← Back to Coach

Privacy Policy

Last updated: October 20, 2026

See also: Terms of Service

1. Who We Are

Windsurfer's Mindset Coach (“WindCoach”, “we”, “us”) is an AI-powered windsurfing coaching platform created by Enrico Marotti in partnership with Nico Prien. Our address is Ulica Andrije Štangera 25, Opatija, Croatia.

2. Data We Collect

We collect the following data when you use WindCoach:

  • Account data: Email address, display name, password (hashed)
  • Usage data: Messages sent to the AI coach, focus points viewed, training plan progress, discipline selection
  • Payment data: Processed by Stripe. We store your Stripe customer ID and subscription status. We never see or store your card details.
  • Video data: Videos uploaded for analysis are stored on Cloudflare R2 and accessible only to you and our coaching team.
  • GPS session data: GPX, FIT, or CSV files you upload from a watch or GPS logger. These contain the positions, timestamps, and speeds of your session, which means they contain where and when you sailed. The track file is stored on Cloudflare R2 and the numbers we calculate from it are stored in our database. See section 11 for what any of this makes public.
  • Session notes: The technique and trim notes you write on a GPS session are stored with your account. Your coach reads them to answer you. Other riders never see them, and they are never part of anything you share.
  • Gear: The sizes of the sail or wing, board, fin, foil wings and fuselage you add to a session, and any name or tag you give a piece of gear, are stored with your account.
  • Remember this: To suggest a line worth remembering, the message or note you just wrote is sent to OpenAI on its own. Nothing is saved unless you tap Save. You can edit or remove every remembered line under Account.
  • Technical data: IP address (for rate limiting only, not stored), error logs via Sentry (PII stripped).

3. How We Use Your Data

  • To provide AI coaching based on your questions and progress
  • To manage your account and subscription
  • To send transactional emails (account verification, password reset)
  • To send coaching tips and progress emails only if you opted in during registration
  • To improve our coaching content and platform
  • To monitor errors and ensure platform stability

4. Marketing Emails & Consent (GDPR)

We only send marketing emails (coaching tips, weekly digests, progress updates) if you explicitly opt in during registration. The checkbox is unchecked by default. We never pre-check it. You can unsubscribe at any time using the link in every email, or by contacting us. Unsubscribing takes effect immediately.

5. Data Processors

  • Supabase (EU region): Authentication and database
  • OpenAI: AI coaching responses (your messages are sent to GPT-4o, together with a short summary of your first name, age group, quiz answers, plan, sessions, gear (sail or wing, board, fin and foil sizes, and any name or tag you gave a piece of gear), spots, the notes you wrote on your sessions, the things you asked your coach to remember, the titles of your earlier chats and the last feedback from your coach, so the coach can answer you personally; you can see and edit this summary under Account, and switch it off there). When your coach analyses a GPS session, the same summary is sent, without your name, age group, spots, chat titles and gear names or tags.
  • Stripe: Payment processing
  • Vercel: Hosting and serverless functions
  • Cloudflare R2: Video storage
  • Resend (EU region): Email delivery
  • Sentry: Error monitoring (PII stripped)
  • PostHog (PostHog Inc., EU region, Frankfurt): Product analytics and session replay. Anonymized event names, page paths, and session metadata. All text and inputs are masked at capture; console logs are not recorded. Retention: 30 days.

6. Your Rights (GDPR)

As an EU resident, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and all associated data
  • Export your data in a portable format
  • Withdraw consent for marketing emails at any time
  • Object to data processing

To exercise any of these rights, email us at privacy@windsurfersmindset.coach.

7. Data Retention

  • Account data: retained while your account is active
  • Chat messages: retained while your account is active (you can delete individual conversations)
  • Videos: retained for 90 days after analysis, then automatically deleted
  • Payment records: retained as required by tax law (minimum 5 years)
  • Error logs: automatically purged after 30 days
  • Community comments: retained until you or the session owner delete them, or the account is deleted
  • Profile picture: retained until you remove it or the account is deleted
  • Reports of community content: retained until they are resolved, and for 12 months after that

8. Cookies & Product Analytics

We use essential cookies for authentication sessions. We use product analytics to understand how features are used and to improve the coaching experience. We do not use advertising cookies or third-party tracking pixels.

Product analytics: We use PostHog (operated by PostHog Inc., EU region) to capture anonymized product usage signals: which buttons get clicked, which features get used, session length, and crash reports. This data is masked at capture: all text content and inputs are hidden, console logs are not recorded, and passwords, emails, and phone numbers are automatically redacted. Data lives in EU data centres (Frankfurt), retention is 30 days, and you can opt out by emailing privacy@windsurfersmindset.coach.

9. Security

All data is encrypted in transit (TLS) and at rest. Passwords are hashed using bcrypt via Supabase Auth. We never store plaintext passwords. Access to production data is restricted to the development team.

10. Content Ownership & Copyright

Ownership. WindCoach content, including the focus points, photographs, coaching methodology, training plans, and book material across all three disciplines (fin, foil, and wing) is copyrighted material owned by Enrico Marotti and, where applicable, co-authored with Nico Prien. Access to the app grants you a personal, non-transferable license to use the content for your own windsurfing development.

Personal use allowed. You may read the content, train with the Training Plan, log sessions, take personal notes, and share a focus-point link with a friend who has their own WindCoach account. Screenshots for personal reference, saved to your own device for your own recall, are fine.

Redistribution prohibited. You may not publicly share, repost, or distribute the book content, focus-point text, photographs, or coaching copy on social media, forums, YouTube, blogs, or any other public channel. You may not export the library in bulk, scrape the API, or otherwise extract content for storage outside the app.

Commercial reuse prohibited. You may not use WindCoach content in your own coaching services, books, videos, courses, or products. You may not teach our methodology to paying clients using our material. Fair-use quotation for a review or personal blog post is acceptable if it is a short passage with clear attribution.

AI training prohibited. You may not use WindCoach content to train language models, feed into other AI systems, include in fine-tuning datasets, or otherwise use the content as input to any machine-learning pipeline. This applies to the chat responses, focus-point text, and all book-verbatim material.

Violations result in termination of your account and, in serious cases, legal action. If you are uncertain whether a specific use is allowed, email us at privacy@windsurfersmindset.coach before proceeding.

11. GPS Tracks & Rankings

Your track is private. An uploaded GPS file, the whole map drawn from it, and the coaching built on it are visible only to you, unless you choose to share one tip from it, as described below. We do not publish your track, your launch spot, or the route you sailed. The one exception is described below, and it applies only if you chose to show your name. What you choose to share with other riders in the community is a separate choice, off until you make it, and it is described at the end of this section.

What the rankings show. The rankings order riders by numbers calculated from uploaded sessions, such as top speed or a jibe count. A ranking shows a position and a number. It does not show your email address, your account, or the date you sailed.

Your name is your choice. A ranking row carries a name only if you chose to show one. You choose it either when you upload a session or in Account, you type or confirm the exact name that will appear, and we record when you agreed. Without that choice your row stays anonymous. Choosing not to show a name does not limit anything else: your session is still saved and still analysed.

What a named row also shows. If your name is on a row, another signed-in rider can tap that row and see the short stretch of water that one result was sailed on, drawn on a map. They see that stretch and the speed, and nothing else: not the rest of the session, not the date, and no way to reach the file you uploaded. The stretch is only ever the part of the water that produced that one number, never the ride around it, and on most results it is a few seconds of a session that ran for hours. Where a result covers so much of a session that showing it would amount to showing the session, we show only the middle of it, and never the parts where the session started or finished. Rows with no name on them open nothing.

Turning it off. You can withdraw at any time in Account. Your name comes off every ranking, including rows from earlier sessions, your rows stop opening a map for anyone, and we delete both the name and the record of your agreement. If you turn it back on later, your earlier results carry the name too.

The community is your choice. Nothing about your sessions is shown to other riders until you turn the community on in Account, and it is off for every account to begin with. When you turn it on you choose one of two levels. On the first level, signed-in riders see your name, your picture, the discipline, the day you sailed, the name of the spot, the speeds, the jibe count, the distance, the duration, the sizes of the gear you tagged (sail or wing, board, fin, foil wings and fuselage) and the title you gave each session. On the second level they also see the track drawn on a map, with the first and last tenth of every track and everything within 300 metres of where you started and where you finished cut away, so the map never shows where you launched or landed. Never the time of day, never the file you uploaded, never your written debriefs or your session notes, and never your email, nationality, sex or year of birth. Your coaching reads stay with you too, with one exception you make yourself: on any session you share, you can choose to share one tip from one coaching read. Other riders then see the lines of that read that tell you what to do next session, and the names of the focus points it names. Nothing else from that read is shown: not the numbers it quotes, not your answers, not the rest of the text. You see exactly the text other riders will see before you agree, one tap stops sharing it, and hiding the session or turning the community off hides it too. You can hide any single session from the community at any time, and a session you hide is private whatever level you chose. We record when you agreed, and the name you confirmed.

Your picture and your comments. You may add a profile picture. It is resized on your device before it is uploaded, stored under a random name that carries nothing anyone can read about you, and shown to other riders only where your sessions or comments are shown. Comments you write under a shared session are shown with your name and picture to the riders who can see that session. The session owner can delete any comment under their session, you can delete your own, and we can remove anything that is reported to us; the text of a deleted comment is removed at once. Riders can mute each other: two riders who are muted see nothing of each other in the community.

Turning the community off. You can turn the community off at any time in Account. Your sessions disappear from every community surface on the next request, your name and picture stop being shown, and we delete the name, the record of your agreement and the identifier other riders used to reach your page. Comments you wrote stay under the sessions they were written on, shown without a name, until you or the session owner delete them, and your picture stays on your own account until you remove it. If you turn the community back on later, your earlier sessions are shared again.

12. Regattas

The regatta pages at wind.coach/regatta are used by a regatta's organizer, race committee, judges and riders. You join a regatta with a code from the organizer or the race committee.

  • What we keep when you enter: your sail number, first and last name, discipline, age category and sex, the link to your account, and the choices you make about GPS and your name, with the time you made them. For a rider under 16 we also keep who recorded the parent's or guardian's signed consent, and when.
  • GPS in a regatta is a separate choice, off until you turn it on, or until the race committee records your signed consent on paper. With it on, your phone sends its position only from two minutes before a race's countdown to two minutes after its finish closes. A file from your watch is cut on your device to the race, and only that part is sent. Your positions are seen by you and by the organizer and race committee of that regatta, to check the course and work out the results. Judges see sail numbers only. After each race, the other riders of that regatta can watch your track in the race replay, shown with your sail number only, for as long as your positions are kept (see below). This is part of the current wording of the GPS consent; a track sent under the earlier wording is seen only by the organizer and race committee until you agree to the new wording. For a rider under 16, the GPS consent their parent or guardian signed is enough, whichever wording it was signed under.
  • Results show your sail number, your place and your points. Your name appears only if you chose “Name in the results”. The name of a rider under 16 is never shown; such a rider is entered only by the race committee, with a parent's or guardian's signed consent.
  • If you withdraw your GPS consent, your positions in that regatta are deleted at once. Results already worked out stay.
  • Your positions are deleted when the organizer closes the regatta. 30 days after the race nobody can see them any more, and they are deleted the next time the regatta is opened. Results stay.
  • A phone on a buoy sends only the buoy's position and its battery level. It is not linked to any rider, and nothing is kept away from the regatta's area or outside its days.
  • We do not send sail numbers, names or positions from a regatta to analytics, error-reporting or AI services.

13. Contact

For privacy questions, contact us at privacy@windsurfersmindset.coach or write to: Ulica Andrije Štangera 25, Opatija, Croatia.