Privacy
statement.

1.1 The controller is iruoy, a sole proprietorship based in Groningen, registered with the Dutch Chamber of Commerce (KvK) under number 98984039.

1.2 For any question about privacy and to exercise your rights, email info@iruoy.nl.

2.1 iruoy.nl measures visits with Umami. Umami is self-hosted by iruoy, sets no cookies and does not track visitors across other websites. iruoy only sees anonymised statistics, such as pages visited, referring websites, device type and country, and click events such as clicking a link or button.

2.2 The legal basis is iruoy's legitimate interest in knowing how the website is used and improving it.

2.3 iruoy.nl has no contact form. If you email hello@iruoy.nl or hallo@iruoy.nl, that email arrives through Hostinger, iruoy's email host. iruoy only uses your message and contact details to reply to you.

2.4 iruoy.nl sets no cookies, which is why there is no cookie banner.

3.1 For clients and prospects, iruoy processes name, contact details, company details, quotes, invoices and correspondence.

3.2 The legal basis is preparing and performing the agreement, and for the accounting records the statutory retention obligation.

3.3 For this, iruoy uses the following processors:

• Rabobank: business bank account and payment of invoices;
• Google Sheets: bookkeeping;
• Hostinger: email.

3.4 iruoy keeps the accounting records, including quotes and invoices, for 7 years because of the tax retention obligation. Other correspondence is kept for as long as the relationship lasts; after that it is deleted on request.

4.1 George (george.iruoy.nl) is a personal endurance coaching app for iPhone. It is only for Youri and friends he invites. George is not public, free and not a commercial product.

4.2 George processes the following data:

• your account;
• your training goals;
• your check-in answers, including about pain and illness;
• your chat conversations with the coach;
• from Garmin, if you connect it: activities and health data such as sleep, heart rate variability (HRV) and resting heart rate;
• from intervals.icu, if you connect it: your training calendar and workouts.

4.3 Health data is special category personal data (article 9 GDPR). George only processes it with your explicit consent, which you give when connecting Garmin or intervals.icu. You withdraw that consent by disconnecting or by having your account deleted.

4.4 Coaching conversations run through the API of a single language model provider: Google, Anthropic or Mistral. Which one follows from an evaluation. With each request, the relevant data of your own is sent along as context. iruoy does not use this data to train models.

4.5 Push notifications are sent through the Apple Push Notification service.

4.6 George's data is stored in a database on a VPS of Bakker IT in the Netherlands. iruoy.nl and Umami run on the same server.

4.7 iruoy keeps your data for as long as your account exists. If you ask for deletion via info@iruoy.nl, your data is deleted within 30 days, backups included.

5.1 iruoy does not sell personal data. iruoy only shares personal data with the processors named in this statement, and only for the purposes named.

6.1 Under the General Data Protection Regulation (GDPR) you have the following rights:

• access to your data;
• rectification of incorrect data;
• erasure of your data;
• data portability;
• restriction of processing;
• objection to processing.

6.2 Send your request to info@iruoy.nl. iruoy responds within 30 days.

6.3 If you disagree with how iruoy handles your data, you can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

7.1 iruoy may change this privacy statement. A change is published as a new version, with a new version number and a new effective date, at the same URL.

7.2 The Dutch text of this privacy statement is binding. Translations are provided for information only.