Privacy Policy

Last updated: 29 April 2026

The Evening Coach (“we”, “our”, “us”) is an initiative of the Talent Share Community Foundation. We respect your privacy and process your data in line with the EU General Data Protection Regulation (GDPR) and the Dutch implementation act.

This page describes the data we collect through this app. It is additional to the foundation's general privacy policy, which also applies to you. Where the two differ, the more protective rule wins.

1. Who we are

The Evening Coach is operated by Talent Share Community Foundation, a non-profit organisation registered in the Netherlands. You can reach us via the contact form on the foundation's website or through your assigned coach inside the app.

2. Data we collect

2.1 Account information

• Email address and password — used to sign in. Passwords are never stored in plain text; Firebase Authentication stores a salted hash.
• First and last name — shown to your coach and inside the app interface.
• Role (admin, coach, user) — controls what you can see in the app.
• Coach assignment — when you are a patient, we record which coach is supporting you.

2.2 Coaching content you create

• Motivation answers — three free-text questions you fill in on your dashboard.
• Journal entries — your daily reflections, mood (good / neutral / not great), “what went well” and “recharge” lists.
• Daily check-in status — whether you did your habit, skipped, or asked for support.
• Habits and goals — title, description, weekly target, motivation note.
• Questions to your coach — anything you submit from the “Questions for My Coach” section.
• Voice notes — when you (or your coach) record an audio reply, the recording is stored in Firebase Storage and linked to the relevant message.

2.3 Coach-generated content

If you are a patient, your coach's daily messages, journal replies, and weekly reactions about you are stored alongside your account. They are visible to you, your coach, and platform administrators only.

2.4 Notification settings

We store your reminder preferences (time, frequency, time zone), Do-Not-Disturb hours, and whether you want push notifications for coach messages. We also store the FCM (Firebase Cloud Messaging) tokens of devices you have enabled push notifications on, so we can deliver messages to those devices.

2.5 Public landing-page interest form

When you fill in the contact form on the home page (“Get Started” / “Join Now” / “Want to become a coach?”), we collect the name, email, phone, optional company, and message you submit, plus your IP address and browser user-agent. We use this only to follow up with you about your enquiry.

2.6 Technical data

• Session cookie — a singlesession cookie, signed with our session secret, that keeps you logged in for up to seven days. It is HTTP-only, cannot be read by JavaScript, and is sent only over HTTPS in production.
• localStorage — your in-progress motivation answers are stored locally in your browser as a fallback so you don't lose them if you close the tab before saving.
• Server logs — Cloudflare records standard request data (timestamps, paths, IP addresses, status codes) for security and abuse prevention. Logs are retained according to Cloudflare's retention policy.

3. How we use your data

• To deliver the coaching service you signed up for.
• To let your assigned coach support you (read your reflections, reply, send daily messages and reminders).
• To send push notifications you have explicitly enabled, in line with your notification settings and DND window.
• To respond to enquiries you submit through the contact form.
• To detect and prevent abuse of the service.

4. Legal bases

• Contract — we need your data to provide the coaching service you agreed to use.
• Consent — for push notifications, voice recordings, and the public contact form. You can withdraw consent at any time.
• Legitimate interest — for security logs, anti-abuse measures, and bot protection (Cloudflare Turnstile).

5. Sharing & sub-processors

We do not sell or rent your personal data. We use a small number of trusted sub-processors:

• Google Firebase (Google Ireland Ltd.) — authentication, Firestore database, file storage, push notifications.
• Cloudflare Inc. — application hosting (Workers), DNS, edge caching, Turnstile bot protection.
• GitHub Inc. — source-code hosting and continuous deployment. No user content is stored here.

Each sub-processor is bound by their own data-protection terms and is GDPR-compliant.

6. Where your data is stored

Firestore data is hosted in the Google Cloud europe-west region by default. Voice notes and other uploaded files are stored in the same region. Cloudflare may process requests in any of its global edge locations; the response and your account data still live in Europe.

7. Retention

• Account & coaching content — kept for as long as your account is active. If you ask us to delete your account, we remove personal data within 30 days, except where we are required to retain it for legal reasons.
• Interest-form submissions — kept for up to 12 months after the last contact, then deleted.
• Server logs — kept according to Cloudflare's default retention (typically 7–30 days).

8. Your rights

Under the GDPR you have the right to:

• access the data we hold about you,
• correct inaccuracies,
• delete your data (“right to be forgotten”),
• restrict or object to processing,
• port your data to another service,
• lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise any of these rights, contact your coach or use the general contact details on talentsharecommunity.nl.

9. Cookies

The Evening Coach uses only one cookie: an HTTP-only session cookie that keeps you signed in. We do not use advertising, analytics, or third-party tracking cookies. Cloudflare may set its own technical cookies for security (e.g. __cf_bm); these are anonymous and short-lived.

10. Changes to this policy

We may update this policy when the service or applicable law changes. The “Last updated” date at the top of this page reflects the most recent version. Significant changes will be announced inside the app.

11. Contact

For privacy questions, write to the foundation via talentsharecommunity.nl.