How we handle your data.

Company

N+One is operated by N+One UG (haftungsbeschränkt) i.G., based in Köln, Germany.

Full legal details: Imprint.

Data residency

Scoped like Privacy §§5–6. Primary database and app compute are in the EU; some processors are outside the EU with safeguards. We do not claim exclusive Europe-only processing or that coaching models run only in the EU.

• Supabase (EU)

  Core database and authentication in EU data centers.

• Vercel (EU)

  Application functions in EU data centers; global CDN with EU-based compute.

• OpenAI (United States)

  Many coaching replies and default plan-generation flows are processed in the US under Standard Contractual Clauses (SCCs) and our enterprise agreement.

• Google (Gemini)

  Some coach classification and simple-response tasks may be processed by Google's Gemini models.

• Anthropic

  Some multi-week and race-plan synthesis tasks may be processed by Anthropic when that routing is enabled.

• Google Analytics 4 (with consent)

  Optional analytics only after Cookie Settings consent; transfers may include the USA under Google's applicable mechanisms.

See Privacy §5 and §6.

Subprocessors

Names already listed in our live Privacy Policy. Integration partners you connect (for example Strava or Garmin) are separate — you authorize those via OAuth.

• Supabase

  Database and authentication — EU data centers (Privacy §5–6).

• Vercel

  Hosting, CDN, and application functions — EU-based compute (Privacy §5–6).

• OpenAI

  AI coaching replies and default plan-generation flows — United States with Standard Contractual Clauses (Privacy §5–6).

• Google (Gemini)

  Message classification and some simple coach turns via Gemini models (Privacy §4.2 / §5).

• Anthropic

  Some multi-week and race-plan synthesis tasks when Claude routing is enabled (Privacy §4.2 / §5).

• Google Analytics 4

  Usage analytics only with your consent; possible USA transfers (Privacy §5.4 / §6).

• Vercel Analytics

  Privacy-friendly aggregated usage statistics — no analytics cookies (Privacy §5.4).

Data Processing Agreement

DPA available on request: hi@nplusone.app.

AI processing

Your Dynamic Coach sends relevant profile, training, and chat context to current AI model providers — OpenAI, Google (Gemini), and for some plan-generation flows Anthropic — so we can recommend the next session. Under our enterprise agreement, your data is NOT used to train OpenAI's models.

More detail in our Privacy Policy and OpenAI enterprise privacy.

Your controls

• Export or delete your data from Privacy settings (or contact us).
• Disconnect wearables and training platforms anytime.
• Manage cookies via Cookie Settings in the site footer.

Not medical advice

Coaching recommendations are informational and are not professional medical or coaching advice. See Terms §6.