Privacy Policy

This Privacy Policy explains how Belseo LLC (“we”, “us”, “our”) collects, uses and protects your personal information when you use:

lorenamendez.com (the “Site”) and our coaching services;
the Lorena Méndez Training app and the member area at lorenamendez.com/portal (together, the “Member App”) — where you see your training plan, your nutrition plan, your measurements and your assessments;
the Entrena con Lorena Méndez app, our membership app powered by Virtuagym.

Coaching services are delivered by the professional Lorena Méndez; Belseo LLC is the entity responsible for the Site, the apps and the processing of your data. By using them you agree to this Policy.

See also our Cookie Policy, Terms of Service and Disclaimer.

1. Who we are

Data controller / Site operator: Belseo LLC, 990 Biscayne Blvd, Ste 501-16, Miami, FL 33132, USA. Coaching delivered by the professional Lorena Méndez. Contact: info@lorenamendez.com.

2. Information we collect

Information you provide: name, email, phone number, date of birth, gender, and the answers you submit through our contact form, assessment / “build my plan” form, quizzes, tools and membership signup (which may include health- and fitness-related information such as goals, training experience, measurements, injuries or health notes that you choose to share).
Membership & account data: the details needed to create and manage your member account and deliver your training and nutrition program, and whether your membership is active.
What you record in the Member App: your body measurements and weight over time, the workouts you log, and your nutrition plan and food-diary entries.
Assessment photos and videos: the images and videos you upload for your postural and technique assessments, and the record of the consent you gave before uploading them. Section 6 explains exactly how they are handled — please read it.
Payment information: if you purchase a membership, payments are processed through Stripe or Virtuagym Pay, depending on how you joined. We do not store your full card details on our servers.
Communications: messages you send us by email or WhatsApp, including any one-time verification codes used to confirm your number during signup, and the one-time codes we email you to sign in to the Member App.
Technical and security data: a session cookie that keeps you signed in, and a security log recording sign-ins and sensitive actions (such as viewing or deleting assessment images) with the date, the action and the IP address. We keep it to detect misuse of an account and to be able to show who accessed what.
Website usage data: on the Site only, via cookies and similar technologies (e.g. Google Analytics and the Meta Pixel for advertising measurement), such as pages viewed, device, referring page and approximate location. See our Cookie Policy. The Member App contains no analytics, advertising or tracking technology of any kind.

3. How we use your information

To respond to your enquiries and provide our coaching services and the apps.
To build and send you a personalized plan and price when you complete our assessment form.
To create and manage your membership, process payments and deliver your program.
To sign you in to the Member App (one-time code by email) and to verify your phone number at signup (one-time code via WhatsApp).
To generate your postural and technique assessments (see section 6).
To keep the service secure and to investigate misuse.
To improve the Site and our content, and to measure performance and advertising on the Site.
To send you service-related communications (and marketing only where you have agreed).

4. Legal bases (for EEA/UK visitors)

We process your data on the basis of: performance of a contract (to deliver services you request), your explicit consent (health information, assessment photos and videos, marketing, and non-essential/analytics/advertising cookies), and our legitimate interests (to run, secure and improve the Site and the apps). You can withdraw consent at any time without affecting prior processing.

Some of the information you provide is health- or fitness-related (a “special category” of data under GDPR): your measurements, your body-composition estimates, any injuries or health notes you share, and your assessment images. We only use it to provide the coaching service you request, we ask for your explicit consent, and we keep it to the minimum necessary. Our services are for general health and fitness and are not medical advice, and no assessment we produce is a diagnosis — see our Disclaimer.

6. Your assessment photos and videos

This is the most sensitive data we handle, so we want to be precise about it. The two kinds of assessment are treated differently:

Postural assessment (photos). The measurements of your posture are calculated on your own device, in your phone’s browser, using an open-source pose-detection model. Only the resulting numbers (angles and alignments) are sent to Google’s Gemini API to write your report. Your photos are never sent to the AI provider. To do this, your device downloads the pose model from jsDelivr and from Google’s file-hosting servers; those providers see your IP address, but not your images.
Technique assessment (video). Here the analysis needs to see the movement, so the video file itself is uploaded to Google’s Gemini API, which processes it to generate your report and stores it only temporarily for that purpose.

We use Google’s paid Gemini API. Under its terms, Google acts as our processor: it does not use what we send it to train or improve its models, and it retains it only as long as needed to return the result. Once your video has been analysed, we ask Google to delete it.

In both cases:

Your images and videos are stored encrypted (AES-256-GCM) on our server, outside the publicly accessible area, and are visible only to you and to Lorena.
You can delete them at any time from the assessment itself. The written report stays; the images disappear.
Every access to them is written to the security log described in section 2.
We never publish them, never use them in marketing, and never share them with anyone other than the providers listed in section 7.

We share data only with providers that help us run the service, under appropriate contractual safeguards. We do not sell your personal information.

Provider	Purpose
Hostinger	Hosting of the Site and the Member App and email delivery; stores your account and your training, nutrition, measurement and assessment data (assessment photos and videos are stored encrypted)
Google (Gemini API)	Automated generation of your assessments: for postural assessments it receives only the numeric measurements calculated on your device; for technique assessments it receives the video (see section 6)
jsDelivr and Google (file hosting)	Deliver the on-device pose-detection model to your browser; they receive your IP address, not your images
Virtuagym (Digifit / Virtuagym Pay)	Membership platform for the Entrena con Lorena Méndez app: hosts sign-up, processes membership payments and stores the member profile of clients who joined that way
Stripe	Payment processing and recurring membership billing
WhatsApp (Meta Platforms)	Messaging and one-time signup verification
n8n	Workflow automation that processes signup/lead data to create your account and send emails
Google Analytics (GA4)	Traffic and performance measurement on the Site only (consent-based)
Meta Pixel (Meta Platforms)	Advertising measurement and retargeting on Facebook/Instagram, on the Site only (consent-based)

We may also disclose information where required by law, to protect our rights, or in connection with a business transfer.

8. Cookies & analytics

On the Site we use essential cookies and, with your consent, analytics and advertising cookies (Google Analytics and the Meta Pixel). EU/EEA/UK visitors are asked for consent via our cookie banner, and non-essential cookies stay disabled (Google Consent Mode v2, default denied) until you accept. Full details are in our Cookie Policy.

In the Member App the only cookie is the one that keeps you signed in. There is no analytics, advertising or tracking cookie, and no third-party tracker.

9. Data retention

We keep your information only as long as needed for the purposes above or as required by law (e.g. tax/accounting records), then delete or anonymize it. Lead and enquiry data is kept while we follow up and for a reasonable period afterwards; membership data is kept for the life of your account plus any legally required period. If you delete your account, deletion is immediate (see section 10); we keep only a minimal record that the account was deleted, as proof of compliance.

10. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict or port your data, object to processing, and withdraw consent.

EU/EEA/UK (GDPR): you may exercise the rights above and lodge a complaint with your local data protection authority.
California (CCPA/CPRA): you may request access, deletion and correction, and opt out of “sale”/“sharing” of personal information. We do not sell your data; note that some advertising cookies on the Site (e.g. the Meta Pixel) may be considered “sharing” for cross-context behavioral advertising, which you can disable by declining advertising cookies in our banner.
Latin America (Mexico — LFPDPPP, Colombia, Chile and others): you have comparable rights of access, rectification, cancellation and objection under your country’s law.
Florida (FDBR) and other US state laws: where applicable, you have comparable rights of access, deletion, correction and opt-out of targeted advertising.

You can exercise two of these rights yourself, inside the Member App, at Mi perfil (Profile):

Download my data — a file with your account, measurements, training, nutrition and assessment reports. For security, your assessment photos and videos are not included in that file; ask Lorena and we will send them to you.
Delete my account — this erases your account and all associated data, including your assessment images, immediately and irreversibly.

To exercise any other right, email info@lorenamendez.com. We will verify your request and respond within the timeframe required by law.

11. International transfers

Your data may be processed in the United States and the EU by us and our providers. Where data is transferred out of the EEA/UK, we rely on appropriate safeguards (such as Standard Contractual Clauses).

12. Children

The Site, the apps and our services are intended for adults (18+) and are not directed to children. We do not knowingly collect data from anyone under 18.

13. Security

We use reasonable technical and organizational measures to protect your data: encrypted connections (HTTPS), encryption at rest for assessment images, storage of the database outside the publicly accessible area of the server, sign-in by one-time code instead of reusable passwords, two-factor authentication for coach accounts, and an access log. No method of transmission or storage is 100% secure, but we work to safeguard your information.

14. Changes

We may update this Policy; the “Last updated” date will change. Material changes will be highlighted where appropriate. Continued use means you accept the updated Policy.

15. Contact

Questions or requests: info@lorenamendez.com.