Who is responsible
Suivi provides the platform and is responsible for how the service stores and secures your data. Each coach is responsible for the client records they create and the coaching decisions they make inside their own workspace. When a coach works inside a gym on Suivi, the gym is responsible for its whole workspace: its staff accounts and the records of all its clients. If you are a client, your coach (or their gym) decides what is recorded about you; Suivi keeps it safe and available to the people entitled to see it.
What we collect
Account and identity details (name, email, phone, language, timezone), workspace content you enter (clients, plans, exercises, meals, recipes, notes, messages, check-ins, todos), payment records your coach logs against your account, and technical data needed to run the service such as sign-in events, device tokens for notifications, and error logs.
Health and body data
Coaching involves sensitive information: body measurements, progress and posed photos, intake answers about health history, medication, injuries, and food preferences. Under Tunisian law this is sensitive data. It is entered by you, or by your coach on your behalf with your agreement, and by doing so you consent to it being processed to deliver your coaching; you can withdraw that consent at any time by asking your coach or us. It is visible only to you, to the professionals serving you, and, when your coach works in a gym, to that gym's management. It is never used for advertising or sold to anyone.
If your coach works in a gym
Some coaches work inside a gym or studio that uses Suivi as a team. In that case the gym, not the individual coach, holds your client relationship. The gym owner and the people they authorise can view your record, your plans, your progress and your messages with the gym's coaches, in read-only mode, to supervise the service and to take over when needed. The gym can move you to another of its coaches: your history moves with you, and your previous conversation is closed and kept for the record. Payments to a gym are recorded by the gym. The app tells you when your coach belongs to a gym.
How we use it
We use your data to run your workspace, sign you in, deliver plans and check-ins between coach and client, send the notifications you have enabled, track pack and payment status, and keep the service secure and working. We also use aggregate, non-identifying usage data to fix problems and improve the product.
AI processing (Suivi IA)
When a coach uses Suivi IA, the relevant records from their own workspace are sent to our AI provider to produce an answer, a client summary, or a plan draft. Only data from that coach’s own practice is ever included, the AI produces drafts and summaries rather than actions, and every request is logged so usage can be audited. Your data is not used to train third-party models. Clients can decline AI-assisted suggestions in their intake preferences.
Who we share it with
We do not sell your data. It is processed by the technical providers required to run the service — hosting, database and file storage, push notification delivery, email delivery, and the AI provider described above — each only to the extent needed to deliver their part of Suivi. We may also disclose data where the law requires it.
How long we keep it
Workspace content is kept for as long as the account is active, because coaching history is the point of the record. When an account is deleted we remove or anonymise the associated data within a reasonable period, except where we must keep records to meet a legal or accounting obligation. Deleted files may persist briefly in backups before they expire.
How we protect it
Access is protected by password hashing and short-lived access tokens with server-side refresh rotation. Roles decide who sees what: a coach reaches only their own clients, a client reaches only their own record. Uploaded photos and files are served through expiring signed links rather than public URLs. No system is perfectly secure, so keep your password private and tell us immediately if you suspect an account is compromised.
Your rights
You can ask for a copy of your data, correct anything inaccurate, ask us to delete your account, or object to a specific use. Clients should normally ask their coach first, since the coach controls the client record; if that does not resolve it, write to us directly and we will act on it, subject to any legal obligations that require us to keep certain records.
Applicable law and your right to complain
Suivi processes personal data under Tunisian Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data. Some of our technical providers (hosting, notifications, AI) may process data outside Tunisia; we use them only to run the service and under the conditions the law sets. If you believe your data is not handled properly, contact us first; you can also refer the matter to the Instance Nationale de Protection des Données Personnelles (INPDP).
Contacting us about privacy
Send privacy questions, access requests, and deletion requests to info@suivi.tn, or use the contact page. Tell us the email address on the account and what you are asking for so we can act without a round trip.