Legal
Privacy Policy
Effective date: 3 October 2026
Last updated: 5 November 2026
This policy explains what personal data Vitindo processes, why, and what your rights are. It covers two groups of people: trainers and studio staff who use Vitindo (“you”), and the clients whose training, progress and memberships trainers record in Vitindo (“members”).
1. Who we are
Vitindo is operated by Robert Dimov, trading as Vitindo, in the Republic of North Macedonia (“Vitindo”, “we”, “us”). You can reach us at support@vitindo.com or +389 72 212 764.
2. Our role, and yours
- Account data (the details of the people who use Vitindo): we decide how it is used, so we are the controller.
- Member data (the clients you record): you, or the studio you work for, decide what is recorded and why, so you are the controller. We process it only to provide Vitindo to you, as your processor.
- Purchases: paid plans are sold by Paddle, our online reseller and the Merchant of Record for every order (see section 5). Paddle and Vitindo are each an independent controller of the purchase data they hold. Paddle's own processing is described in Paddle's Privacy Notice.
If you are a member and have a question about your data, please contact your trainer or studio first. You can also write to us and we will pass your request on.
3. What we process
Account data
- Your name, email address and a securely hashed password (we never store or see your password itself).
- Your organization's name and type (personal trainer or gym / studio), its locations, and the role and locations of each team member.
- Your organization's plan and trial dates.
- If you subscribe to a paid plan: the identifiers Paddle gives your customer record, subscription and checkout, which price you pay, and the subscription's status and billing-period dates. You enter your payment details and billing address in Paddle's checkout, not in Vitindo; we never receive or store your card details. Paddle makes the purchase records it holds — such as the buyer's name, email address, country or billing address, and purchase history — available to us so that we can provide the service, support you and keep business records.
- If you signed up through one of our campaign links, which campaign the link belonged to (for example “instagram, launch”), and your answer to “How did you hear about Vitindo?” if you gave one. It is carried in the link itself — no cookie or tracker is used.
Member data, entered by trainers
- Name and, if entered, email address, phone number and height.
- Membership start and end dates, and the reminder emails sent about them.
- Workouts: exercises, sets, weights, repetitions, notes and dates.
- Progress measurements such as body weight, body-fat percentage and other measurements the trainer chooses. Some of this can be health-related data.
Technical data
- Your IP address, used by our servers to deliver the service and to protect it, for example by limiting repeated sign-in attempts.
- Server logs recording what happened (for example “reminder sent”, or an error), with a request reference, your user and organization identifiers and timestamps. They are designed not to contain passwords, email addresses or message contents.
- Anonymous daily counts of steps on our website and signup page (see section 8). We do not link them to you.
4. Why we process it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating and running your account, and providing Vitindo's features | Performance of our contract with you |
| Sending account emails (confirming your address, invitations, password resets) | Performance of our contract with you |
| Linking a paid subscription bought through Paddle to your organization, keeping your access up to date, and helping with billing questions | Performance of our contract with you |
| Sending membership reminder emails to members, on your behalf | Your instructions as controller (we are your processor) |
| Keeping Vitindo secure, preventing abuse, fixing faults and keeping backups | Our legitimate interest in a secure, reliable service |
| Counting, in anonymous daily totals, how many visits reach each step of signing up, so we can fix what gets in the way | Our legitimate interest in improving our website and signup |
| Keeping records we are legally required to keep, such as accounting records | Legal obligation |
If you record health-related data about members (such as body weight or body fat), you are responsible, as controller, for having a lawful basis for it — usually the member's explicit consent.
We do not sell personal data, use it for advertising, or build profiles of members.
5. Who we share it with
We use a small number of service providers (sub-processors) to run Vitindo. They process data only on our instructions:
| Provider | What for | Location |
|---|---|---|
| Hetzner Online GmbH | The server that runs Vitindo and its database | Germany |
| Brevo | Sending emails (account emails and membership reminders) | European Union |
| Backblaze (B2 Cloud Storage) | Off-server copies of the database backups, encrypted on our server before they are uploaded | EU Central region |
We also use two monitoring services: Healthchecks.io, which alerts us if a scheduled backup or our own error check does not report in, and UptimeRobot, which checks that the app's public health address responds. They receive technical status information only, not account or member data.
Paddle (Paddle.com Market Limited and its affiliates) sells Vitindo's paid plans as our online reseller and Merchant of Record. When you buy a subscription, you give your payment and billing details to Paddle, which processes them as an independent controller under its own Privacy Notice — for example to take payment, charge sales tax, prevent fraud and issue invoices. We tell Paddle which Vitindo organization a checkout belongs to, and Paddle shares the purchase records described in section 3 with us. Questions about a payment, refund or the data Paddle holds can go to Paddle at paddle.net or to us.
We may also disclose data where the law requires it.
6. How long we keep it
- Account and member data: for as long as your organization uses Vitindo. When a trial or plan ends, the account becomes read-only and the data is kept so you can continue later, until you ask us to delete it. If we ever decide to delete inactive organizations automatically, we will update this policy and email the account owner before any data is deleted.
- Server logs: about 30 days.
- Anonymous daily counts: for as long as they are useful. They hold totals only.
- Backups: encrypted copies of the database are kept for up to about 5 weeks. Data you delete disappears from the backups as they expire.
- Subscription records (the Paddle identifiers, price and status described in section 3): for as long as your organization uses Vitindo, and afterwards for as long as we need them for our accounting records, which we must keep for the period the law requires.
7. How we protect it
- All traffic to Vitindo is encrypted (HTTPS).
- Passwords are stored only as secure hashes.
- Each organization's data is kept separate from every other organization's, and team members see only the locations they are given.
- Backups kept away from the server are encrypted before they leave it.
8. Cookies and measurement
This website (vitindo.com) does not set cookies and does not use advertising trackers or third-party analytics. The Vitindo app (app.vitindo.com) uses one strictly necessary cookie to keep you signed in; it expires after 14 days and is not used for tracking.
We measure our own website and signup page in a simple way: our server adds one to a daily total when a visit reaches a step, such as opening the home page, tapping “Start free trial”, opening the signup form, starting it, submitting it, creating an account, or hitting a kind of error. A total can include the campaign tags in the link you followed (for example “instagram, launch”). Those tags name campaigns, not people: we do not use per-person links.
We store only the date, the step, the kind of error, those tags and the count. These counts do not contain your IP address, name, email address, account or any identifier for you or your device, and we do not use them to work out who made a visit. Your IP address is used briefly in memory to limit repeated requests, as it is for sign-in attempts. Nothing is shared with advertising or analytics companies.
9. Your rights — and how to export or delete your data
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict its processing, and to complain to a data protection authority.
- Trainers and studios: write to support@vitindo.com from your organization owner's email address. We confirm the request with the owner before acting, and we never delete an organization on the strength of an email alone.
- Export: we send your organization's data — members, workouts, templates, exercises, progress measurements and reminder history — as files.
- Deletion: we delete your organization and everything in it. It cannot be undone. Deleted data leaves our backups within about 5 weeks.
- Members: please ask your trainer or studio, who controls your data; we will help them respond.
Data protection authority: Vitindo is operated from North Macedonia, where the supervisory authority is the Personal Data Protection Agency (azlp.mk). If you live in the European Union or elsewhere, you can also complain to the data protection authority where you live.
10. Where your data is, and international transfers
- Vitindo's server, database and email provider are in the European Union: Hetzner in Germany, Brevo in the EU, and the encrypted backups in Backblaze's EU Central region.
- Vitindo is operated from North Macedonia, which is outside the EU/EEA. We access the data from there only to run, support and protect the service.
- Paddle, as an independent controller, may process purchase data in other countries, including the United Kingdom; its Privacy Notice explains how it protects that data.
11. Changes to this policy
If we change this policy in a way that matters, we will tell account owners by email before the change takes effect.
12. Contact
Robert Dimov, trading as Vitindo · support@vitindo.com · +389 72 212 764