CRIVIX

In short

CRIVIX uses what you enter to plan your football week and your own training sessions. For that we need your e-mail address, your football week and a few choices. Nothing more.
Answers about pain, sleep, energy and how heavy a session felt are health data. We only process them if you give separate consent for that, at your first Check-in. Without that consent CRIVIX works as normal, just without adaptations based on the Check-in. You can withdraw your consent at any time in Settings → Privacy and data; we then delete your health data immediately.
We keep health data for at most 90 days. The matches and team sessions in your schedule for at most 12 months, the results and reflections of matches and team sessions for at most 24 months. Most other data for as long as your account exists; all periods are listed in section 6.
To compose a training session we send a small, fixed set of data to our AI provider Anthropic, which processes it in the United States: your goal as a fixed choice, your training days and the time you have, your equipment, which days fall on or around your matches and team sessions, a few numbers about your football week and a selection of exercises made for you. Never your name, e-mail address, date of birth, free text, your Check-in answers, or a load or recovery score derived from them.
If you use your microphone in cue mode to start the next repetition with your voice, only your own phone measures how loud the sound is. Nothing is recorded, stored or sent. Tapping always works (section 13).
We use no tracking cookies, show no advertising and never sell your data.
You can download your data and delete your account at any time, in Settings.

1. Who is responsible for your data

CRIVIX (in oprichting), Christiaan Deniz (hereinafter: CRIVIX or we), is the controller for the processing of personal data described in this policy. Address and Chamber of Commerce number follow upon registration before the paid period.

Do you have a question about your data, or do you want to exercise one of your rights? E-mail support@crivix.app. CRIVIX has not appointed a data protection officer; the CRIVIX team answers privacy questions itself.

This policy applies to the CRIVIX website and app. Our cookie policy additionally applies to cookies and local storage. The rules for using CRIVIX are in the terms of service.

2. Which data we process

We only process data that you enter yourself or that arises from your use of CRIVIX. By area:

Account and invitation

Your e-mail address, your sign-in moments and your active sessions (also so that you can sign yourself out on other devices).
For an invitation: that we invited you and that, at that invitation, you confirmed that you are 18 or older and live in the Netherlands. We record that confirmation with your account (country, date and who recorded it on behalf of CRIVIX); without it you cannot use CRIVIX yet.

Profile

Your preferred name, position and optional second position, preferred foot, equipment, training location, maximum session duration, training days and goal.
If you fill them in: club and team, country and league, level, starter or substitute and your usual match minutes, technical and physical priorities, and sex.
Your language choice, your display preferences and your reminder settings.

Age

Your month and year of birth, and the moment at which we established that you are 16 or older (the minimum age for an account) and 18 or older (the limit of the pilot and of physical sessions). You enter your full date of birth once; we check it and do not keep it.

Football week and football history

The week you confirmed at the end of your start (which days are club, match, CRIVIX or free), for as long as your account exists.
Your standing football week (team-training days and times, match day), your matches and team sessions per week, your intentions for a team session and whether they came true, and the training focus per activity.
Match details you enter: opponent, venue, expected position or role and your intention.
What actually happened at a match or team session: minutes played, position, result, goals, assists, cards and your own rating of your match or session, plus your short reflection in free text (what went well, what went less well).
Your marks in the football journal.

Training and development

Your weekly plans and sessions with their status (planned, started, completed, skipped or stopped early, with a non-medical stop reason such as "no time"), extra and replacement sessions.
Your availability, your confirmation of the week and your requests to prepare a week.
Your development cycles, benchmarks and statistics.
For a test you run yourself: your attempts and the result, the day, the moment in your cycle (start, middle or end) and the conditions you state, such as the surface, your shoes and whether you filmed or timed by hand. If you film a sprint, the video stays on your own phone: you enter only the time, and we do not receive or keep any video.
The choice you make when CRIVIX proposes to adapt a session (accept the proposal, keep the original, rest or lighter), and the adapted session itself.
The layout of your Home screen and which explanations you have already seen.

Health data, only with your consent (see section 4)

Check-in: pain, type and location of the pain, sleep and energy.
After your own session: how heavy it felt (RPE), whether you had pain and where, how difficult it was, and your note.
After a match or team session: how heavy it felt (RPE) or how intense it was.
The reason "pain or complaint" if you stop a session for that reason.
Your height and body weight, and the value we derive from your body weight at a benchmark (your score per kilogram of body weight). We only ask for height and weight at the moment a benchmark needs them and only while your consent stands; without consent we do not ask for them and do not store them.
The health data from your Check-in that led to a session being adapted (the origin of that adaptation).
That you said you are coming back from an injury, since when, and when you said you may do everything again.

Consents and acceptances

Which version of the terms of service you accepted and when; that you confirmed the safety notice and when; and whether and when you gave or withdrew consent for health data, with the version of the consent text.

Composing sessions with AI

Per composition request: which fixed data was sent, the status, the outcome or the reason why no suitable session was available, and the composed session.

Subscription and payment

During the pilot you do not need a subscription: your admission gives you free access to CRIVIX Premium, without a code and without payment details, and we pass nothing to Stripe for it.
If you later choose a paid subscription yourself, we keep your subscription status, whether you cancelled or withdrew, the reason you may choose when cancelling and a reference to your customer number at our payment provider Stripe. Payment details such as your card or account number are then held only by Stripe and never by us.

Reminders and e-mail

Your reminder preferences and a log of the reminders we sent.
For service e-mails (sign-in code, welcome message, the inactivity warning): your e-mail address and the content of that e-mail.

Support and feedback

Messages via the contact form (name, e-mail address, subject, message) and via the feedback button in the app (type, your text, and automatically: the screen you were on, the app version, your language, the device type and the browser). The feedback button never includes health or Check-in data.
Your e-mail address, if you join the waiting list.
Your answers to our short questionnaires, if you fill them in.

Technical data

Your IP address, the time, the requested page and technical error messages in the logs of our hosting and database providers. If we use a separate error-monitoring service (see section 7), we automatically remove personal data from error reports as far as possible.
The cookies and local storage listed in our cookie policy.

You are not obliged to give us data. Without an e-mail address, month and year of birth, your football week and the basic choices from the intake, however, we cannot create an account or a plan for you.

3. What we use your data for, and on which legal basis

Your account and signing in. Legal basis: the performance of our contract with you (Article 6(1)(b) GDPR).
Planning your football week and composing, running and tracking your sessions, including your development and statistics. Legal basis: the performance of the contract (Article 6(1)(b) GDPR).
Operating cue mode with your voice. The sound is processed only on your own device and is not received or stored by us. To the extent that this is processing of personal data by us, the legal basis is the performance of the contract (Article 6(1)(b) GDPR). See section 13.
Checking your age. For the threshold of 16: a legal obligation (Article 6(1)(c) GDPR, in conjunction with Article 8 GDPR and Article 5 of the Dutch GDPR Implementation Act (UAVG)). For the threshold of 18 for physical training: our legitimate interest in safe training (Article 6(1)(f) GDPR).
Adapting your training and keeping it safe on the basis of your health data. Legal basis: your explicit consent (Article 9(2)(a) and Article 6(1)(a) GDPR; Article 22(2)(a) UAVG). See section 4.
Your subscription, payments and our administration. Legal basis: the performance of the contract (Article 6(1)(b) GDPR). Keeping our records: a legal obligation (Article 6(1)(c) GDPR; Article 52 of the Dutch General Tax Act (Algemene wet inzake rijksbelastingen)).
Service e-mails, such as your sign-in code, confirmations and the inactivity warning. Legal basis: the performance of the contract (Article 6(1)(b) GDPR). We only send reminders before your sessions if you have switched them on yourself.
Handling support and feedback. Legal basis: the performance of the contract where it concerns your account or the service (Article 6(1)(b) GDPR), and otherwise our legitimate interest in improving CRIVIX (Article 6(1)(f) GDPR).
Keeping the waiting list, confirming your sign-up and inviting you when there is a place. Legal basis: your consent, which you give by signing up (Article 6(1)(a) GDPR). You can withdraw it at any time by e-mailing support@crivix.app.
Security, preventing abuse and finding errors. Legal basis: our legitimate interest in a secure and working service (Article 6(1)(f) GDPR), and our security obligation (Article 32 GDPR).
Measuring whether CRIVIX works. We count events in the app without cookies and without tracking you, and during the invitation period we look, per participant under a code (without name or e-mail address), at whether onboarding, the first session and the weekly rhythm work. Legal basis: our legitimate interest in making the product work and improving it (Article 6(1)(f) GDPR). Health-related signals in that, such as a pain report, we process only with your consent (section 4).
Recording consents and acceptances. Legal basis: our legal duty to be able to demonstrate consent and acceptance (Article 7(1) and Article 5(2) GDPR), and after deletion of your account our legitimate interest in being able to prove that for a limited time (Article 6(1)(f) and Article 17(3)(e) GDPR).
Cleaning up inactive accounts and recording deletions. Legal basis: our duty not to keep data longer than necessary and to be able to demonstrate that (Article 5(1)(e) and 5(2) GDPR; Article 6(1)(c) and (f) GDPR).

Where we rely on a legitimate interest, we have weighed that the processing is limited, that you can reasonably expect it, and that it does not track or profile you. You can object to these processing activities (section 10).

5. How CRIVIX uses AI to compose sessions

When CRIVIX composes a training week or a single session, it may send a request to Anthropic's Claude service for that purpose. That request is built from a fixed, enumerated list of fields. Only data from these categories is included:

Your goal and your training options: your goal, as a fixed choice (for example "speed" or "other"; your own explanation is not included); your available equipment, as fixed choices only; your chosen training days and the number of sessions per week; and the time in minutes you have available for a session.
Your football week: your usual match minutes, the number of team sessions in that week, the dates of the days before your matches, so that the session on those days stays light, and for each date of that week a fixed word for how that day relates to your matches and team sessions (for example "match day" or "day after team session"). Of your matches and team sessions only those dates and words are included, no time, opponent or venue.
Fixed parts of your week: an exercise with its dose that returns on fixed dates, such as a fixed strength exercise or a speed block.
Your training rhythm: the number of consecutive missed sessions.
Dates: the week date, today's date and, where a single session is concerned, the date of that session.
When composing a single session: whether your next match or team session is within 24 or within 48 hours. The start time of the session and the time of your match or team session are not sent.
A selection from the exercise catalogue: the CRIVIX exercises that may be chosen from, selected and ordered for you (and sometimes per session), partly on the basis of your earlier sessions. An exercise may carry codes stating why it suits you (for example because of your goal, your development focus or your technical priorities), which leg you perform it with if you want to train your weaker leg, and whether it builds on exercises you completed earlier (repeat or a step further). The exercises themselves contain no personal data. Our own safety rules may leave exercises out of that selection, also on the basis of your Check-in or your return from an injury; the reason is not included.
On a second attempt: if our safety rules reject a proposed plan, a new request states which rules the proposal broke.

What is never included: your name, e-mail address, account ID, date of birth, free text, your answers from the Check-in and after a session about pain, sleep, energy and exertion, and load or recovery scores derived from them. This also holds if you gave consent for health data. We set the limits for training safely with our own rules on our own server; those rules also check the proposals the AI makes.

The request therefore contains no direct identifiers. It is not anonymous data: we can link a request to your account through our own records. It is therefore personal data without direct identifiers (pseudonymised), and we treat it as such. Legal basis: the performance of the contract (Article 6(1)(b) GDPR).

Anthropic processes this data only on our instructions, as a processor. Anthropic's data processing agreement forms part of its commercial terms; under those terms, our requests are not used to train Anthropic's models. Anthropic retains requests for a limited time under that data processing agreement; we keep our own composition requests and outcomes for at most 12 months. For customers in the EU the contracting party is Anthropic Ireland, Limited; the processing takes place in the United States. The safeguard that applies is described in section 8.

A composed session is a proposal, not a decision with legal effects: you can change, move or skip any session. There is therefore no automated decision-making within the meaning of Article 22 GDPR.

6. How long we keep your data

Health data: at most 90 days for as long as your consent stands, and immediately upon withdrawal of your consent (section 4). A daily database job deletes Check-ins older than 90 days and empties the health fields (exertion, pain, difficulty, note, height, weight and the benchmark value derived from your weight) of older sessions, matches, team sessions and benchmarks; it deletes your height and weight in your profile 90 days after you last entered them. For an adapted session, the health origin of the adaptation disappears after 90 days; the session itself remains.
Matches and team sessions in your schedule, with everything attached to them (intentions and outcomes, training focus, journal marks, contextual tips): 12 months after the date of the activity.
Results and reflections of matches and team sessions, and match details: 24 months after the date of the activity. This lets you compare a running season with the previous one. The health fields in them (exertion and intensity) follow the 90-day period.
Composition requests to our AI provider and their outcomes: 12 months.
Log of sent reminders: 12 months.
Profile, standing football week, weekly plans, sessions, development, benchmark results, statistics, settings and reminder preferences: for as long as your account exists.
Intake answers not yet in your profile: until you have answered the last questions and they are in your profile, and at most 30 days after your last change. A daily database job then deletes them.
Inactive account: if you do not use CRIVIX for 23 months, we send a warning by e-mail. If your account then remains unused, we delete it 24 months after your last activity, with all data.
Consents and acceptances: for as long as your account exists. Your acceptance of the terms and your confirmation of the safety notice disappear with your account. Of your consent for health data we keep limited proof in the deletion log for 5 years after deletion of your account: your account ID, the type of consent, the version and the times of giving and withdrawing. No e-mail address, no name, no content.
Deletion log: when an account is deleted we record, in a separate, shielded log: the account ID, a deletion number, the time and the status. We keep that for 5 years, as proof that the deletion was carried out. The same log also holds the giving and withdrawing of your consent for health data and the removal of an activity from your calendar (an identifier and the date); the health data itself is not in it.
Subscription and payment: during the pilot there is nothing to keep, because you do not need a subscription. If you later choose a paid subscription, we keep your subscription data for as long as your account exists, and invoices and payment records, as does Stripe on our behalf, for 7 years after the end of the financial year, because tax law requires it.
Support, contact form, feedback and questionnaires: 12 months after we receive your message or your answers. An e-mail to support@crivix.app sits in our support mailbox; we delete it by hand, also when you delete your account.
Waiting list: until you have an account or withdraw your consent, and at most 12 months after you signed up. We then remove your address from the list at Resend by hand.
Technical logs: at most 30 days. If we use an error-monitoring service, it keeps error reports for at most 90 days.
Database backups: encrypted, at most 30 days. Deleted data then disappears from the backups too.
Under 18 at the age check: you cannot do physical sessions and you can delete your account immediately. If you do not, the normal periods above apply.

If you delete your account, we delete all data of your account at once, except the limited proof mentioned above and the records we are legally required to keep.

7. Who we share your data with

We never sell your data, show no advertising and do not give your data to others for their own purposes. We do work with suppliers that process data on our instructions (processors). A processor receives only the data it needs for its task, may use it solely on our instructions and works for us under a data processing agreement within the meaning of Article 28 GDPR. We keep an overview of our processors with their role, the place of processing, the data processing agreement and the transfer safeguard (section 8); you can request that overview via support@crivix.app.

Supabase (Supabase, Inc., United States): our database, sign-in, storage and the daily clean-up jobs. Our database project is located in the Frankfurt region (Germany, EU).
Vercel (Vercel Inc., United States): hosting of the website and the app, and the related technical logs.
Resend (Resend, United States): delivery of our e-mails, such as your sign-in code, service e-mails, reminders, the waiting list confirmation and messages from the contact form, and keeping the waiting list.
Anthropic (for customers in the EU: Anthropic Ireland, Limited; the processing takes place in the United States): composing sessions with AI, as described in section 5.
Stripe (Ireland and United States): only if you later choose a paid subscription yourself: its registration and management, payments and invoices. During the pilot we pass nothing to Stripe for your free access.
Cloudflare (Cloudflare, Inc., United States): management of our domain name (DNS) and forwarding e-mail sent to support@crivix.app; Turnstile, the check against abuse on the sign-in page, the start and the waiting list, which processes technical data of your browser and your IP address for that; and R2, the storage of the separately shielded deletion log and of our encrypted backups.
SimpleBackups: making encrypted backups of our database. The company and the place of processing are stated in our processor overview.
Google (Gmail): the mailbox in which e-mail sent to support@crivix.app arrives and is kept, such as messages from the contact form. This is an ordinary Gmail account; unlike the other suppliers in this list, there is no data processing agreement with Google for it.
Plausible (Plausible Insights OÜ, Estonia): cookieless usage statistics, only when we have switched them on. See our cookie policy.
Error monitoring: at the time of this version we use no separate error-monitoring service; technical error messages are kept in the logs of our hosting and database providers. If we choose one, it will only be an EU-hosted service from which personal data is removed as far as possible, and we will add it to our processor overview.
Questionnaires: you fill these in within the app itself; no separate survey service is involved.

In addition, we may disclose data where the law requires us to, for example to a competent authority, or where necessary to defend our rights.

8. Transfers outside the European Economic Area

Some of our suppliers are US companies or use US (sub-)processors. Wherever possible we choose processing in the EU, such as our database project in Frankfurt. Data that is processed outside the European Economic Area, for example when delivering, forwarding and keeping e-mail (Resend, Cloudflare, Google), in the check against abuse (Cloudflare Turnstile) and when composing sessions (Anthropic), we transfer only under one of the safeguards the GDPR allows for that purpose:

the EU-US Data Privacy Framework, where the supplier is certified under it (European Commission adequacy decision (EU) 2023/1795; Article 45 GDPR); or
the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914; Article 46(2)(c) GDPR), supplemented with a transfer assessment and, where necessary, additional measures.

For each supplier we record in our processor overview which safeguard applies. You can request that overview and a copy of the safeguards used via support@crivix.app.

9. Security

Access to CRIVIX is currently by invitation only. You sign in with a one-time code by e-mail; there are no passwords that can leak.
Your data is shielded per account with access rules in the database. Only you see your own data; the CRIVIX team sees it only where necessary for support or safety.
The connections with the website, the app and the database are encrypted. Sensitive write actions, such as consents and deletions, run only through the server, never directly from the browser.
We store health data only for as long as you have active consent for it. We anchor that check in the database itself, so that it does not depend on a single screen in the app.
Should a data breach nevertheless occur that poses a risk to you, we report it to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and, if the risk is high, to you as well (Articles 33 and 34 GDPR).

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing we base on a legitimate interest (Articles 15 to 21 GDPR). You can withdraw consent you have given at any time; this does not make the processing before withdrawal unlawful.

In the app you can do most of this yourself:

Download your data: Settings → Privacy and data → Download data. You receive a file with the data of your account. It does not contain technical records such as running claims and any deletion request; you can ask for those via support@crivix.app.
Correct your data: in your Player profile and in Settings.
Withdraw consent for health data: Settings → Privacy and data. We then delete your health data immediately (section 4).
Delete your account: Settings → Account → Delete account. If you have a paid subscription, it is stopped first. Deletion is irreversible.

For all other requests, such as restriction or objection, e-mail support@crivix.app from the e-mail address of your account, so that we know the request comes from you. We respond within one month. For a complex request we may extend that period by up to two months; we will tell you within the first month if so. Exercising your rights is free of charge.

11. Age

The pilot is only for outfield players aged 18 and over. If the check shows you are younger, you cannot take part.
Physical sessions are available from the age of 18.
We check your age once using your date of birth and keep only your month and year of birth and the moment of the check.
If that check shows that you are under 18, you cannot do physical sessions and you can delete your account immediately.

12. Cookies and local storage

CRIVIX uses only what is strictly necessary: the sign-in cookies of our sign-in service, a cookie with your language choice, and local storage in your browser, among other things for your display preference, for an unsaved draft, for a session that carries on without a connection, for your choices in cue mode (section 13) and for the "Keep screen on" setting. We use no tracking cookies and no advertising cookies, and therefore no cookie banner. Everything about this is in our cookie policy.

"Keep screen on" is switched on by default. The app then asks your browser not to let your screen switch off while a session is running; no personal data is processed for this. You can switch the setting off during a session; the app remembers that choice only on this device.

13. Microphone in cue mode

For some exercises you can use cue mode: CRIVIX then shows a cue, such as "Left!", full-screen and with sound, and you react to it. You start the next repetition yourself, by tapping the screen or, if you choose to, by calling out a short, loud "yes!". Only for the latter does CRIVIX use your phone's microphone. Using the microphone is optional.

What for. Solely to detect that a short, loud sound occurs, so that you can start the next repetition without touching your phone. CRIVIX recognises no words, voices or persons: there is no speech recognition, and the sound is not used to identify you or to infer anything about you.
Only on your device. The sound is processed solely on your own device, in your browser: your phone only measures how loud the sound is. No sound is recorded or stored, and no sound or sound measurement is sent to CRIVIX, to our suppliers or to anyone else. All that reaches us is that you completed a repetition, exactly as when you tap; we cannot see whether you used your voice or a tap. The microphone is on only while cue mode is open and switches off as soon as you close cue mode.
Permission. We ask for the microphone only when you start cue mode. We first explain in the app how it works, and you choose: "Use microphone" or "Tap only". Only if you choose "Use microphone" does your browser or phone ask for permission to use the microphone. Tapping always works, even while the microphone is on.
Refusing, withdrawing and changing. You can refuse access to the microphone, and withdraw permission you have given at any time, in the settings of your browser or your phone. In the app you choose again between your voice and tapping via "Change" next to the "Start cue mode" button. If you refuse or withdraw access, the session continues by tapping; this has no other consequences.
Your choice on this device. Your choice between voice and tapping, the sound threshold your phone determines when you set up the microphone (a number, not a recording) and the sensitivity you choose are kept by the app only in your browser's local storage on this device, so that you do not have to set them up again for every session. This data is not sent to us. On another device or in another browser you choose again. You remove it by clearing your browser data; you can also reset your choice between voice and tapping via "Change". See also our cookie policy.

Because the sound does not leave your device, we do not store sound or sound data and do not process it on our own systems. To the extent that measuring the sound on your device nevertheless counts as processing of personal data by CRIVIX, the legal basis is the performance of the contract: you use a function that you request yourself (Article 6(1)(b) GDPR).

14. No automated decisions, no marketing

CRIVIX takes no decisions about you that are based solely on automated processing and have legal effects or similarly significantly affect you (Article 22 GDPR). Training proposals and adaptations are proposals that you can always change or skip.
We send no newsletters or advertising and do not use your data for advertising. If that ever changes, we will first ask for your separate consent.

15. Changes and versions

We may change this policy, for example when CRIVIX gains new functions or when the law changes. Every version has a version number and an effective date, shown at the top. For a material change we inform you in advance by e-mail or in the app. Earlier versions remain available on this page.

16. Complaints and contact

Do you have a question or a complaint about how we handle your data? E-mail support@crivix.app. We usually respond within 1 to 2 working days.

You also have the right to lodge a complaint with the supervisory authority: the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), autoriteitpersoonsgegevens.nl.

Your data in CRIVIX

Once signed in, you can download your data and permanently delete your account in CRIVIX yourself.

Join the waiting list

In short

CRIVIX uses what you enter to plan your football week and your own training sessions. For that we need your e-mail address, your football week and a few choices. Nothing more.
Answers about pain, sleep, energy and how heavy a session felt are health data. We only process them if you give separate consent for that, at your first Check-in. Without that consent CRIVIX works as normal, just without adaptations based on the Check-in. You can withdraw your consent at any time in Settings → Privacy and data; we then delete your health data immediately.
We keep health data for at most 90 days. The matches and team sessions in your schedule for at most 12 months, the results and reflections of matches and team sessions for at most 24 months. Most other data for as long as your account exists; all periods are listed in section 6.
To compose a training session we send a small, fixed set of data to our AI provider Anthropic, which processes it in the United States: your goal as a fixed choice, your training days and the time you have, your equipment, which days fall on or around your matches and team sessions, a few numbers about your football week and a selection of exercises made for you. Never your name, e-mail address, date of birth, free text, your Check-in answers, or a load or recovery score derived from them.
If you use your microphone in cue mode to start the next repetition with your voice, only your own phone measures how loud the sound is. Nothing is recorded, stored or sent. Tapping always works (section 13).
We use no tracking cookies, show no advertising and never sell your data.
You can download your data and delete your account at any time, in Settings.

1. Who is responsible for your data

This policy applies to the CRIVIX website and app. Our cookie policy additionally applies to cookies and local storage. The rules for using CRIVIX are in the terms of service.

2. Which data we process

We only process data that you enter yourself or that arises from your use of CRIVIX. By area:

Account and invitation

Your e-mail address, your sign-in moments and your active sessions (also so that you can sign yourself out on other devices).
For an invitation: that we invited you and that, at that invitation, you confirmed that you are 18 or older and live in the Netherlands. We record that confirmation with your account (country, date and who recorded it on behalf of CRIVIX); without it you cannot use CRIVIX yet.

Profile

Your preferred name, position and optional second position, preferred foot, equipment, training location, maximum session duration, training days and goal.
If you fill them in: club and team, country and league, level, starter or substitute and your usual match minutes, technical and physical priorities, and sex.
Your language choice, your display preferences and your reminder settings.

Age

Your month and year of birth, and the moment at which we established that you are 16 or older (the minimum age for an account) and 18 or older (the limit of the pilot and of physical sessions). You enter your full date of birth once; we check it and do not keep it.

Football week and football history

The week you confirmed at the end of your start (which days are club, match, CRIVIX or free), for as long as your account exists.
Your standing football week (team-training days and times, match day), your matches and team sessions per week, your intentions for a team session and whether they came true, and the training focus per activity.
Match details you enter: opponent, venue, expected position or role and your intention.
What actually happened at a match or team session: minutes played, position, result, goals, assists, cards and your own rating of your match or session, plus your short reflection in free text (what went well, what went less well).
Your marks in the football journal.

Training and development

Your weekly plans and sessions with their status (planned, started, completed, skipped or stopped early, with a non-medical stop reason such as "no time"), extra and replacement sessions.
Your availability, your confirmation of the week and your requests to prepare a week.
Your development cycles, benchmarks and statistics.
For a test you run yourself: your attempts and the result, the day, the moment in your cycle (start, middle or end) and the conditions you state, such as the surface, your shoes and whether you filmed or timed by hand. If you film a sprint, the video stays on your own phone: you enter only the time, and we do not receive or keep any video.
The choice you make when CRIVIX proposes to adapt a session (accept the proposal, keep the original, rest or lighter), and the adapted session itself.
The layout of your Home screen and which explanations you have already seen.

Health data, only with your consent (see section 4)

Check-in: pain, type and location of the pain, sleep and energy.
After your own session: how heavy it felt (RPE), whether you had pain and where, how difficult it was, and your note.
After a match or team session: how heavy it felt (RPE) or how intense it was.
The reason "pain or complaint" if you stop a session for that reason.
Your height and body weight, and the value we derive from your body weight at a benchmark (your score per kilogram of body weight). We only ask for height and weight at the moment a benchmark needs them and only while your consent stands; without consent we do not ask for them and do not store them.
The health data from your Check-in that led to a session being adapted (the origin of that adaptation).
That you said you are coming back from an injury, since when, and when you said you may do everything again.

Consents and acceptances

Which version of the terms of service you accepted and when; that you confirmed the safety notice and when; and whether and when you gave or withdrew consent for health data, with the version of the consent text.

Composing sessions with AI

Per composition request: which fixed data was sent, the status, the outcome or the reason why no suitable session was available, and the composed session.

Subscription and payment

During the pilot you do not need a subscription: your admission gives you free access to CRIVIX Premium, without a code and without payment details, and we pass nothing to Stripe for it.
If you later choose a paid subscription yourself, we keep your subscription status, whether you cancelled or withdrew, the reason you may choose when cancelling and a reference to your customer number at our payment provider Stripe. Payment details such as your card or account number are then held only by Stripe and never by us.

Reminders and e-mail

Your reminder preferences and a log of the reminders we sent.
For service e-mails (sign-in code, welcome message, the inactivity warning): your e-mail address and the content of that e-mail.

Support and feedback

Messages via the contact form (name, e-mail address, subject, message) and via the feedback button in the app (type, your text, and automatically: the screen you were on, the app version, your language, the device type and the browser). The feedback button never includes health or Check-in data.
Your e-mail address, if you join the waiting list.
Your answers to our short questionnaires, if you fill them in.

Technical data

Your IP address, the time, the requested page and technical error messages in the logs of our hosting and database providers. If we use a separate error-monitoring service (see section 7), we automatically remove personal data from error reports as far as possible.
The cookies and local storage listed in our cookie policy.

3. What we use your data for, and on which legal basis

Your account and signing in. Legal basis: the performance of our contract with you (Article 6(1)(b) GDPR).
Planning your football week and composing, running and tracking your sessions, including your development and statistics. Legal basis: the performance of the contract (Article 6(1)(b) GDPR).
Operating cue mode with your voice. The sound is processed only on your own device and is not received or stored by us. To the extent that this is processing of personal data by us, the legal basis is the performance of the contract (Article 6(1)(b) GDPR). See section 13.
Checking your age. For the threshold of 16: a legal obligation (Article 6(1)(c) GDPR, in conjunction with Article 8 GDPR and Article 5 of the Dutch GDPR Implementation Act (UAVG)). For the threshold of 18 for physical training: our legitimate interest in safe training (Article 6(1)(f) GDPR).
Adapting your training and keeping it safe on the basis of your health data. Legal basis: your explicit consent (Article 9(2)(a) and Article 6(1)(a) GDPR; Article 22(2)(a) UAVG). See section 4.
Your subscription, payments and our administration. Legal basis: the performance of the contract (Article 6(1)(b) GDPR). Keeping our records: a legal obligation (Article 6(1)(c) GDPR; Article 52 of the Dutch General Tax Act (Algemene wet inzake rijksbelastingen)).
Service e-mails, such as your sign-in code, confirmations and the inactivity warning. Legal basis: the performance of the contract (Article 6(1)(b) GDPR). We only send reminders before your sessions if you have switched them on yourself.
Handling support and feedback. Legal basis: the performance of the contract where it concerns your account or the service (Article 6(1)(b) GDPR), and otherwise our legitimate interest in improving CRIVIX (Article 6(1)(f) GDPR).
Keeping the waiting list, confirming your sign-up and inviting you when there is a place. Legal basis: your consent, which you give by signing up (Article 6(1)(a) GDPR). You can withdraw it at any time by e-mailing support@crivix.app.
Security, preventing abuse and finding errors. Legal basis: our legitimate interest in a secure and working service (Article 6(1)(f) GDPR), and our security obligation (Article 32 GDPR).
Measuring whether CRIVIX works. We count events in the app without cookies and without tracking you, and during the invitation period we look, per participant under a code (without name or e-mail address), at whether onboarding, the first session and the weekly rhythm work. Legal basis: our legitimate interest in making the product work and improving it (Article 6(1)(f) GDPR). Health-related signals in that, such as a pain report, we process only with your consent (section 4).
Recording consents and acceptances. Legal basis: our legal duty to be able to demonstrate consent and acceptance (Article 7(1) and Article 5(2) GDPR), and after deletion of your account our legitimate interest in being able to prove that for a limited time (Article 6(1)(f) and Article 17(3)(e) GDPR).
Cleaning up inactive accounts and recording deletions. Legal basis: our duty not to keep data longer than necessary and to be able to demonstrate that (Article 5(1)(e) and 5(2) GDPR; Article 6(1)(c) and (f) GDPR).

5. How CRIVIX uses AI to compose sessions

Your goal and your training options: your goal, as a fixed choice (for example "speed" or "other"; your own explanation is not included); your available equipment, as fixed choices only; your chosen training days and the number of sessions per week; and the time in minutes you have available for a session.
Your football week: your usual match minutes, the number of team sessions in that week, the dates of the days before your matches, so that the session on those days stays light, and for each date of that week a fixed word for how that day relates to your matches and team sessions (for example "match day" or "day after team session"). Of your matches and team sessions only those dates and words are included, no time, opponent or venue.
Fixed parts of your week: an exercise with its dose that returns on fixed dates, such as a fixed strength exercise or a speed block.
Your training rhythm: the number of consecutive missed sessions.
Dates: the week date, today's date and, where a single session is concerned, the date of that session.
When composing a single session: whether your next match or team session is within 24 or within 48 hours. The start time of the session and the time of your match or team session are not sent.
A selection from the exercise catalogue: the CRIVIX exercises that may be chosen from, selected and ordered for you (and sometimes per session), partly on the basis of your earlier sessions. An exercise may carry codes stating why it suits you (for example because of your goal, your development focus or your technical priorities), which leg you perform it with if you want to train your weaker leg, and whether it builds on exercises you completed earlier (repeat or a step further). The exercises themselves contain no personal data. Our own safety rules may leave exercises out of that selection, also on the basis of your Check-in or your return from an injury; the reason is not included.
On a second attempt: if our safety rules reject a proposed plan, a new request states which rules the proposal broke.

A composed session is a proposal, not a decision with legal effects: you can change, move or skip any session. There is therefore no automated decision-making within the meaning of Article 22 GDPR.

6. How long we keep your data

Health data: at most 90 days for as long as your consent stands, and immediately upon withdrawal of your consent (section 4). A daily database job deletes Check-ins older than 90 days and empties the health fields (exertion, pain, difficulty, note, height, weight and the benchmark value derived from your weight) of older sessions, matches, team sessions and benchmarks; it deletes your height and weight in your profile 90 days after you last entered them. For an adapted session, the health origin of the adaptation disappears after 90 days; the session itself remains.
Matches and team sessions in your schedule, with everything attached to them (intentions and outcomes, training focus, journal marks, contextual tips): 12 months after the date of the activity.
Results and reflections of matches and team sessions, and match details: 24 months after the date of the activity. This lets you compare a running season with the previous one. The health fields in them (exertion and intensity) follow the 90-day period.
Composition requests to our AI provider and their outcomes: 12 months.
Log of sent reminders: 12 months.
Profile, standing football week, weekly plans, sessions, development, benchmark results, statistics, settings and reminder preferences: for as long as your account exists.
Intake answers not yet in your profile: until you have answered the last questions and they are in your profile, and at most 30 days after your last change. A daily database job then deletes them.
Inactive account: if you do not use CRIVIX for 23 months, we send a warning by e-mail. If your account then remains unused, we delete it 24 months after your last activity, with all data.
Consents and acceptances: for as long as your account exists. Your acceptance of the terms and your confirmation of the safety notice disappear with your account. Of your consent for health data we keep limited proof in the deletion log for 5 years after deletion of your account: your account ID, the type of consent, the version and the times of giving and withdrawing. No e-mail address, no name, no content.
Deletion log: when an account is deleted we record, in a separate, shielded log: the account ID, a deletion number, the time and the status. We keep that for 5 years, as proof that the deletion was carried out. The same log also holds the giving and withdrawing of your consent for health data and the removal of an activity from your calendar (an identifier and the date); the health data itself is not in it.
Subscription and payment: during the pilot there is nothing to keep, because you do not need a subscription. If you later choose a paid subscription, we keep your subscription data for as long as your account exists, and invoices and payment records, as does Stripe on our behalf, for 7 years after the end of the financial year, because tax law requires it.
Support, contact form, feedback and questionnaires: 12 months after we receive your message or your answers. An e-mail to support@crivix.app sits in our support mailbox; we delete it by hand, also when you delete your account.
Waiting list: until you have an account or withdraw your consent, and at most 12 months after you signed up. We then remove your address from the list at Resend by hand.
Technical logs: at most 30 days. If we use an error-monitoring service, it keeps error reports for at most 90 days.
Database backups: encrypted, at most 30 days. Deleted data then disappears from the backups too.
Under 18 at the age check: you cannot do physical sessions and you can delete your account immediately. If you do not, the normal periods above apply.

If you delete your account, we delete all data of your account at once, except the limited proof mentioned above and the records we are legally required to keep.

7. Who we share your data with

Supabase (Supabase, Inc., United States): our database, sign-in, storage and the daily clean-up jobs. Our database project is located in the Frankfurt region (Germany, EU).
Vercel (Vercel Inc., United States): hosting of the website and the app, and the related technical logs.
Resend (Resend, United States): delivery of our e-mails, such as your sign-in code, service e-mails, reminders, the waiting list confirmation and messages from the contact form, and keeping the waiting list.
Anthropic (for customers in the EU: Anthropic Ireland, Limited; the processing takes place in the United States): composing sessions with AI, as described in section 5.
Stripe (Ireland and United States): only if you later choose a paid subscription yourself: its registration and management, payments and invoices. During the pilot we pass nothing to Stripe for your free access.
Cloudflare (Cloudflare, Inc., United States): management of our domain name (DNS) and forwarding e-mail sent to support@crivix.app; Turnstile, the check against abuse on the sign-in page, the start and the waiting list, which processes technical data of your browser and your IP address for that; and R2, the storage of the separately shielded deletion log and of our encrypted backups.
SimpleBackups: making encrypted backups of our database. The company and the place of processing are stated in our processor overview.
Google (Gmail): the mailbox in which e-mail sent to support@crivix.app arrives and is kept, such as messages from the contact form. This is an ordinary Gmail account; unlike the other suppliers in this list, there is no data processing agreement with Google for it.
Plausible (Plausible Insights OÜ, Estonia): cookieless usage statistics, only when we have switched them on. See our cookie policy.
Error monitoring: at the time of this version we use no separate error-monitoring service; technical error messages are kept in the logs of our hosting and database providers. If we choose one, it will only be an EU-hosted service from which personal data is removed as far as possible, and we will add it to our processor overview.
Questionnaires: you fill these in within the app itself; no separate survey service is involved.

In addition, we may disclose data where the law requires us to, for example to a competent authority, or where necessary to defend our rights.

8. Transfers outside the European Economic Area

the EU-US Data Privacy Framework, where the supplier is certified under it (European Commission adequacy decision (EU) 2023/1795; Article 45 GDPR); or
the European Commission's standard contractual clauses (Implementing Decision (EU) 2021/914; Article 46(2)(c) GDPR), supplemented with a transfer assessment and, where necessary, additional measures.

For each supplier we record in our processor overview which safeguard applies. You can request that overview and a copy of the safeguards used via support@crivix.app.

9. Security

Access to CRIVIX is currently by invitation only. You sign in with a one-time code by e-mail; there are no passwords that can leak.
Your data is shielded per account with access rules in the database. Only you see your own data; the CRIVIX team sees it only where necessary for support or safety.
The connections with the website, the app and the database are encrypted. Sensitive write actions, such as consents and deletions, run only through the server, never directly from the browser.
We store health data only for as long as you have active consent for it. We anchor that check in the database itself, so that it does not depend on a single screen in the app.
Should a data breach nevertheless occur that poses a risk to you, we report it to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and, if the risk is high, to you as well (Articles 33 and 34 GDPR).

10. Your rights

In the app you can do most of this yourself:

Download your data: Settings → Privacy and data → Download data. You receive a file with the data of your account. It does not contain technical records such as running claims and any deletion request; you can ask for those via support@crivix.app.
Correct your data: in your Player profile and in Settings.
Withdraw consent for health data: Settings → Privacy and data. We then delete your health data immediately (section 4).
Delete your account: Settings → Account → Delete account. If you have a paid subscription, it is stopped first. Deletion is irreversible.

11. Age

The pilot is only for outfield players aged 18 and over. If the check shows you are younger, you cannot take part.
Physical sessions are available from the age of 18.
We check your age once using your date of birth and keep only your month and year of birth and the moment of the check.
If that check shows that you are under 18, you cannot do physical sessions and you can delete your account immediately.

12. Cookies and local storage

13. Microphone in cue mode

What for. Solely to detect that a short, loud sound occurs, so that you can start the next repetition without touching your phone. CRIVIX recognises no words, voices or persons: there is no speech recognition, and the sound is not used to identify you or to infer anything about you.
Only on your device. The sound is processed solely on your own device, in your browser: your phone only measures how loud the sound is. No sound is recorded or stored, and no sound or sound measurement is sent to CRIVIX, to our suppliers or to anyone else. All that reaches us is that you completed a repetition, exactly as when you tap; we cannot see whether you used your voice or a tap. The microphone is on only while cue mode is open and switches off as soon as you close cue mode.
Permission. We ask for the microphone only when you start cue mode. We first explain in the app how it works, and you choose: "Use microphone" or "Tap only". Only if you choose "Use microphone" does your browser or phone ask for permission to use the microphone. Tapping always works, even while the microphone is on.
Refusing, withdrawing and changing. You can refuse access to the microphone, and withdraw permission you have given at any time, in the settings of your browser or your phone. In the app you choose again between your voice and tapping via "Change" next to the "Start cue mode" button. If you refuse or withdraw access, the session continues by tapping; this has no other consequences.
Your choice on this device. Your choice between voice and tapping, the sound threshold your phone determines when you set up the microphone (a number, not a recording) and the sensitivity you choose are kept by the app only in your browser's local storage on this device, so that you do not have to set them up again for every session. This data is not sent to us. On another device or in another browser you choose again. You remove it by clearing your browser data; you can also reset your choice between voice and tapping via "Change". See also our cookie policy.

14. No automated decisions, no marketing

CRIVIX takes no decisions about you that are based solely on automated processing and have legal effects or similarly significantly affect you (Article 22 GDPR). Training proposals and adaptations are proposals that you can always change or skip.
We send no newsletters or advertising and do not use your data for advertising. If that ever changes, we will first ask for your separate consent.

15. Changes and versions

16. Complaints and contact

Do you have a question or a complaint about how we handle your data? E-mail support@crivix.app. We usually respond within 1 to 2 working days.

You also have the right to lodge a complaint with the supervisory authority: the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), autoriteitpersoonsgegevens.nl.

Your data in CRIVIX

Once signed in, you can download your data and permanently delete your account in CRIVIX yourself.

Join the waiting list

In short

1. Who is responsible for your data

2. Which data we process

Account and invitation

Profile

Age

Football week and football history

Training and development

Health data, only with your consent (see section 4)

Consents and acceptances

Composing sessions with AI

Subscription and payment

Reminders and e-mail

Support and feedback

Technical data

3. What we use your data for, and on which legal basis

4. Health data: only with your consent

5. How CRIVIX uses AI to compose sessions

6. How long we keep your data

7. Who we share your data with

8. Transfers outside the European Economic Area

9. Security

10. Your rights

11. Age

12. Cookies and local storage

13. Microphone in cue mode

14. No automated decisions, no marketing

15. Changes and versions

16. Complaints and contact

Your data in CRIVIX

In short

1. Who is responsible for your data

2. Which data we process

Account and invitation

Profile

Age

Football week and football history

Training and development

Health data, only with your consent (see section 4)

Consents and acceptances

Composing sessions with AI

Subscription and payment

Reminders and e-mail

Support and feedback

Technical data

3. What we use your data for, and on which legal basis

4. Health data: only with your consent

5. How CRIVIX uses AI to compose sessions

6. How long we keep your data

7. Who we share your data with

8. Transfers outside the European Economic Area

9. Security

10. Your rights

11. Age

12. Cookies and local storage

13. Microphone in cue mode

14. No automated decisions, no marketing

15. Changes and versions

16. Complaints and contact

Your data in CRIVIX