — you asked for the link, and you can withdraw at any time.

2.5 Analytics

I use Plausible Analytics to understand aggregate, anonymous visit patterns (page views, referrer, country, device type). Plausible is a privacy-first, cookie-less analytics service hosted in the EU. It does not set cookies, does not track users across sites, and does not collect personally identifiable information. No individual user can be identified from the data I receive.

Lawful basis: legitimate interests (Article 6(1)(f)) — measuring aggregate traffic to improve the site. Because no identifiers are stored or returned to your device, this processing falls outside the scope of PECR / ePrivacy cookie-consent requirements.

2.6 Embedded video (YouTube)

Exercise demonstration videos are embedded from YouTube using the youtube-nocookie.com “privacy-enhanced” domain. YouTube will not set tracking cookies until you actively press play. When you do press play, Google (YouTube’s operator) may collect data according to Google’s privacy policy. I have no control over that processing. If you prefer not to share data with Google, do not press play on embedded videos.

2.7 Hosting and server logs

This site is hosted on GitHub Pages. GitHub may retain temporary request logs (including IP address and user-agent) for security, abuse prevention, and service operation. See GitHub’s privacy statement. I do not receive or access these logs.

3. What I do not do

4. Retention

Intake-form submissions are retained for as long as our coaching relationship is active and for up to 24 months afterwards, so I can respond to follow-up questions and honour any obligations. You may request earlier deletion at any time.

Habit-tracker signups (section 2.4) are retained for as long as you use the tracker, and deleted on request — contact details, logged history, board entry and unlocked titles together.

Plausible’s aggregate, anonymous analytics data is retained by Plausible per their policy and cannot be linked back to you individually.

Local-storage data on your device persists until you clear it yourself.

5. International transfers

Web3Forms, Plausible, GitHub, and YouTube are operated by organisations that may process data in the UK, EU, or other jurisdictions (including the United States). Where data leaves the UK or the EEA, these providers rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions. You can review each provider’s policy via the links above.

6. Your rights

Under UK and EU GDPR you have the right to:

To exercise any of these rights, email amirardekanian@gmail.com. I will respond within one month.

7. Security

I take reasonable, proportionate steps to protect your data: encrypted transport (HTTPS), the minimum collection necessary, strong account security on my email and hosting providers. No transmission over the internet can be guaranteed 100% secure; if I ever become aware of a personal-data breach that is likely to result in risk to your rights, I will notify you and the ICO as required by law.

8. Children

This service is intended for adults. If you are under 18, please apply only with a parent or guardian’s involvement.

9. Changes to this notice

If I update this notice, I will change the “last updated” date at the top. Material changes will be communicated to active coaching clients by email.

← Back to home