Privacy Policy

Last updated: 23.04.2026

Coach Amp GmbH (“Coach Amp”, “we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you use our website, applications, and services (collectively, the “Service”).

This Privacy Policy is issued in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for processing your personal data is: Coach Amp GmbH, Akazienstrasse 3A, 10823 Berlin, Germany

2. Personal Data We Collect

We collect personal data only to the extent necessary to operate and improve the Service.

2.1 Data You Provide Directly

This may include:

• name, email address, company name;
• account credentials;
• billing and payment information;
• communications with us (e.g. support requests).
  

2.2 Data Collected Automatically

When you use the Service, we may automatically collect:

• IP address;
• device and browser information;
• usage data (e.g. pages viewed, features used);
• log files and error reports.
  

2.3 Customer Content

You may upload or generate content while using the Service (“Customer Content”). Coach Amp processes this data only on your behalf and in accordance with your instructions.

3. Purpose and Legal Basis of Processing

We process personal data for the following purposes and legal bases:

Providing and operating the Service - Art. 6(1)(b) GDPR (contract)
Account management and billing - Art. 6(1)(b) GDPR
Customer support and communication - Art. 6(1)(f) GDPR (legitimate interest)
Product improvement and analytics - Art. 6(1)(f) GDPR
Legal and regulatory compliance - Art. 6(1)(c) GDPR

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• ensure basic functionality of the Service;
• analyze usage and improve performance;
• secure the Service.
  

Where required by law, we obtain your consent before using non-essential cookies. You may manage cookie preferences through your browser or consent tool.

5. Data Sharing and Processors

We do not sell personal data.

We may share personal data with trusted third-party processors who support our operations (e.g. hosting, payment processing, analytics), strictly under data processing agreements pursuant to Art. 28 GDPR.

All processors are carefully selected and contractually bound to protect your data.

6. Third-Party Integrations

The Service offers optional integrations with third-partyplatforms to enable features such as calendar synchronisation and videoconferencing. These integrations are activated only at your explicit request through the relevant provider’s OAuth consent flow, and you may disconnect them at any time.

6.1 Google services

When you connect your Google account to Coach Amp, we request the following OAuth scopes strictly to provide calendar scheduling features:

• https://www.googleapis.com/auth/calendar.calendarlist.readonly:read-only access to the list of calendars on your Google account. We use this once, during calendar setup, to populate the selector so you can choose which calendar should receive session bookings. We do not read the contents of any events with this scope.
• https://www.googleapis.com/auth/calendar.events:read and write access to events on your selected calendar. We use this to create a calendar event when a client books a session through Coach Amp, to update the event when the session is rescheduled, and to delete the event when the session is cancelled. We only interact with events that Coach Amp itself created; we do not read, modify, or delete any pre-existing events on your calendar.

We do not use Google user data for any purpose other than the functionality described above. We do not sell, rent, or transfer Google user data to third parties. We do not use Google user data to train artificial intelligence or machine learning models. We do not serve advertising based onGoogle user data.

Coach Amp’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. See https://developers.google.com/terms/api-services-user-data-policy#limited-use.

6.2 Microsoft and Zoom

Coach Amp also offers optional integrations with Microsoft Outlook Calendar (for the same calendar synchronisation purpose) and Zoom (for attaching video meeting links to coaching sessions). These integrations follow the same principles: we request only the minimum OAuth scopes needed for the feature, we never access data beyond what is required,and we do not sell, rent, or transfer data obtained from these providers to third parties.

6.3 Data we store from integrations

For each connected integration we store encrypted OAuth access and refresh tokens in our EU database (Supabase, Frankfurt), retained only while the integration remains connected. We also store opaque identifiers, such as Google event IDs or Zoom meeting IDs, for objects we create so we can update or cancel them on your behalf. No other third-party user data is persisted.

6.4 Disconnecting integrations

You can revoke any integration at any time, either inCoach Amp (Coach Settings > the relevant provider tab > “Disconnect”) or directly in the provider’s security panel (Google: https://myaccount.google.com/permissions ; Microsoft: https://account.microsoft.com/privacy/connected-apps; Zoom: https://marketplace.zoom.us/user/installed). Revoking from either side has the same effect: our stored tokens are deleted or invalidated, and we lose the ability to act on your third-party account.

To request permanent deletion of all personal data, including any data derived from connected third-party services, email privacy@coachamp.com. Requests are processed within 30 days in accordance with Article 17 GDPR.

7. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, such as:

• EU Standard Contractual Clauses (SCCs);
• adequacy decisions by the European Commission.

8. Data Retention

We retain personal data only for as long as necessary to:

• provide the Service;
• fulfill contractual and legal obligations;
• resolve disputes and enforce agreements.
  

Customer Content is deleted or anonymized upon account termination, unless legal retention obligations apply.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.

However, no system can guarantee absolute security.

10. Your Rights Under GDPR

You have the following rights under the GDPR:

• right of access (Art. 15);
• right to rectification (Art. 16);
• right to erasure (“right to be forgotten”, Art. 17);
• right to restriction of processing (Art. 18);
• right to data portability (Art. 20);
• right to object (Art. 21);
• right to withdraw consent at any time.
  

To exercise your rights, contact us at the address above.

You also have the right to lodge a complaint with a supervisory authority.

11. Children’s Data

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be published on this page and indicated by an updated revision date. Continued use of the Service constitutes acceptance of the revised policy.

13. Contact

If you have questions about this Privacy Policy or our data practices, please contact: Coach Amp GmbH, Akazienstrasse 3A, 10823 Berlin, Germany

Email: privacy@coachamp.com