Privacy policy
We collect as little as we can, never sell your data and show no ads. This page explains what we keep, why and your rights.
Last updated 18 October 2026
Who is responsible
The controller of your personal data is In-Shop Oy (business ID 0351098-9), Finland. Contact for all privacy questions: hello@lifelongmethod.com.
What we collect and why
| What | Why | Legal basis |
|---|---|---|
| Your plan answers: goal, time, training days, sex, age, body weight, starting level, how you eat | To build your plan. They stay in your own browser unless you save your plan to an account. | Contract (providing the plan you ask for) |
| Your health check answers (for example a heart condition, high blood pressure, kidney disease, pregnancy) | To make your plan safer. Stored with us only if you save your plan to an account and tick the consent box. | Your explicit consent (GDPR article 9(2)(a)), which you can withdraw at any time |
| Email address and login records | To create your account and send login links | Contract |
| Sessions you tick as done, and your plan start date | To show your progress | Contract |
| Early-access list: email, when you agreed, and for earlier sign-ups whether you reserved a founding place | To tell you about the launch and send occasional expert ideas | Your consent; unsubscribe at any time |
| Billing details: name, country, what you bought and payment history (never your full card number) | To take payment, keep accounts and follow tax law | Contract and legal obligation |
| Emails you send us | To answer you | Legitimate interest in answering questions |
| Technical logs: IP address, browser, time of request | To keep the site running and secure | Legitimate interest in security; kept for a short time |
We do not use your data for advertising, we do not sell it, and we do not make decisions about you that have legal or similar effects.
Cookies and browser storage
We use only what the site needs to work: a login cookie when you are logged in, and your browser’s own storage for your plan answers and your choice of units. There are no analytics, advertising or tracking cookies, so there is no cookie banner. If we ever add analytics, we will update this page and ask where the law requires it.
Who processes data for us
- Supabase: accounts and saved plans, stored in the EU (Ireland).
- Vercel: website hosting. Requests may pass through servers outside the EU, covered by the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
- Brevo (France): login and service emails, and the early-access list.
- Zoho (EU data centre): our email inbox.
- Stripe: payment processing. Card details go directly to Stripe, not to us.
Each works under a data processing agreement and only on our instructions, except where noted.
How long we keep it
- Account, plan and progress: until you delete your account. We delete accounts unused for 24 months, after an email warning.
- Early-access list: until you unsubscribe or ask us to delete it.
- Billing records: as long as Finnish accounting law requires (up to 10 years).
- Technical logs: up to 30 days.
Your rights
You can ask to see, correct, download or delete your data, restrict or object to its use, and withdraw consent at any time (this does not affect what we did before). You can delete your account and all saved answers yourself on the My plan page, or email us and we will reply within one month. You can also complain to a data protection authority: in Finland the Office of the Data Protection Ombudsman (tietosuoja.fi), or the authority where you live.
Children
Lifelong Method is for adults aged 18 and over. We do not knowingly collect data from children.
Security
Data travels encrypted (HTTPS). Saved plans are protected so that each person can read only their own. Logins use one-time links or codes, so there are no passwords to steal.
Changes
If we change this policy in a way that matters, we will tell members by email before the change applies.