← Back

Privacy Policy

Last updated: May 2026

1. Data Controller

Hent is developed and operated by Bryan Stephan, a sole trader based in France. Contact : brystephan@gmail.com

2. Nature of the Service

Hent is a training aid for amateur athletes. Coaching recommendations are AI-generated and do not replace advice from a healthcare professional or certified coach. You remain solely responsible for your training decisions.

3. Data Collected and Purposes

Account data: name, email address — required for authentication.

Strava activity data: sports activities, heart rate, GPS, time, cadence — used to generate personalised coaching analyses.

Athlete profile data: weight, height, date of birth, sex, VO2max, heart rate zones — used to personalise coaching.

Feedback and feelings: RPE, sleep quality, muscle soreness, mood — used to contextualise recommendations.

Goals: event name, distance, elevation, date, target time — used to adapt training planning.

Some of this data (heart rate, perceived effort) may qualify as health data under GDPR art. 9.

4. Legal Basis

Processing is based on your explicit consent (GDPR art. 6.1.a), given when you sign in via Strava or Google. You may withdraw consent at any time by deleting your account.

5. Automated Processing and AI

Hent uses a generative AI system (Anthropic Claude) to analyse your sports data and produce training recommendations. This processing constitutes profiling under GDPR (art. 13.2.f and art. 22). The logic: your activity metrics and perceived effort are analysed to generate tailored recommendations. The impact is limited to your training — you remain the sole decision-maker. You may object by deleting your account (art. 21 GDPR).

In accordance with the AI Act (art. 50), each coaching analysis is labelled 'AI-generated analysis' in the interface.

6. Processors and International Transfers

Supabase — database hosting and authentication. Region: EU (eu-west).

Vercel — application hosting. Region: EU. DPA Vercel.

Anthropic — AI analysis (Claude). Headquarters: United States. Transfer covered by standard contractual clauses (SCC). Anthropic.

Strava — activity data source. Headquarters: United States. Transfer covered by SCC. Strava.

Google — OAuth authentication. Headquarters: United States. Transfer covered by SCC.

7. Strava Disconnection

If you revoke Hent's access from Strava, your Strava tokens are immediately invalidated and your Strava-derived data (imported activities, coaching analyses, VO2max estimates, coaching profile) is deleted. Your Hent account is preserved — you may continue using the application via Google or re-authorise Strava.

8. Retention Period

Your data is retained for as long as your account is active. Upon account deletion, all data is permanently erased. No residual retention.

9. Your Rights

Access and portability (art. 15 and 20): download all your data from Profile → Export data.

Rectification (art. 16): edit your athlete profile in the application.

Erasure (art. 17): delete your account from Profile → Delete my account. Execution time: immediate.

Objection to profiling (art. 21): delete your account.

Complaint: you may file a complaint with the CNIL (French data protection authority). cnil.fr

To exercise your rights other than via the application: brystephan@gmail.com. Maximum response time: 1 month.

10. Cookies

Hent uses only strictly necessary session cookies for authentication (Supabase Auth). No analytics or advertising cookies are set.

Applicable jurisdiction: France. GDPR (EU Regulation 2016/679) + AI Act (EU Regulation 2024/1689).