GymScan

Privacy

Private prototype – currently used by a few test members. A full privacy policy follows before the app opens to all members.

Controller: Thomas Herbrig (private person), thomasherbrig@ipomme.fr.

Data: e-mail, display name, language, plans, workouts (sets, weights, cardio, heart rate you enter), seat settings. No body weight, no medical data.

Legal basis: your explicit consent (Art. 6(1)(a) and 9(2)(a) GDPR).

Hosting: Hetzner Online GmbH, Nuremberg, Germany. Login e-mails via Brevo (Sendinblue SAS, France) – only your address and the code.

Cookies: one session and one language cookie, nothing else. No analytics, no ads.

Retention: until you delete your account; backups are overwritten after 7 days.

Your rights: access, export, rectification, erasure (in the settings), complaint to the CNIL.