The controller within the meaning of the General Data Protection Regulation (GDPR) is:
André Bruns
Geschwister-Scholl-Straße 41
28844 Weyhe
Germany
Email: [email protected]
We collect and process the following personal data when you use our platform:
| Category | Examples | Purpose |
|---|---|---|
| Account data | Name, email address | Registration, login, communication |
| Payment data | Stripe Customer ID, subscription ID | Processing paid subscriptions |
| Usage data | Completed workouts, points, streak | Progress tracking, gamification |
| Technical data | IP address, browser, session cookie | Security, authentication |
Full card details are processed exclusively by Stripe, Inc. and are never stored on our servers.
We only share your data where necessary for contract performance or with your consent:
| Provider | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing | USA (SCCs) |
| Amazon Web Services | File hosting (S3) | EU region |
| Manus AI | App hosting, authentication | USA (SCCs) |
SCCs = EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR for third-country transfers.
We use only technically necessary cookies (session cookie for authentication). No tracking or advertising cookies are used. Consent under § 25 TDDDG is not required for technically necessary cookies.
Account data is deleted within 30 days of account closure. Invoice and payment data is subject to the statutory retention obligation of 10 years (§ 147 AO).
Access (Art. 15)
Right to information about stored data
Rectification (Art. 16)
Right to correction of inaccurate data
Erasure (Art. 17)
Right to deletion ('right to be forgotten')
Restriction (Art. 18)
Right to restriction of processing
Portability (Art. 20)
Right to receive data in machine-readable format
Objection (Art. 21)
Right to object to processing
To exercise your rights: [email protected]. You also have the right to lodge a complaint with the supervisory authority: State Commissioner for Data Protection Lower Saxony (LfD).
Our service is not directed at persons under 16 years of age. If you believe a child has provided us with personal data, please contact us at [email protected].
We reserve the right to update this privacy policy. The current version is always available at /datenschutz. Registered users will be notified by email of material changes.
We use only essential cookies to keep you logged in. Learn more