Privacy Policy
Last updated: April 12, 2026
The short version
We collect the minimum data needed to run your training plan. We don't sell your data. We don't use it for advertising. You can export or delete everything at any time. Your data is encrypted and protected with row-level security. All data is processed within the EU.
0. Who We Are
Snel is a product of Isola Digital B.V., registered in the Netherlands at Hoenderkamp 20, 7812 VZ, Emmen. KvK registration in the Netherlands. For questions about your data, contact us at privacy@getsnel.com.
Isola Digital B.V. is the data controller for personal data processed through the Snel app and website (getsnel.com).
1. What We Collect
Account Information
Email address and password (hashed) when you create an account. Used for authentication only.
Profile Data
Experience level, target race distance, race date, preferred training days, and optional race history. Used to generate and personalize your training plan.
Training Data
Completed workouts, pace data, and workout duration. Used to track progress and adapt your plan.
Health-Related Feedback (with your consent)
RPE (perceived effort) ratings, body check responses (good / minor discomfort / pain), and weekly effort scores. This data is classified as health data under GDPR Article 9 and is only collected with your explicit consent. It is used solely by the adaptation engine to adjust your training load and prevent overtraining. You can withdraw consent at any time by deleting your account.
Location (optional)
City-level location if you choose to set one. Used to adjust pace targets based on weather conditions. We do not track your GPS position or movement.
Device Information
Device type, operating system, and app version. Used for debugging and ensuring compatibility. No advertising identifiers.
2. What We Don't Collect
3. How We Use Your Data & Legal Basis
We process your data for the following purposes, each with a specific legal basis under GDPR Article 6:
Training plan generation and adaptation
Profile, training data, and VO2max calculations. Legal basis: performance of a contract (Art. 6(1)(b)). You provide this data so we can deliver your training plan.
Health-related feedback processing
RPE ratings, body check responses, and weekly effort scores. This is health data under GDPR Article 9. Legal basis: explicit consent (Art. 9(2)(a)). You consent to this processing when you submit a check-in or post-run feedback. This data is used only to adapt your training plan and is never shared with third parties. You can withdraw consent at any time by deleting your account or contacting us.
Account authentication
Email address and password. Legal basis: performance of a contract (Art. 6(1)(b)).
Email communication (waitlist, training tips)
Email address. Legal basis: consent (Art. 6(1)(a)). You can withdraw consent at any time via the unsubscribe link in each email.
Weather-adjusted pace targets
City-level location (optional). Legal basis: consent (Art. 6(1)(a)). You choose whether to set a location.
App stability and debugging
Device type, OS, app version. Legal basis: legitimate interest (Art. 6(1)(f)). Our legitimate interest is maintaining a functioning and secure app. We have assessed that this does not override your rights, as the data collected is minimal and non-sensitive.
We do not use your data for advertising, automated decision-making, profiling, or sale to third parties. No automated decisions with legal or similarly significant effects are made about you.
Is providing data mandatory? You must provide an email address and password to create an account (contractual requirement). All other data (profile, training feedback, location) is optional but improves the quality of your training plan. If you choose not to provide optional data, the Service will still function but with less personalisation.
4. Data Storage, Security & Retention
Account and training data is stored in Supabase (PostgreSQL) with row-level security policies ensuring each user can only access their own data. Passwords are hashed using industry-standard algorithms. All data in transit is encrypted via TLS. Your training plan is also cached locally on your device for offline access.
Retention periods:
5. Third-Party Services
We use the following third-party services to operate Snel:
Supabase (EU)
Authentication, database, and data storage. Your account and training data is stored with row-level security in Supabase's infrastructure.
Mailerlite (EU)
Email communication. When you join our waitlist or create an account, your email address is shared with Mailerlite to send emails (welcome, training tips, product updates). Mailerlite is based in Lithuania (EU) and processes all data within the EU. A Data Processing Agreement (DPA) is included in their terms of service. You can unsubscribe from marketing emails at any time via the unsubscribe link in each email.
Open-Meteo (EU)
Weather data for pace adjustments. If you set a location, we query Open-Meteo's API for weather conditions. No personal data is sent, only the city coordinates.
Vercel (US)
Website and web app hosting. Vercel Web Analytics collects anonymous, cookie-free page view data (no personal data, no tracking). Hosting infrastructure is in the US; no personal data is transferred as analytics are aggregated and anonymous.
Google, Apple (US)
Optional sign-in providers. If you sign in with Google or Apple, we receive your email address and account identifier. Authentication is handled by their servers. Both participate in the EU-US Data Privacy Framework.
Strava (US)
Optional integration. If you connect Strava, we access your running activity data to sync workouts and analyse training history. We never post to Strava on your behalf. You can disconnect at any time, which revokes access and deletes all cached Strava data. Strava participates in the EU-US Data Privacy Framework.
Apple Health, Google Fit
Optional integrations. If you choose to connect these services, we access only health and fitness data needed to sync workouts. Data stays on your device and is not sent to our servers. You can disconnect at any time.
6. International Data Transfers
Your personal data (account, profile, training data, email) is processed within the European Union by our primary service providers (Supabase and Mailerlite).
Transfers outside the EU: Website hosting on Vercel involves US infrastructure, but no personal data is transferred (analytics are anonymous and cookie-free). If you connect Strava (US-based), your running activity data is transferred to and from Strava's servers under their own privacy policy and the EU-US Data Privacy Framework. You initiate this transfer voluntarily and can revoke it at any time by disconnecting Strava in the app.
Google and Apple Sign-In: If you choose to sign in via Google or Apple, authentication data is processed by these providers under their respective privacy policies and the EU-US Data Privacy Framework. We only receive your email address and account identifier.
7. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the following rights:
To exercise any of these rights, email privacy@getsnel.com with your account email address and we will respond within 30 days. You can also delete your account directly in the app under Profile.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) at autoriteitpersoonsgegevens.nl.
8. Children's Privacy
Snel is not directed at children under 16. In accordance with Dutch law (GDPR Art. 8, Uitvoeringswet AVG Art. 5), we do not knowingly collect personal information from children under 16 without parental consent. If we learn we have collected such data, we will delete it promptly.
9. Changes to This Policy
We may update this policy from time to time. If we make significant changes that affect how we process your data, we will notify you via email or in-app notification before the changes take effect. The "last updated" date at the top reflects when changes were last made.
10. Contact
Questions about this policy? Email us at privacy@getsnel.com or use our contact form.