This English text is a translation provided for convenience. In case of any discrepancy, the Icelandic version shall prevail.
Privacy
Privacy and Security at Þjálfarakerfi
Þjálfarakerfi is designed so that each trainer and coach only sees their own data. Access control is implemented at the database level, meaning that information about clients, bookings and documents is separated for each user.
Client data is only accessible to the relevant trainer or coach and to users authorized within the same workspace.
File Uploads
Training plans and other documents are stored in closed file storage. Access to files is granted through temporary links that expire after a short time.
Documents and training plans are stored securely and are not shared with third parties unless required by law or necessary for the technical operation of the service.
Authentication
Login is protected with email verification, and passwords are checked against known data breaches.
Data Recorded
The system stores the data the trainer enters themselves, such as information about clients, bookings, services and documents.
We do not collect payment card information in the system.
Security
No system is completely secure, but we follow recognized practices for access control, data protection and secure file storage.
Administrator Access (Support Access)
Þjálfarakerfi administrators do not have automatic access to trainers' or clients' data. By default they only see their own data, like any other trainer.
If a trainer requests technical assistance, an administrator may open a temporary support session (a maximum of 30 minutes) to view that trainer's data. Each such access is:
- logged with a reason in the audit log,
- time-limited and expires automatically,
- separated from the administrator's regular user interface,
- kept with sensitive information (kennitala (Icelandic national ID), notes) hidden until the administrator specifically confirms they need to see it — that action is also logged.
This restriction is enforced at the database level (Row-Level Security) so it cannot be bypassed through the user interface.
User Rights
Users may at any time request a copy of their data or ask for it to be deleted. Contact us and we will help.