Get my plan

Privacy Policy

Last updated: October 21, 2026

This Privacy Policy explains how Valentin Ortiz ("we", "us"), the operator of workoutandmealplan.com, collects, uses and protects your personal information, including consumer health data. We are the data controller.

1. Information we collect

  • Health and fitness information you enter in the form: goal, fitness level, age, sex, height, weight, training schedule, where you train, home equipment, injuries or limitations, and the answer to our safety check. For the meal plan: diet preference, food allergies or intolerances, food preferences and ZIP code. Optionally, your first name.
  • Order and payment information: email address, the product bought, amount, discount and payment status. Card details are collected directly by Stripe; we never see or store your full card number.
  • Consent record: the date, time, IP address and text of the consent you give before paying.
  • Technical information: standard server logs (IP address, browser, pages requested) kept for security.

This Site does not use cookies, analytics or advertising trackers. Stripe's payment page sets its own cookies for security and fraud prevention, under Stripe's privacy policy.

2. How we use it

  • To generate your personalized plan and deliver it to you (download page and email).
  • To process payments, refunds and customer support requests.
  • To keep accounting and tax records and comply with legal obligations.
  • To keep the Site secure and prevent abuse.

We use your health information only to create your plan. We do not sell your personal information or health data, we do not share it for targeted advertising, and we do not use it to train AI models.

3. Your consent and legal bases

We process your health information only with your explicit consent, which you give by ticking the box before payment (Art. 9(2)(a) GDPR and, where applicable, US state consumer health data laws such as Washington's My Health My Data Act). You can withdraw your consent at any time by emailing us; we will then delete your health information. Other processing is necessary to perform our contract with you, to comply with legal obligations (tax and accounting) or is based on our legitimate interest in keeping the Site secure.

4. Who we share it with

We share personal information only with the service providers we need to run the Site, under contracts that require them to protect it:

  • Anthropic (United States): AI provider that generates the plan from your answers. Your email and payment details are not sent to it.
  • Stripe (United States / Ireland): payment processing.
  • Google (Gmail): sending the email with your plan.
  • Hetzner (European Union): web hosting and storage.

We may also disclose information when required by law. Some providers are located outside your country, including in the United States and the European Union; transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

5. How long we keep it

  • Health and fitness answers, your generated plan and the PDF: deleted 30 days after your order.
  • If you don't complete payment, your answers are deleted within a few hours.
  • Order records (email, product, amount, date and consent record) are kept for as long as required by tax and accounting law (generally up to 6 years).
  • Server logs are kept for a short period for security purposes.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to withdraw consent, to object to or restrict processing, and to not be discriminated against for exercising these rights. US residents of states with privacy or consumer health data laws (such as California, Washington, Nevada, Connecticut, Colorado, Virginia or Texas) can exercise these rights by emailing us. We will respond within the time required by law and may need to verify your request (for example, by asking you to write from the email address used for the order). If you are not satisfied, you may complain to your local authority; in the EU, the Spanish Data Protection Agency (aepd.es).

7. Security

We use HTTPS encryption, restricted server access, unguessable order links and automatic deletion of health data. No system is completely secure, but we work to protect your information.

8. Children

The Site is not intended for anyone under 18 and we do not knowingly collect information from minors.

9. Changes

We may update this policy; the date at the top shows the latest version. We will not use your health information for new purposes without asking for your consent.

Contact

Valentin Ortiz (Spanish tax ID 42212434M)
c/palafox23 35010 Las palmas de GC, Spain
Email: tusextractosenexcel@outlook.com