Privacy Policy
Effective 30 July 2026
This version replaces the policy dated June 18, 2026. The substantive changes are: push notification tokens are now disclosed, the legal basis for each processing purpose is stated explicitly, the retention section describes what actually happens when you delete your account, and the minimum age is stated as 18.
Salvio is a fitness and sports-coaching marketplace that connects trainers, sports coaches, and other service providers with potential clients. This Privacy Policy explains how we collect, use, disclose, protect, and retain personal data when you use our mobile app, website, and related services (together, the "Service"). Salvio is operated from Romania (European Union) and the Service is offered in Europe. The EU General Data Protection Regulation (GDPR) and Romanian data protection law are the framework governing this Policy. Where you are covered by another privacy law that grants you additional rights, we will honour those rights as far as they apply to us, and section 12 explains how.
By using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree with it, you should not use the Service.
1. Who We Are and How to Contact Us
The Service is operated by Juroc Tech Solutions SRL, a company organized under the laws of Romania (registered office: Str. Luminii nr. 37, Faurei, Vrancea, Romania; trade-register number: J39/412/2026; CUI/CIF: 54645022). Juroc Tech Solutions SRL ("Salvio," "we," "us," or "our") is the data controller for personal data that we collect directly through the Service, unless a third party is independently acting as a controller for its own services. Salvio operates the Service as a platform for discovering trainers and sports coaches, managing profiles, booking-related interactions, billing, support requests, and scheduling features.
If you have privacy questions, requests, or complaints, you can contact us at robertojudele@juroc.tech, or through the support and contact options provided in the Service.
2. Personal Data We Collect
We collect personal data that you provide directly to us, such as your first and last name, email address, phone number, password, date of birth, sex, role selection, profile image, training or coaching details, location information, social contact links, issue reports, billing-related details, and any other information you choose to submit in your profile, messages, support requests, or account settings. If you are a trainer or coach, we may also collect professional profile details such as experience, specializations, rates, availability, schedule information, and gym association data.
We also collect information automatically when you use the Service. This may include device and app information, IP address, approximate (coarse) location derived from your device or network, log files, crash and diagnostic information, authentication events, rate-limiting and security events, and first-party usage analytics that we generate ourselves. When you view public trainer profiles, we may record profile-view events to power our in-house trainer analytics (for example, profile-view counts shown to trainers), for fraud prevention, and for service improvement. Where permitted, we may also use cookies or similar technologies on web surfaces for authentication, preferences, and security.
Push notification token. If you turn on session reminders, your device generates a push notification token, which we store on our servers and associate with your account so that we can deliver those reminders. This token is a device identifier. We use it only to send you the reminders you asked for — never for advertising or tracking. You can turn reminders off at any time in the app or revoke the permission in your device settings, and we delete the stored token when you delete your account.
We do not use third-party advertising networks, ad SDKs, or cross-app tracking technologies. We do not track you across other companies' apps or websites, and we do not use your personal data for cross-context behavioral advertising. Any "analytics" we perform is first-party and is used to operate, secure, and improve the Service.
We may receive information from third parties when you choose to connect them to the Service. For example, we may receive subscription, billing, or entitlement data from payment providers, app store billing systems, or RevenueCat; profile image or file-upload data from cloud storage providers; email delivery and verification data from messaging providers; and map or place data from external data sources used for location-based features.
3. How We Use Personal Data
We use personal data to create and manage accounts, authenticate users, provide the marketplace and scheduling features, display trainer and coach profiles, connect users to potential clients, suggest trainers that match your stated preferences, process subscriptions and billing, deliver verification and transactional emails, send session reminders if you have turned them on, support image uploads, detect fraud and abuse, enforce rate limits, investigate support issues, improve the quality and reliability of the Service, and comply with legal obligations. We also use personal data to maintain security, prevent account takeover, detect suspicious activity, and protect the integrity of public profile and scheduling features.
We may use aggregate or de-identified data for analytics, product planning, troubleshooting, and service improvement. Where required by law, we will obtain your consent before using personal data for a purpose that is not compatible with the original purpose of collection.
4. Legal Bases for Processing
We process personal data only where we have a valid legal basis under the GDPR. Which basis applies depends on what we are doing:
Where we rely on legitimate interests, we weigh those interests against your rights and freedoms, and you may object to that processing (see section 10). Where we rely on consent, you can withdraw it at any time, which does not affect the lawfulness of processing carried out before you withdrew it.
Data you have to provide. To create an account we need your first and last name, email address, phone number, and a password. Providing these is a contractual requirement — without them we cannot create your account or provide the Service. Everything else, including your date of birth, sex, profile photo, location, and trainer profile details, is optional. If you decline to provide optional data, the related feature is simply unavailable or your profile is less complete.
Matching and recommendations. We use the preferences you set, together with profile data, stated location, and ratings, to rank and suggest trainers to you. This is profiling within the meaning of the GDPR, but it is not automated decision-making that produces legal effects or similarly significant effects on you — it only affects the order in which trainers appear. You can change or clear your preferences at any time in the app, and the main factors we use for ranking are described in our Terms of Use.
5. How We Share Personal Data
We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We may share personal data with service providers and processors that help us operate the Service, such as hosting providers, database and infrastructure providers, email delivery providers, payment processors (for example, Stripe), app-store billing and subscription providers (for example, Apple App Store, Google Play, and RevenueCat for subscription entitlement management), cloud storage providers, map and location providers (for example, Google Maps), and logging, monitoring, and error-diagnostics providers. These providers are only permitted to process personal data on our instructions and under a data processing agreement, and are expected to use appropriate safeguards.
We may also share personal data where required by law, to respond to lawful requests, to protect our rights or the rights of others, to prevent fraud or abuse, or in connection with a corporate transaction such as a merger, acquisition, reorganization, or asset transfer. In addition, certain information may be visible to other users as part of the marketplace experience, such as a trainer or coach profile, contact details you intentionally publish, availability, ratings, reviews, or other profile data you have chosen to make public.
6. Third-Party Services and Processor Categories
The Service may rely on third-party services for account email delivery, push or transactional messaging, billing and subscriptions, cloud hosting, storage, and map or place functionality. These services may process personal data outside the country where you live. When we work with processors, we require contractual or comparable protections intended to preserve confidentiality, integrity, and availability of the data.
Depending on your use of the Service, third parties may include cloud hosting providers, email delivery providers, payment processors, app marketplace billing systems, subscription management platforms, file storage providers, and infrastructure services used for logs and monitoring. If you interact with a third-party feature, that third party may process your data under its own privacy policy and terms.
7. International Data Transfers
The Service may be operated from, and personal data may be stored or processed in, countries other than the country in which you live. This includes transfers to the United States, the European Union, the United Kingdom, and other jurisdictions where our service providers or infrastructure are located. Where required by law, we use appropriate transfer safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, vendor contractual commitments, and other lawful transfer mechanisms.
If local law requires additional protections for international transfers, we will implement them. By using the Service, you understand that your personal data may be transferred to and processed in jurisdictions that may have different data protection laws than those in your home country.
8. Security Measures
We use technical and organizational safeguards designed to protect personal data from unauthorized access, disclosure, alteration, and destruction. These safeguards include transport-layer encryption in transit, access controls, least-privilege permissions, server-side secret management, validation and sanitization of inputs, rate limiting, audit and diagnostic logging, and role-based access restrictions. Sensitive credentials are intended to stay server-side and are not exposed in client-side builds.
We also protect certain sensitive workflows by hashing values before storage where feasible, such as verification or check-in codes, and by using secure token-based authentication for account access. Although we work to protect your information, no system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us promptly of any suspected unauthorized access.
9. Retention of Personal Data
We retain personal data only for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, support accounting and tax requirements, and maintain legitimate business records. Retention depends on the type of data and the reason we collected it.
When you delete your account, we immediately and permanently delete your account record and the data attached to it from our primary database — your profile, matching preferences, reviews you wrote, issue reports you filed, check-in codes, your stored push notification token, and your authentication tokens. Sessions that other users scheduled with you are kept but unlinked from you. This happens at the moment you confirm deletion, not on a delay.
The periods below are the retention targets we apply to the remaining categories. Some are enforced automatically and some by periodic review, so an individual item may persist somewhat longer than the target before it is cycled out. You can ask us at any time to delete something sooner (see section 10), and we will do so unless we are legally required to keep it.
When personal data is no longer needed, we delete, anonymize, or archive it in line with the above and with applicable law. Information may persist briefly in backups or logs until those systems cycle, subject to the same security controls that protect live data.
10. Your Rights
Depending on where you live, you may have rights to access your personal data, correct inaccurate information, delete your personal data, obtain a copy of your data in a portable format, object to or restrict certain processing, and withdraw consent where processing is based on consent. You may also have the right to know what categories of personal information we collect, use, and disclose, and the right to opt out of certain disclosures or uses under applicable law, including rights recognized by the CCPA/CPRA for California residents.
To exercise your rights, you can contact us at robertojudele@juroc.tech or through the support channels in the Service, specifying the request you want to make. We will respond within the timeframe required by applicable law (under the GDPR, generally within one month, which may be extended for complex requests). We may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising privacy rights, although some features may not function if we cannot process certain data necessary to provide them.
11. Data Portability and Deletion
If you request a copy of your data, we will provide it in a commonly used format where required by law and where technically feasible. If you request deletion, we will delete or anonymize data that we are not legally required or otherwise permitted to retain. In some cases, we may retain limited data to comply with legal obligations, complete transactions, prevent fraud, resolve disputes, or support legitimate business purposes.
If you are a trainer, coach, or other professional using the Service, deleting your account may remove your public profile from active display, but some historical records, such as billing, security, and abuse-prevention logs, may remain for a limited time as permitted by law.
12. Privacy Laws Outside the EEA
The Service is currently offered in Europe, so the GDPR and Romanian law are the rules that apply to nearly all of our users. If you are nonetheless covered by a privacy law outside the European Economic Area that grants you additional rights — for example the CCPA/CPRA if you are a California resident, or PIPEDA if you are in Canada — you may exercise those rights using the contact details in section 18, and we will honour them as far as they apply to us.
For the avoidance of doubt: we do not sell personal data, and we do not share it for cross-context behavioural advertising. We may require verification of your identity before acting on a request.
13. Your GDPR Rights and Supervisory Authority
If you are covered by GDPR, you may have the right to access, rectify, erase, restrict processing, object to processing, and data portability, as well as the right to lodge a complaint with a supervisory authority. Because Salvio is established in Romania, our lead supervisory authority is the Romanian National Supervisory Authority for Personal Data Processing (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal, "ANSPDCP"), www.dataprotection.ro. If you are in the European Economic Area or the United Kingdom, you may also lodge a complaint with the data protection authority in your country of residence or work. We would, however, appreciate the chance to address your concerns directly before you do so — please contact us at robertojudele@juroc.tech.
If you are covered by a privacy law outside the European Economic Area, section 12 explains how to exercise the rights it gives you.
14. Minors and Age Restrictions
The Service is intended for adults and is not directed to children. You must be at least 18 years old to create an account or use the Service, as set out in our Terms of Use. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected personal data from a person under 18, we will take appropriate steps to delete it and close the account.
If you are a parent or guardian and believe a child has provided personal data to us, please contact us at robertojudele@juroc.tech so we can review and address the matter.
15. Public Profiles, Reviews, and Visibility Settings
Certain information you choose to publish in your profile may be visible to other users and, in some cases, to the public. This can include your name, profile photo, location, coach or trainer description, specializations, rates, availability, contact links, and review-related content. You should not include sensitive personal information in public profile fields unless it is necessary for the Service and you are comfortable making it visible to others.
If you use public profile or review features, remember that information you make public may be copied, shared, or retained by others outside our control. We recommend that you review your profile settings carefully and keep public details limited to information that is relevant to your professional presence.
16. Cookies and Similar Technologies
Where the Service uses a web interface, we may use cookies, local storage, or similar technologies to keep you signed in, remember preferences, secure sessions, and measure basic performance and reliability. Where required by law, we will request consent before placing non-essential cookies or using comparable technologies. You can usually control cookies through your browser or device settings, although some features may not work properly if cookies are disabled.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the Service. If we make material changes, we will take reasonable steps to notify you, such as by posting the updated policy in the Service or providing another appropriate notice. Your continued use of the Service after an updated policy becomes effective means you accept the revised policy.
18. Contact Us
If you have questions about this Privacy Policy, your rights, or how we handle your personal data, please contact:
Juroc Tech Solutions SRL
Email: robertojudele@juroc.tech
Registered office: Str. Luminii nr. 37, Faurei, Vrancea, Romania
You can also reach us through the support or contact options available in the Service. If you are making a privacy request, please include enough information for us to verify your identity and understand your request.