Privacy statement

PFH Performance is the guidance app of Passion for Health. Your practice and your own therapist use this app to guide your rehab or performance program.

Your own practice is responsible for how your data is handled (the controller under privacy law). The app is the tool your therapist uses to guide your program.

• Account and contact details (name, email address).
• Role and practice link (client, therapist, admin).
• Your program and plan phases (content, phase, frequency).
• Sessions and session completion (week, status).
• Executed exercise details you fill in (such as weight or seconds).
• Check-ins: pain, effort (RPE), motivation and free-text feedback.
• Progress summaries derived from your sessions.
• Coach contact details of your practice (such as a WhatsApp number).
• Technical support details, only when needed for a reported issue.

No advertising or tracking cookies are used. Only functional cookies are set to keep you logged in securely, and your language preference is stored on your own device.

Your data is used to guide you within your program: preparing sessions, following progress and adjusting your plan. The basis for this is the guidance relationship you have with your practice.

Your data is not sold, not used for advertising, and there is no automated decision-making without a person involved: your therapist always assesses your progress personally.

You see your own environment. Only the guiding team of your own practice can see your program data. Access rules per role and practice are enforced in the database, and every user logs in with a personal account.

The app runs at professional hosting parties: the database and the login system at Supabase, the app itself at Vercel. Emails (such as invitations and password resets) are sent via Passion for Health's own mail server.

No data is shared with advertising networks or data brokers. Formalising the processing agreements with these hosting parties is part of the ongoing legal review (see Pilot version below).

The connection to the app is always encrypted (https). Every user has a personal account; passwords are never stored in readable form. Access rules per role and practice are enforced in the database itself.

Invitation and password-reset links are personal, temporary and single-use. No system is ever 100% watertight; we keep improving security step by step and act immediately on signals.

While your program is running, your data is kept so your therapist can follow your progress. If your program ends or your account is set to inactive, your program data remains stored as part of your file at the practice.

Permanent erasure happens on request via the practice's privacy process and is never an automatic app action — this prevents your file from disappearing by accident. Formal retention periods are being set as part of the ongoing legal review.

You can request access, correction, a copy, removal, restriction of use or object to the use of your data. Contact your therapist or the practice for this. Requests are handled personally and formally through the practice's privacy process; removal is never an automatic app action.

You will receive a response as soon as possible, at the latest within the legal period of one month. Not satisfied with how your request was handled? You always have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Is the app used by someone younger than 16? Then this happens in consultation with a parent or guardian and the practice. Parents or guardians can exercise the same privacy rights on behalf of their child via the practice.

Should something go wrong with your data despite all measures (a data breach), we follow the legal notification duty: we investigate the incident, limit the impact, and inform the practice and — where required — you and the Dutch Data Protection Authority.

Notes and check-ins are meant for guidance within your program. Do not share unnecessary sensitive information in free-text fields.

This statement can be updated, for example when the app gains new features or when the legal review is completed. The date at the top always shows the latest version. Important changes are communicated via the app or via the practice.

Questions about privacy or about this statement? Contact your own therapist or the practice Passion for Health — in person, or via the practice's regular contact channels. They will help you or pass your question on to the right person.

This app is a pilot version. The formal legal and privacy review (including processing agreements and retention periods) is still being completed. This statement will be extended once that review is done.