Who we are. LEGRAM Coach is operated by BML BIG MB, Lithuania (EU). For professionals’ own account data we are the controller. For the data a professional records about their clients, the professional is the controller and LEGRAM Coach is the processor under the data-processing agreement accepted at sign-up.
What we collect. Account: email, display name, role, certificate for verification. Client records created by the professional: name, contact details, goal, sessions, plans, feedback, measurements, and body-map notes. Body-map notes and measurements are health data (GDPR Art. 9) and are stored only with the client’s explicit consent, collected by the professional or in Holo.
Why. To run the service you asked for: managing clients, building and sharing plans, scheduling, and — if you enable it — drafting suggestions with an AI model. We do not use any data for advertising, and we never sell it.
AI processing. Only when the professional grants the "AI processing" consent. Structured summaries of a client’s record are sent to our model provider (OpenRouter and the model shown in Settings) to draft text. Drafts are suggestions; nothing is sent to a client or saved without the professional’s explicit action. Data sent to the model is not used to train models under our provider agreement.
Where. All data is stored and processed in the European Union (Supabase, EU region). Encryption in transit and at rest. Access is scoped by row-level security so a professional can only ever read their own clients.
Share links. A plan shared by link is readable by anyone holding the link. Links are unguessable, show only the plan and the professional’s name, can be revoked at any time, and record a view count only.
Holo. If a client links their Holo account, only the data scopes the client selects (for example activity, sleep, meals) flow to the professional, and the client can revoke each scope at any time inside Holo. Holo’s own privacy policy governs the Holo app.
Your rights. Access, rectification, export (Settings → Your data → Export), erasure (Settings → Your data → Delete account, 30-day grace), restriction, objection, and complaint to the Lithuanian State Data Protection Inspectorate. Clients exercise their rights through their professional or by writing to us; we assist within 30 days.
Retention. Active accounts: for as long as the account exists. Deleted accounts: fully erased 30 days after the request. Archived clients: kept until the professional deletes them or the account.
Children. LEGRAM Coach is for professionals aged 18+. Professionals must not record data about clients under 16 without verified parental consent.
Changes. We announce material changes by email and require re-acceptance where the law requires it.
Contact. privacy@bmlbig.lt