Privacy Policy

1. Who we are

90+ is a trading name of Rich Business Consultancy Ltd, a company registered in England and Wales (company number 17030629), with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ (“we”, “us”, “our”).

We are the data controller for personal data we collect through the 90+ app and website. If you have any questions about this policy or how we handle your data, contact us at hello@train90plus.co.uk.

2. What we collect

• Account data - email address, display name, password (stored hashed), and any profile details you add.
• Session data - the workouts you generate, save and complete, including position, intensity profile, and results.
• Performance data - when you use Live Mode, GPS location is used only on your device to calculate distance and speed. We store the resulting metrics (distance, top speed, time at each intensity), not the raw GPS trail.
• Billing data - handled by Stripe. We receive a customer ID, subscription status and the last four digits of your card, never the full card number.
• Technical data - IP address, device type and basic analytics needed to keep the service running and secure.

3. How we use it

We use your data to:

• Provide the 90+ app, your account and your workout history.
• Process payments and manage your subscription.
• Send essential service emails (sign-in links, receipts, important changes).
• Improve the product and keep it secure.
• Comply with our legal obligations.

We do not sell your personal data. We do not use your data for advertising.

4. Legal basis (UK GDPR)

We rely on contract to deliver the service you sign up for, legitimate interests to keep the service safe and improve it, legal obligation for things like tax and accounting records, and consent for any optional marketing communications (you can withdraw consent at any time).

5. Who we share data with

We use a small number of trusted providers to run 90+: cloud hosting and database (Supabase / Lovable Cloud), payments (Stripe) and transactional email. They process data on our behalf under written contracts and only for the purposes set out above.

6. International transfers

Some of our providers process data outside the UK. Where they do, transfers are protected by the UK International Data Transfer Agreement or equivalent safeguards.

7. How long we keep data

We keep account and session data for as long as your account is active. If you delete your account we will delete or anonymise your data within 30 days, except where we are required to keep records (for example billing records, which we keep for 6 years to meet UK tax law).

8. Your rights

You have the right to access, correct, delete or port your personal data, and to object to or restrict processing. To exercise any of these rights, email hello@train90plus.co.uk. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk).

9. Children

90+ is intended for users aged 16 and over. We do not knowingly collect data from anyone under 16. See our Terms of Service for more on age requirements.

10. Changes

We may update this policy from time to time. If we make material changes we will tell you by email or in-app before they take effect.