Privacy Policy

The data controller is ⟦OWNER⟧ (identity and postal address — see the legal notice). Contact for any privacy question: ⟦OWNER⟧.

⟦OWNER⟧ — F-12 ratifies this section, including whether a data-protection officer is required.

Account data: your email address, your name if you give one, and authentication records. Training data: your programs, workouts, sets, loads, effort ratings, personal records and the coaching decisions made for you. Profile data: units, equipment, training days, experience level and your starting numbers.

Health data, only with your explicit consent: your readiness answers (sleep, fatigue, soreness, stress, mood), bodyweight, and anything you tell us about pain — what hurts, where, and how it responds to training.

⟦OWNER⟧ — F-12 completes this inventory from the records of processing (RoPA), including technical logs and their retention.

To run the service you asked for: build your program, adapt each session, show your history, and keep your account secure. The legal basis is the performance of our contract with you, and our legitimate interest in keeping the service safe and working.

⟦OWNER⟧ — F-12 states each purpose against its legal basis in a table.

Readiness answers and anything about pain are special-category health data. We ask for your explicit consent before storing any of it, we record when you gave it, and you can withdraw it at any time from the app — withdrawal stops future processing and does not affect what was lawful before it.

If you decline, the app still works: the program runs and the logger logs; readiness simply falls back to a more conservative default rather than being personalised to you.

⟦OWNER⟧ — F-12 ratifies this section and the retention of withdrawn-consent records.

We host in the European Union and use three processors: Neon (managed Postgres, EU region — data-processing agreement: ⟦OWNER⟧), Vercel (application hosting — ⟦OWNER⟧), and Resend (transactional email only: verification and password reset — ⟦OWNER⟧).

We do not sell your data, we do not share it with advertisers, and the marketing site sets no cookies and loads no third-party resources.

⟦OWNER⟧ — F-12 confirms the final list, the signed agreements and any transfer safeguards.

For as long as your account exists — a training history is only useful as a history. Delete your account and it goes with it, in cascade.

⟦OWNER⟧ — F-12 sets the retention schedule (inactive accounts, backups, technical logs, suppressed email addresses).

Access, rectification, erasure, restriction, objection and portability. Two of them are buttons rather than requests: export downloads everything we hold about you as a JSON file, and delete removes your account and its data permanently — both from inside the app, with no email to anyone.

For anything else, write to ⟦OWNER⟧. You may also complain to the CNIL (⟦OWNER⟧) if you think we have got this wrong.

The date at the top of this page says when this policy last changed. Material changes are announced before they take effect.