Privacy Policy

Domain: bellamyfamily.fyi  ·  Last updated: 18 May 2026  ·  Contact: emma.bellamy@bellamyfamily.fyi

1. Who we are

bellamyfamily.fyi is a personal domain owned and operated by Emma Bellamy, an individual based in the United Kingdom. It is not a company or commercial entity.

The primary application hosted on this domain is Lois, a private AI-assisted sports coaching tool built for one named family member's personal use, with their explicit in-app consent. It is not offered to the public; if you have arrived here without an invitation, you are not a user of this service.

2. What data is processed

For its single user, and only with their consent, Lois processes:

Training and wellbeing data they enter — daily check-ins, training session logs, perceived exertion, drills and practice, injury notes, fitness-test results, and short coaching journal entries.

Plans and conversations generated by the app — daily and weekly training plans produced by the AI coach, and transcripts of their conversations with it.

Calendar data — pulled from Google Calendar with their permission, used to schedule training around real-life commitments. Only events the user has explicitly colour-tagged for Lois are read.

Activity data from connected devices, where the user chooses to connect them. No device integration is currently active.

Some of the above includes data treated as special category personal data under UK GDPR Article 9 — for example, information about injuries and self-reported mood. This data is processed on the user's explicit consent, captured in-app during onboarding, and only for the purposes set out in section 3. The user can withdraw consent at any time from within the app.

No payment information, government identifiers, location data, or contacts are collected.

3. How that data is used

Data is used exclusively to:

— Generate personalised coaching suggestions and training plans within the Lois app.

— Display activity history and progress to the user.

— Send a limited number of pre-defined safety alerts to one designated guardian, in narrowly-defined circumstances agreed with the user at onboarding. The guardian receives the alert type only — they do not receive scores, journal entries, or the underlying data that triggered the alert. The specific alert conditions are described to the user in the app and reviewable at any time in their account settings.

Data is not sold, rented, or shared with third parties for marketing or advertising. The user is not profiled for advertising. The AI coach uses the user's data only to produce that user's plans; the data is not used to train any AI model.

4. Data processors

To operate the service, data is processed by the following third-party services, each of which has its own privacy policy:

Cloudflare Inc — application hosting, structured data storage (D1 SQLite database, UK region), and email delivery for safety alerts (Cloudflare Email Workers). Cloudflare Privacy Policy

Anthropic PBC — AI language model processing (Claude API), used to generate coaching responses. AI processing takes place in the United States. The transfer of data outside the UK to Anthropic is governed by Standard Contractual Clauses incorporated in Anthropic's customer terms. Anthropic Privacy Policy

Google LLC — authentication (Google Sign-In) and calendar integration. Google Privacy Policy

GitHub Inc — source-code hosting for the Lois application. No user data is stored in GitHub. GitHub Privacy Policy

App compute and structured data storage are hosted in the United Kingdom via Cloudflare. The processors listed above are services selected by the operator; no additional third-party processors are used without an update to this notice.

No third-party analytics, error-tracking, session-replay, advertising, or behavioural-profiling services are used.

5. Data retention

Different categories of data are retained for different lengths of time:

Training and wellbeing logs, plans, and test results: retained for the lifetime of the account, up to two years rolling, then archived in compressed form.

AI coach conversation transcripts: retained on a 30-day rolling basis for cost and abuse audit, then deleted.

Audit log of security-relevant events (sign-ins, data exports, data deletions, plan generation): retained for two years.

The user may request deletion of any specific data, or all data, at any time — either from within the app's settings or by emailing the address in section 9. Hard deletion completes within 30 days of the request.

6. Your rights (UK GDPR)

As a UK-based service, this service complies with the UK General Data Protection Regulation (UK GDPR). The user has the right to:

— Access a copy of their personal data.

— Correct inaccurate data.

— Request deletion of their data.

— Restrict processing of their data.

— Receive their data in a portable, machine-readable format.

— Object to processing.

— Withdraw consent at any time, where processing relies on consent.

To exercise any of these rights, the user can use the relevant option in the app's settings, or contact the address in section 9.

7. Cookies and analytics

This website does not use third-party analytics, advertising cookies, or session-replay tools.

The Lois app uses essential cookies and browser local storage to keep the user signed in and to remember their preferences. There are no tracking cookies, no third-party cookies, and no analytics cookies.

8. Changes to this policy

This policy may be updated from time to time. The "last updated" date at the top of this page will reflect any changes. Material changes that affect data processing are also surfaced inside the app, not only on this page. Continued use of the service constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or requests, please contact:
Emma Bellamy
emma.bellamy@bellamyfamily.fyi