Privacy policy
Last updated: 25 October 2026
This policy explains what personal data Goodform processes, why, on what legal basis, for how long, who receives it and how to use your rights. Goodform is published by Iterative Bits SAS, 60 rue François 1er, 75008 Paris.
1. Who is responsible for your data
Iterative Bits SAS is the data controller for:
- the accounts of coaches, their Goodform subscription and its invoices;
- signing in and the security of every account, coaches and clients;
- visitors of the website goodform.coach, the waitlist before launch and the support requests sent to us.
For the data a coach records about their clients (profile, bookings, purchases, health questionnaire, programs, workouts, nutrition, check-ins, messages), the coach is the data controller and Iterative Bits SAS is their processor: we process it only to provide Goodform to the coach, on their instructions. If you are a client, contact your coach first about this data; we help them answer you.
2. The data we process
- Identity and contact: name, email address, phone number, photo if you add one.
- Coach business details: legal status, SIRET, address, VAT status, Stripe account status.
- Subscription and payments: plan, invoices, the last four digits and expiry of the card (the full card number stays with Stripe).
- Coaching data recorded by coaches and clients: bookings, purchases, goals and health questionnaire, measurements and progress photos, programs and workouts, meal plans and meals, check-ins, messages and videos, reviews.
- Technical data: connection logs (IP address, date, browser), the phone’s notification address if you switch notifications on, error reports.
- Support requests: your name, email address and message.
- Waitlist before launch: your email address and, if you give them, your first name, whether you are a coach or a client, how many clients you have and your main channel for finding them; the language and address of the page where you sign up, the website you came from and the campaign or link that brought you (written in the page’s address), the date of your consent.
- Invitations between coaches: the name and email address of a coach invited by another coach. This data does not come from you but from the coach who invites you (article 14 of the GDPR); the invitation says so and lets you stop invitations in one click.
- Referrals between coaches: who referred whom, the referred coach’s invoices that count, the rewards and their transfers; to rule out self-referrals, a comparison of the email, phone, SIRET and card fingerprint (a code from Stripe, never the number) of the referrer and the referred coach.
- Content reports: the address of the content, your explanation and, except for child sexual abuse, your name and email.
3. Why we use it, and on what legal basis
- Providing your account and the platform, and sending the emails the service needs (sign-in codes, booking confirmations, invoices): performance of the contract (terms of use).
- Billing the Goodform subscription and keeping invoices: performance of the contract and legal obligation (accounting).
- Computing and paying the rewards of the referral program: performance of the contract (terms of sale) and legal obligation (accounting); checking that a coach does not refer themselves: the legitimate interest of Goodform in preventing fraud.
- Keeping the platform secure, preventing fraud and abuse, keeping connection logs: legitimate interest, and the legal obligation of hosts to keep connection data.
- Answering support requests: performance of the contract, or our legitimate interest in helping visitors.
- Telling you by email when Goodform opens, when you join the waitlist, and knowing better who is waiting for it: your consent, which you can withdraw at any time (unsubscribe link in every email, or by writing to privacy@goodform.coach).
- Sending the invitation a coach sends to another coach, and its reminders: the legitimate interest of Goodform and of the inviting coach; we send nothing else to that address, and one click in the email stops invitations (the address is then kept on our opposition list, so it is never invited again).
- Handling reports of illegal content and telling people our decisions: legal obligation (EU Digital Services Act).
- Improving Goodform with statistics that identify no one: legitimate interest.
- Counting visits to a coach’s page with the mc_vid cookie: your consent, which you can withdraw at any time (cookie policy).
- Answering the authorities and defending our rights: legal obligation and legitimate interest.
We do not sell personal data, do not use it for advertising and make no automated decision about you.
4. Health data
A coach can ask a client about their health (injuries, conditions, goals) to coach them safely. This data is sensitive: it is only collected with the client’s explicit consent, recorded with its date, the version of the wording shown and who gave it; it is visible only to the client and their coach (never to another coach), and it is erased with the client’s data. If the coach includes it in an AI-assisted import, it is sent to Anthropic as described below. The client can withdraw their consent at any time from their profile, or by asking their coach: their answers are then deleted and their coach is told.
5. AI-assisted import
A coach can bring their existing records into Goodform (a client list, programs, meal plans) from a file, a shared sheet, pasted text or a photo. When the coach chooses the AI-assisted import, what they send is passed to Anthropic (Claude API), our sub-processor, which reads it and puts it into Goodform’s format. It can include clients’ names, contact details and notes and, if the coach includes them, health information.
- Anthropic processes this data only to answer the request and does not use it to train its models (Anthropic’s commercial terms).
- Anthropic deletes it within 30 days at most, unless it is flagged for breaching Anthropic’s usage policy or the law requires it to be kept.
- Goodform keeps nothing of what was sent: nothing is saved until the coach has checked and confirmed the result, and no decision is taken about anyone.
- The data is processed in the United States, and the model may run in other countries: the transfer is framed by the standard contractual clauses of the European Commission (Anthropic’s data processing addendum).
A coach who prefers not to use it can use the import without AI, which sends nothing to Anthropic.
6. How long we keep it
- Coach account and content: while the account is open. When it closes, the coach has 30 days to export their data, which is then deleted within 30 days; backups erase themselves within a further 30 days.
- Inactive coach account: a coach who no longer pays a subscription (trial over or subscription stopped) and has not signed in for 24 months is told by email 30 days before; the account is then closed and its data deleted as above, except invoices.
- Clients’ data processed for a coach: as long as the coach keeps it, and deleted when the coach deletes the client or closes their account. A client archived for 3 years, and a prospect with no activity for 3 years, are anonymised automatically (their invoices stay). Exception: an archived client who sent correction videos is not anonymised automatically for now; their data and videos stay until the coach deletes the client, or the client asks.
- Invitations between coaches: 12 months after the last invitation; an address that no longer wants invitations is kept for as long as the service runs, to respect that choice.
- Referral rewards and their transfers: 10 years, like accounting documents; card fingerprints: as long as the account is open.
- Content reports: 3 years after the decision.
- Health questionnaire: until the client withdraws their consent or the client is deleted.
- Invoices and accounting documents: 10 years, as French law requires (article L123-22 of the Commercial Code), including the coach’s invoices to their clients.
- Proof of acceptance of the legal texts: while the account is open, then 5 years.
- Connection logs: 1 year.
- Notifications, and the record of emails and text messages sent: 12 months.
- Error reports: 90 days.
- Support requests: 12 months.
- Waitlist: until Goodform opens, then 12 months, or until you unsubscribe if that is sooner.
- Visit statistics of coach pages: 25 months.
- Sign-in codes: 1 hour.
- What a coach sends for an AI-assisted import: not kept by Goodform once the result is shown; deleted by Anthropic within 30 days at most (see “AI-assisted import”).
7. Who receives it
- The people at Iterative Bits SAS who need it for their work, bound by confidentiality.
- The coach, for the data of their own clients; the client, for what their coach shares with them.
- Our sub-processors, listed below, only for the service they provide to us.
- The authorities, when the law requires it.
8. Sub-processors
These companies process personal data on our behalf, under a contract that obliges them to protect it (article 28 of the GDPR). We tell coaches before adding a new one, and they can object.
Sub-processors of Goodform Company What for Where the data is Transfer safeguards Supabase Database, sign-in and file storage European Union Standard contractual clauses Cloudflare Website and application hosting European Union and United States Data Privacy Framework and standard contractual clauses Stripe Online payments (clients’ purchases and the Goodform subscription) European Union and United States Data Privacy Framework and standard contractual clauses Brevo Emails and text messages European Union No transfer outside the EU Bunny.net Video hosting and playback European Union No transfer outside the EU Google Firebase Phone notifications European Union and United States Data Privacy Framework and standard contractual clauses Sentry Error reports European Union and United States Data Privacy Framework and standard contractual clauses WorkoutX Exercise library (receives no personal data) Not applicable No personal data sent Anthropic Data import and formatting United States and other countries Standard contractual clauses List of sub-processors last updated: 23 October 2026
9. Transfers outside the European Union
Our database and files are hosted in the European Union. Some of our providers are companies based in the United States: a transfer to them, for example for website delivery, error reports or the AI-assisted import, is framed by the European Commission’s adequacy decision for the EU–US Data Privacy Framework when the company is certified under it, and by the standard contractual clauses adopted by the Commission. The table of sub-processors gives the safeguard of each one.
10. Security
Connections are encrypted, there is no password to steal (sign-in by emailed code), each coach’s data is isolated from every other coach’s in the database, access is limited to those who need it, and the data is backed up regularly. If a breach affects your data and creates a risk for you, we tell the CNIL within 72 hours and tell you as soon as possible.
11. Terms of processing for coaches (article 28 of the GDPR)
When Iterative Bits SAS processes clients’ data for a coach, it undertakes to:
- process it only to provide Goodform, on the coach’s documented instructions, which are the use the coach makes of Goodform;
- keep it confidential and secure, and have it processed only by people bound by confidentiality;
- use only the sub-processors listed above, under the same obligations, and tell the coach before any change;
- help the coach answer their clients’ requests, carry out impact assessments and handle breaches, and tell the coach of any breach without undue delay;
- at the end of the subscription, let the coach export the data, then delete it, except what the law requires us to keep;
- make available the information needed to show these obligations are met.
These commitments are set out in full in the data processing agreement (goodform.coach/data-processing-agreement), which each coach accepts when creating their account and can download from their settings; a signed copy can be asked for at privacy@goodform.coach.
12. Your rights
You have the right to access your data, correct it, erase it, limit its use, object to its use, receive it in a reusable format (portability), withdraw your consent at any time, and give instructions on what happens to it after your death.
Coaches can export all their data from Settings. To use your rights, write to privacy@goodform.coach from the address of your account. We answer within one month. For data your coach holds about you, contact your coach or write to us and we pass your request on.
13. Complaints
If you think your rights are not respected, you can complain to the CNIL (Commission nationale de l’informatique et des libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr
14. Contact
For any question about your data, write to privacy@goodform.coach. Iterative Bits SAS has not appointed a data protection officer: this address handles every request.
15. Minors
Goodform is for adults. A coach who coaches a minor collects the agreement of a parent or legal guardian, who exercises the minor’s rights with them.
16. Changes to this policy
We update this policy when what we do with data changes. The date at the top says when it last changed. We tell you by email of any important change.