This Privacy Policy explains how Stride Sports Physiotherapy Limited ('we', 'us', 'our') collects, uses, stores, and protects your personal data when you use Remi — our AI-powered financial coaching assistant delivered via WhatsApp.
We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By messaging Remi on WhatsApp and sharing your data with us, you accept our Privacy Policy and agree to the processing of your personal data as described here.
Remi is developed and operated by Stride Sports Physiotherapy Limited, a company registered in England and Wales.
Registered name: Stride Sports Physiotherapy Limited
Registered address: 37–38 Margaret Street, London W1G 0JF
Data controller contact: mel@stridesports.com
Remi is delivered through WhatsApp Business. This means your messages travel through WhatsApp's infrastructure (operated by Meta Platforms, Inc.) before reaching our systems.
WhatsApp messages are end-to-end encrypted between your device and WhatsApp's servers. However, once received by a WhatsApp Business account, messages are accessible to us and are subject to Meta's Privacy Policy alongside ours.
In practice this means:
By using Remi via WhatsApp, you accept that this channel involves Meta's infrastructure and that Meta's terms and privacy policy apply alongside ours.
When you connect your bank account through Remi, we receive and store:
We never receive or store your online banking login credentials, passwords, or one-time passcodes. Open Banking uses FCA-regulated OAuth tokens issued directly by your bank.
To provide the Remi service: Analysing your transactions, answering your questions, tracking goals, and sending proactive check-ins via WhatsApp.
To generate AI responses: Relevant portions of your conversation history and financial data are sent to Anthropic's Claude API to generate responses. See Section 6.
For transcription: Voice messages are processed by OpenAI's Whisper API for speech-to-text. See Section 7.
To improve the service: We review anonymised conversation logs to identify where Remi gives poor answers and to improve its accuracy over time.
To maintain security: We monitor for unusual access patterns and potential abuse.
For legal compliance: We retain certain records as required by UK law.
Contract: Processing your messages, financial data, and goals is necessary to provide the Remi service you have requested.
Legitimate interests: Improving the service, fraud prevention, and security monitoring — balanced against your privacy rights.
Legal obligation: Retaining records required under the Companies Act 2006 and HMRC guidance.
Consent: Where we send optional communications. You may withdraw consent at any time by messaging Remi 'STOP' or emailing mel@stridesports.com.
Plaid requires us to make this disclosure explicitly. By connecting your bank, you are also subject to Plaid's End User Privacy Policy.
Remi uses Plaid Inc. to connect to your bank account via Open Banking. When you connect:
Plaid's End User Privacy Policy: https://plaid.com/legal/end-user-privacy-policy/
Manage or revoke Plaid connections: https://my.plaid.com
To disconnect your bank from Remi, message Remi 'disconnect my bank' or email mel@stridesports.com.
Remi uses Anthropic's Claude API to generate responses. When you send a message, we construct a prompt containing your message, relevant transaction extracts, stored facts, and recent conversation history. This is sent to Anthropic over an encrypted connection.
We do not use your personal data to train AI models.
Anthropic's API terms prohibit using inputs and outputs to train models without explicit consent.
Anthropic processes data as our data processor under a Data Processing Agreement. Their privacy policy: https://www.anthropic.com/privacy
If you send voice messages to Remi, they are transcribed to text using OpenAI's Whisper API. Audio is transmitted to OpenAI over an encrypted connection for processing. OpenAI does not retain audio recordings after transcription is complete. Transcribed text is stored in our Supabase database as part of your conversation history.
OpenAI's privacy policy: https://openai.com/privacy
| Provider | Purpose | Data transferred |
|---|---|---|
| Meta Platforms, Inc. (USA) | WhatsApp Business API | Phone number, message content, timestamps |
| Plaid Inc. (USA) | Open Banking connectivity | Account details, transactions, balances |
| TrueLayer Ltd (UK) | Open Banking (alternative) | Account details, transactions, balances |
| Anthropic, Inc. (USA) | AI response generation | Message content, transaction extracts, goals |
| OpenAI, Inc. (USA) | Voice transcription (Whisper) | Audio recordings (not retained post-transcription) |
| Supabase Inc. (USA) | Database hosting (PostgreSQL) | All account, financial, and conversation data |
| Vercel Inc. (USA) | Application hosting | Request logs, IP addresses |
| Stripe Inc. (USA) | Payment processing | Email, subscription status — no card data |
All processors based outside the UK are subject to appropriate transfer safeguards, including Standard Contractual Clauses.
What Supabase provides automatically
What we implement
What WhatsApp provides
What we cannot guarantee
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and you without undue delay, as required by UK GDPR.
To delete your account and all associated data, message Remi 'delete my account' or email mel@stridesports.com. We will process deletion within 30 days.
You have the right to access, rectify, erase, restrict, port, and object to processing of your data. To exercise any right, email mel@stridesports.com. We will respond within 30 days.
If you are not satisfied, you may complain to the ICO at https://ico.org.uk or by calling 0303 123 1113.
Remi is for business users aged 18 and over. We do not knowingly collect data from anyone under 18. Contact mel@stridesports.com if you believe a minor has accessed the service.
We will notify you via WhatsApp and/or email at least 14 days before any material changes take effect. Continued use of Remi after that date constitutes acceptance.