Privacy Policy
At GYMCO, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and share your personal data when you visit our website, use our services, or interact with us.
1. Data Controller
The data controller responsible for the processing of your personal data is:
W2P, SASU
10 rue de Penthièvre, 75008 Paris, France
Contact: via our contact form.
2. Personal Data We Collect
We may collect and process the following personal data:
• Identification data: First name, last name, email address.
• Account data: Username, password, and information related to your user account.
• Technical data: IP address, browser type, operating system, and cookies.
• Usage data: Information about your interactions with our application and services (e.g., workout history, exercise data).
• Authentication data: Data provided through third-party sign-in services (e.g., Google).
• Advertising and measurement data: Mobile app events (such as app installs, account creation and completed workouts) and, on iOS only if you allow it, your device advertising identifier (IDFA).
• App installation identifier: A random identifier generated on your device the first time you open the app, used to measure how many installations lead to an account creation. It is not an advertising identifier, is not shared with third parties, and disappears when you uninstall the app.
• Device identifier: The identifier the operating system reserves for GYMCO on your device (ANDROID_ID on Android, identifier for vendor on iOS), used only to recognise that two installations come from the same device and avoid counting them twice. It is not an advertising identifier and is not shared with third parties.
3. Purpose of Data Collection
We collect and process your personal data for the following purposes:
• To create and manage your user account.
• To provide and improve our fitness tracking services.
• To send transactional communications.
• To comply with legal and regulatory obligations.
• To measure the performance of our advertising campaigns and understand which channels bring new users to GYMCO.
• To measure, in aggregate, how many app installations lead to an account creation, in order to improve the onboarding experience.
4. Legal Basis for Processing
The processing of your personal data is based on the following legal grounds:
• Performance of a contract: Necessary for the execution of our services and account management.
• Legal obligations: Compliance with applicable regulations.
• Consent: For optional communications and third-party authentication (when applicable).
• Legitimate interest: Aggregated measurement of app installations and usage, to understand and improve our services.
5. Sharing of Data
Your data may be shared with the following third parties:
• Authentication providers (e.g., Google) for sign-in services.
• Hosting providers (e.g., Vercel, Supabase) to ensure the application's functionality.
• Advertising and measurement partners (e.g., Meta Platforms) to attribute app installs to our advertising campaigns and measure their performance.
• Regulatory authorities, when required by law.
We ensure that these partners comply with the GDPR and other applicable data protection laws. On iOS, no advertising identifier is shared unless you accept the App Tracking Transparency prompt; you can change your answer at any time in iOS Settings › Privacy & Security › Tracking. On Android, you can reset or delete your advertising ID from your device settings.
6. Retention of Data
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
• Account-related data: Until your account is deleted.
• Usage data: For 5 years to comply with legal obligations.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
• Access: Obtain information about the data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Deletion: Request the deletion of your personal data (under certain conditions).
• Objection: Object to the processing of your data for legitimate reasons.
• Portability: Receive your data in a portable format or have it transferred to another provider.
To exercise your rights, please contact us through our contact form. We will respond within one month.
8. Cookies
We use cookies to enhance your browsing experience and analyze website traffic. You can manage your cookie preferences through your browser settings.
9. Security
We implement technical and organizational measures to protect your data from unauthorized access, loss, or misuse. However, no system is completely secure, and we cannot guarantee absolute security.
10. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect changes in our practices or legal requirements. Please check this page regularly for updates.
11. Contact
If you have any questions or concerns about this Privacy Policy, please reach out through our contact form.
Address: 10 rue de Penthièvre, 75008 Paris, France