Privacy Policy

Who we are

Neverwall is operated by Bogdan C, a private individual based in Romania. For data protection matters, contact us at hello@neverwall.co.

What we collect and why

When you generate a plan we collect the information you provide in the form: race distance, target time, body weight, sex, temperature, fuel preferences, GI history, caffeine tolerance, sweat rate, and optional race date. We use this information solely to compute and deliver your personalised fueling plan. We do not sell it, rent it, or share it with third parties for marketing.

If you set a race date, we may send you a single automated debrief email approximately 48 hours after that date asking how the plan performed. No ongoing marketing is sent.

If you purchase a plan, your email address is collected to deliver the plan and to process your payment. Payment details are handled entirely by Stripe and never touch our servers.

If you create an account (via Google Sign-In), we store your email address and your purchased plan data so you can access your plans later. This data lives in Supabase and is protected by row-level security — only you can read your own plans.

Cookies and analytics

We do not use advertising cookies or third-party marketing trackers. Supabase sets a session cookie to keep you logged in. We use sessionStorage only for in-flight payment recovery in the event of a 3D-Secure redirect, and clear it immediately on completion.

We use PostHog for anonymised, aggregated analytics (page views, feature usage). PostHog analytics only loads if you accept cookies via the cookie banner. No analytics data is collected if you decline. PostHog is subject to its own Privacy Policy.

Third-party services

• Stripe — payment processing. Stripe may store your card details and is subject to Stripe's Privacy Policy.
• Resend — transactional email delivery. We pass Resend your email address and your plan PDF to deliver it to your inbox. Resend does not use this data for marketing.
• Supabase — account and plan storage. Data is hosted in the EU (AWS eu-central-1).
• PostHog — anonymised product analytics (opt-in via cookie banner). See PostHog's Privacy Policy.
• Vercel — hosting and edge network. Vercel may log anonymised request metadata (IP hashed, no user tracking).

Your rights (GDPR)

If you are in the EU or UK, you have the right to access, correct, export, or delete your personal data at any time. To exercise any of these rights, email us at hello@neverwall.co. You can also delete your account directly from your Plans page, which removes all stored plan data and your account immediately.

We respond to all data requests within 30 days.

Data retention

Plan data is retained for as long as your account is active. If you delete your account, all associated data is permanently removed within 24 hours. Payment records are retained for 7 years as required by financial regulations, but these are held by Stripe, not by us.

Contact

Questions about this policy: hello@neverwall.co