Privacy policy

June 2026 edition

1. General Provisions

This Privacy Policy sets out how Sportstep collects, uses, stores, and otherwise processes personal data when individuals use the Sportstep website, mobile application, and other related services. The purpose of this Policy is to clearly, transparently, and understandably inform you about what personal data is processed, for what purposes, on what legal basis, to whom the data may be disclosed, how long it is retained, and what rights data subjects have.

This Policy applies to all persons who use the website www.sportstep.lt, the Sportstep mobile application, bookings, orders, consultations, community, communication, subscriptions, and other related Platform features, including persons without an account (Guests) who use limited public features. Hereinafter, the website, mobile application, and all related services are collectively referred to as the Platform.

2. Data Controller

Your personal data controller is Sportstep, MB, legal entity code 307605923, registered address Rimvydo g. 15-16, LT-50233 Kaunas, Lithuania.

You can contact Sportstep by email at [email protected]. For questions related to privacy, personal data processing, requests to exercise your rights, or complaints, you may also contact us at the same email address: [email protected].

3. Sportstep’s Role in Data Processing

Sportstep acts as a data controller in cases where it processes personal data for the purposes of its business operations, Platform administration, and service provision. This includes account creation and administration, login and security assurance, administration of bookings, orders, subscriptions, and payments, customer support, sending notifications, managing content and community features, improving the Platform, preventing security incidents and abuse, handling complaints, and complying with legal obligations.

In certain cases, coaches using the Platform may act as separate data controllers with respect to their clients’ data when they process such data for the purposes of their professional activities, for example, when providing individual consultations, creating training or nutrition plans, evaluating progress, or otherwise organizing their services. In such cases, Sportstep may act as a provider of the technical environment and infrastructure or process data only to the extent necessary to ensure the operation, security, and provision of the Platform’s services.

Where data related to physical condition, wellness, nutrition, sports goals, or progress is submitted or used on the Platform, such data is processed only to the extent necessary for providing the relevant feature or service and for complying with applicable laws.

4. What Personal Data We Process

Depending on how you use the Platform, Sportstep may process various categories of personal data. This may include your identity and contact data, such as your first name, last name, username, email address, phone number, date of birth, or other contact information you provide.

We may also process account and profile data, including login information and account settings, account statuses, selected language, time zone, profile picture, coach profile description, specializations, service descriptions, social media links, publicly displayed information, coach-chosen public contact details (work email, phone number, Facebook Messenger link), and other data related to your profile or account.

When using the Platform’s features, we may also process booking, order, free consultation (including Guest-provided first name, last name, email, and phone number), invitation (invited person’s contact and profile data, invitation confirmation information), subscription, payment, invoice, refund, and other data related to ordering and administering services. Sportstep does not store full payment card details. Payment information is processed via third-party payment service providers, and Sportstep may receive only limited information necessary to administer payments, subscriptions, and related processes.

If you sign in via a third-party authentication service (e.g. Google or Apple), identifiers and contact information transmitted by that service may be processed in accordance with your consent and the provider’s settings.

Depending on the services used, the Platform may also process data related to wellness, physical condition, nutrition, and goals that you provide yourself or that is used in providing individualized services to you through the Platform, including feedback on how you felt during workouts.

We may also process communication and content data when you use community, messaging, direct messages between a linked coach and client, comment, customer support, or other communication features, including content you create or upload and other information related to communication or content administration.

If you upload photos, videos, documents, certificates, or other files, data related to such files may also be processed, including their technical data, metadata, and information necessary for their storage, display, verification, or protection.

In addition, Sportstep may process technical, security, and Platform usage data, such as your IP address, device type, operating system, browser type, device or app identifiers, session information, login history, notification settings, and other information necessary for the operation, security, and improvement of the Platform.

Sportstep does not use precise device location tracking and does not request GPS permission. If addresses or location data are displayed on the Platform, they are provided based on information entered by users or coaches, rather than from the device’s precise location.

5. Where We Obtain Your Data

Sportstep receives most personal data directly from you when you register, complete your account, use the Platform, book services or a free consultation, make payments, purchase a subscription, publish content, upload files, or contact us.

Certain data may also be obtained from your actions on the Platform, from coaches where this is related to the provision of a service, during invitation or consultation processes, from third-party authentication providers (e.g. Google, Apple) when you choose to sign in through them, and from payment service providers when administering payments or subscriptions.

If you provide another person’s data, for example when ordering a service on their behalf, you must have the right to do so and, where required by law, properly inform that person about the disclosure of their data.

6. Purposes and Legal Bases for Data Processing

Sportstep processes personal data only where it has a lawful basis to do so.

Personal data is primarily processed in order to enter into and perform a contract with the user and to provide the Platform’s services. On this basis, an account is created and administered, access to the Platform is provided, bookings and orders are organized, consultations are administered, subscriptions and payments are administered, community, communication, and other Platform features are provided, and the core operation of the Platform is ensured.

For Guest free consultations, data may also be processed on the basis of contract performance or consent given in the consultation booking form.

Certain data is processed in order to comply with legal obligations, for example for accounting, tax, consumer protection, data protection, security, and other requirements under applicable law.

In some cases, data is processed on the basis of Sportstep’s legitimate interest. This includes ensuring the security of the Platform and accounts, preventing abuse and fraud, detecting and resolving technical incidents, administering content and community features, handling disputes and complaints, assessing service quality, improving the Platform’s functionality, and protecting Sportstep’s rights and interests.

Where you give your consent, your data may be processed for marketing purposes, for example for sending newsletters, offers, or other informational messages by email, within the app, or through other channels you choose.

Where more sensitive data related to wellness, physical condition, nutrition, or similar matters is processed on the Platform, such data is processed only to the extent permitted by applicable law and only as necessary to provide the relevant service or feature. Where required by law, such data is processed only upon obtaining the relevant consent or on another lawful basis provided for by law.

7. Whether You Must Provide Data

Certain data is necessary in order for Sportstep to provide services. If you do not provide such data, you will not be able to create an account and use the full client functionality.

An account is not required for Guests to use limited public features, such as browsing the coach directory or booking a free consultation. In that case, only data required for the consultation (first name, last name, email, phone number) is mandatory.

If specific data is not necessary, providing it is considered voluntary. In such a case, failure to provide it will generally not prevent you from using Sportstep’s core services, but it may limit certain additional features or personalization options.

8. Publicly Shared Content

Certain parts of the Platform may be visible to other users or Guests, such as coaches’ public profiles in the public coach directory, coach-chosen contact details, community posts, comments, reactions, success stories, publicly shared materials, or other information published by users.

If you publicly post information about yourself or another person, whether publicly or within the community, such information may become visible to other Platform users depending on the nature and settings of the specific feature. For this reason, it is recommended that you publicly share only as much information as is actually necessary.

Sportstep may also process information related to the administration and security of community content, such as reports of potential violations, moderation actions, or other information necessary to ensure a safe and orderly community environment.

9. To Whom We May Disclose Your Data

Your personal data is not sold.

Where necessary for the provision of services, data may be disclosed to coaches. If you order a coach’s service or use features offered by a coach, the coach receives the contact and service-related data that is necessary for them to properly provide the service. The coach may see the contact details that you have provided in your account.

For the administration of payments and subscriptions, Sportstep uses the third-party payment service provider Stripe. Where required by law or where necessary to protect Sportstep’s rights and interests, data may be disclosed to lawyers, auditors, accounting service providers, supervisory authorities, law enforcement authorities, courts, or other authorized entities.

If Sportstep’s business is reorganized, transferred, or sold in the future, personal data may be transferred to the entity taking over the business to the extent permitted by law.

10. Data Transfers Outside the European Economic Area

In some cases, personal data may be transferred outside the European Economic Area, for example where this relates to international technology or payment service providers.

In such cases, Sportstep seeks to ensure that appropriate safeguards are applied, such as data transfer mechanisms approved by the European Commission, standard contractual clauses, or other safeguards provided for under applicable law.

11. How Long We Retain Your Data

Personal data is not retained longer than necessary for the purposes for which it was collected, except where a longer retention period is required by law or necessary for the establishment, exercise, or defense of legal claims.

Account data is generally retained for the duration of the account and for a reasonable period after its closure. Order, subscription, and payment data may be retained for longer where necessary to comply with accounting, tax, or other statutory obligations. Customer support, complaint, and dispute data is retained for as long as necessary to resolve the relevant matter and, where necessary, for potential legal actions.

When data is no longer needed, it is deleted or anonymized.

12. Cookies and Similar Technologies

The Sportstep website and application use essential cookies and similar technical measures necessary for the operation of the website and app, language preferences, maintaining login sessions, and security. When you sign in through a third-party service or when security measures are used, cookies from those providers may also be set.

At present, no analytics or marketing cookies requiring separate user consent are used. If such technologies are introduced in the future, this Privacy Policy will be updated accordingly.

* Used only when you choose to sign in with Google. The mobile application uses other technical measures for authentication.

13. Marketing Communications and Opt-Out

If you have given your consent, Sportstep may send you marketing communications by email or push notifications. Such communications may include news about the Platform, offers, new features, or other information related to Sportstep’s activities.

You may opt out of marketing emails at any time by clicking the unsubscribe link in the email you receive. You may opt out of push notifications in your device or app settings. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

14. Automated Decision-Making

Sportstep does not currently carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

15. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to receive information about the processing of your data, access your data, request the rectification of inaccurate data, request the deletion of data where applicable, request the restriction of data processing, object to processing where it is based on legitimate interest, request data portability where this right applies, and withdraw consent where data is processed on the basis of consent. These rights are an essential part of the GDPR information framework.

If you wish to exercise your rights, you may contact us by email at [email protected]. In certain cases, Sportstep may request additional information in order to verify your identity.

16. Data Security

Sportstep implements technical and organizational security measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. Such measures include access control, system protection, secure data storage, backups, security monitoring, and incident management processes.

17. Complaints and Questions

If you have questions about this Privacy Policy, the processing of your personal data, submitting a complaint, or would like your data to be removed, please first contact Sportstep administration by email at [email protected]. Sportstep aims to review all requests and complaints as promptly and efficiently as possible.

18. Changes to the Privacy Policy

Sportstep may periodically update this Privacy Policy to reflect changes in law, services, or data processing practices. The most recent version of this Policy will always be published on the Platform. If the changes are significant, Platform users may also be informed through the Platform or by another appropriate means.