Privacy policy

Version of 10 October 2026.

Pantari only collects what your program needs. What you say about your discomfort is used only with your consent, to adjust your training load.

No advertising, no selling of data, no audience measurement, and no artificial intelligence reads your answers. You can export or delete your data at any time from Settings.

The pantari.com site and the waitlist

The pantari.com site sets no cookies and loads no third-party scripts. The sections below describe the app.

The waitlist: if you leave your email address to be told when Pantari opens, we keep that address, the language and page of the form, and proof of your consent (dates and version of the text shown). It is used only to send you a confirmation email, then a single email on opening day. Basis: your consent, which you withdraw at any time through the “Unsubscribe” link or by writing to contact@pantari.com.

Without confirmation, the address is erased after 7 days; once confirmed, after the opening email, and at the latest 12 months after signing up. Proof of your consent is kept for 3 years, without your address. Against automated sign-ups, the IP address of a request is kept for one day, as a fingerprint. Providers: Supabase (database, Ireland, European Union) and Resend (sending emails, United States).

1. Who is responsible

The controller is Pantari, whose publishing company is being set up (Switzerland). Contact for any question about your data: contact@pantari.com.

Our representative in the European Union will be named here as soon as they are appointed.

2. Your answers about your discomfort: health data

To adjust your program, Pantari records what you say about your discomfort: the area and side, its intensity from 0 to 10 during and after the session and on waking, the effort you feel, your answers to the starting questions, a discomfort you are keeping an eye on, the exercises you set aside for that reason, and, if you give them, your weight and the race you are aiming for.

This is data concerning your health. It is processed only with your explicit consent, given in the app on a separate screen, and only to adjust your training load. It is stored apart from your email address, is never used for advertising and is passed to no one other than our hosting provider.

You can withdraw this consent at any time, as easily as you gave it, in Settings, “My data”. This data is then erased straight away, and Pantari can no longer adjust your program. Withdrawing does not affect what was done before.

3. What we process, and why

Your account: email address, first name, language, time zone and reminder setting. To identify you and run the app (performance of the contract).
Your program: planned and completed sessions, exercises, sets, loads, training places (a type of place and equipment, never an address) and the figures of an imported activity. An imported file is read on your phone: only totals are kept, never your route (performance of the contract).
Your answers about your discomfort, described in section 2 (your explicit consent).
Your subscription: order and subscription identifiers at Paddle, amount, currency, status and dates. Never your card or billing address, which only Paddle knows (performance of the contract, accounting obligations).
Emails: sign-in code, session reminder if you turn it on, and messages about your account and subscription. No health data in any email (performance of the contract; the reminder, at your request).
Where you came from: the short name of the link that brought you and the landing page, recorded when the account is created, to know which articles and partners make Pantari known (legitimate interest).
Your reports: the text, the page, the browser and, if you add one, a screenshot, read only by the team (legitimate interest: fixing the app).
Security: an anti-bot check when you start and when you sign in, and technical error reports with no identifier or health data (legitimate interest).

4. How your program adjusts

Pantari adjusts your sessions from your answers, by fixed rules: this is profiling within the meaning of the law. No artificial intelligence is involved, and the load never rises beyond what the rules allow.

These adjustments have no legal effect: you stay free to follow, lighten or skip each session, change your answers or stop. For an explanation, or to challenge an adjustment, write to us at contact@pantari.com: a person will answer you.

5. Who receives your data

Only our providers, for what they need, under contract and on our instructions:

Supabase: database, sign-in and files, hosted in Ireland (European Union).
Vercel: hosting of the app; processing in Dublin (Ireland), a company based in the United States.
Resend: sending emails; United States.
Sentry: technical error reports, with no personal data; data in Germany, a company based in the United States.
Cloudflare (Turnstile): anti-bot check when you start and when you sign in; United States.
Google: only if you choose to sign in with Google; United States.
Paddle.com Market Limited: seller of the subscription, in the United Kingdom. Paddle processes your payment data on its own behalf, under its own privacy policy.

6. Data outside the European Union and Switzerland

The data of your account and program is hosted in the European Union. Some providers are based in the United States or the United Kingdom. Transfers to the United States rely on the EU–US and Swiss–US Data Privacy Framework or, failing that, on the European Commission’s standard contractual clauses; the United Kingdom benefits from an adequacy decision.

7. How long

Without an account: the session is erased 24 hours after your last activity.
Your account: as long as you use it. Once closed, it is erased after 30 days, or straight away if you ask. If inactive for 24 months, it is erased, after a warning email one month before.
Your answers about your discomfort: erased straight away if you withdraw your consent, and in any case with your account.
Your reports: erased with your account; the text may be kept with no link to you.
Proof of your consents (the date and version of the text, never your answers): kept as long as the law may ask us to produce it.
Automatic database backups keep a copy for a few days, then expire on their own. Paddle keeps your invoices under its accounting obligations.

8. On your phone

The app sets no advertising or audience-measurement cookies. It stores on your phone what makes it work: your sign-in, a session not yet sent (7 days at most, erased once sent and when you sign out), a few display preferences, and the name of the link that brought you, for the length of the visit.

The sign-in services (Google, Cloudflare) and the payment service (Paddle) may set their own cookies when you use them.

9. Your rights

You can access your data and take it with you (Settings, “My data”, export), have it corrected, erase it (close your account), withdraw your consent for your answers about your discomfort, object to processing based on our legitimate interest, or ask for it to be restricted.

For anything the app does not do itself, write to contact@pantari.com. We answer within one month.

You can also complain to a data protection authority: in France, the CNIL (cnil.fr); in Switzerland, the Federal Data Protection and Information Commissioner (edoeb.admin.ch); elsewhere, the authority of your country.

10. Age

Pantari is for people aged 16 or over. If we learn that an account belongs to someone younger, we close it and erase its data.

11. Security

Exchanges with the app are encrypted, and data is encrypted at rest by our hosting provider. Each account only accesses its own data; screenshots attached to reports can only be read by the team, through a link valid for a few minutes. Health data never appears in technical logs or error reports.

12. Changes

We update this policy when the app changes. A new version is shown to you in the app; a significant change is also announced before it applies.