Privacy Policy

1. Data controller

Slim Pilot ("Slim Pilot", "we") is responsible for processing your personal data collected through the Slim Pilot website and service.

2. Data collected

• Identity and account: first name, last name, email address, password (hashed).
• Questionnaire data: age, weight, height, goals, dietary preferences, activity level, self-reported health considerations.
• Usage data: pages viewed, programs generated, interactions with the service.
• Technical data: IP address, device type, browser, session identifiers.
• Support data: messages sent to our team.

Payment data (card details, billing address) is collected and processed directly by our provider Stripe and is not shared with us.

3. Purposes and legal bases

• Creating and managing your account (performance of contract).
• Generating personalized programs and emailing the PDF (performance of contract).
• Customer support (performance of contract / legitimate interest).
• Security and fraud prevention (legitimate interest).
• Improving the service and anonymized statistics (legitimate interest).
• Marketing communications (consent, revocable at any time).
• Legal and accounting obligations (legal obligation).

4. Data sharing

We share your data only with:

• Our technical subprocessors (hosting, database, email delivery, AI generation), bound by contract.
• Stripe, acting as our payment provider and Merchant of Record for sales, billing, and tax compliance.
• Professional advisors (lawyers, accountants) when necessary.
• Competent authorities when required by law.

5. International transfers

Some subprocessors may process data outside the United States. In such cases, we implement appropriate safeguards to protect your data in accordance with applicable law.

6. Data retention

Your account data is retained as long as your account is active, then deleted or anonymized within 12 months of account closure. Accounting records are retained for the period required by applicable law.

7. Your rights

Depending on your state of residence, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information, as well as the right to data portability and to opt out of certain uses (including under the California Consumer Privacy Act (CCPA/CPRA) and similar state privacy laws). You can exercise these rights by writing to us at contact@glpilot.app. We respond within 30 days.

8. Security

We implement appropriate technical and organizational measures (encryption in transit, access controls, backups) to protect your data.

9. Cookies

We use cookies that are strictly necessary for the site to function (session, authentication). Any analytics or marketing cookies require your prior consent, which you may withdraw at any time.