Privacy

strongot is run by Stylianos Karydakis, Afrikis Street, 3052 Limassol, Cyprus. Questions go to [email protected].

When you train at a gym, that gym is the controller of your membership, booking, check-in and purchase records, and strongot processes them on its behalf. For your account, your community posts and anything you record for yourself, we are the controller.

• Account: name, email, an optional handle, phone, bio and picture, and a password hash. We never store the password itself.
• Membership: which gyms you belong to, your credit balance and the ledger behind it, your bookings and attendance.
• Check-ins: when you came in and left, whether the door let you in, how you checked in, and who checked you in if a member of staff did.
• Training: workouts, logged sets, personal records, measurements and goals, if you choose to record them.
• Fitness assessment: if you take it, your goals, body measurements, habits, anything you tell us to work around and your own notes. Some of this is health information, so we only keep it with your consent. Every question can be skipped except who may see it.
• Nutrition: targets, meal logs and meal photos, if you use that part of the product.
• Community: your posts, comments, photos, likes and who you follow, and any reports and blocks you make.
• Purchases at a gym:what you bought, the amount, how you paid (cash, card or bank transfer) and who recorded it. strongot doesn’t take these payments, so we never see card details. If you preorder from a seller’s store, your name and email go to that seller so they can arrange payment and delivery with you.
• strongot plans: if a gym buys a strongot plan in the app, Apple or Google takes the payment. We receive a record of the purchase so we can switch the plan on, never your card details.
• Gym details: for people running a gym, its address, map position, photos, prices and timetable, which are public on its page.
• Sign-in records: the IP address and type of browser or device for each signed-in session, to keep your account secure.

You need a name, email and password to have an account. Everything else is up to you, though a gym may ask for details before it lets you join.

• Camera: to scan check-in codes and take a photo if you choose to. Scanning stores nothing but the check-in.
• Photos: only the ones you pick, for a profile picture, gym logo, gallery or post.
• Location:only while you use the app and only if you ask for gyms near you. It finds gyms and isn’t saved.

• To provide the service you signed up for: accounts, bookings, check-ins, training and community.
• With your explicit consent: your fitness assessment and any health information in it. You can withdraw consent at any time in the app under Settings, Delete my assessment. Your nutrition targets stay until you change them.
• For our legitimate interests: keeping the platform secure and removing content that breaks the rules.
• Because the law requires it: financial records a gym has to keep for tax.

Nothing is decided about you automatically. The calorie and BMI figures in the assessment are simple calculations for you to use.

Access follows relationships, not job titles. A gym’s staff see the members of that gym and nothing from any other gym. A trainer sees the clients assigned to them, and their private notes about a client are not readable by gym admins unless the trainer shares them.

A coach sees your fitness assessment only if you said yes when asked, and only if they train you. Your nutrition logs are visible to your trainer only when you switch that on yourself.

Public community posts can be read by anyone signed in. Reviews you leave show your name on the gym’s public page, and a trainer’s profile is public. If you report a post or comment, we see what you reported and that you reported it. The person you reported isn’t told who did.

• Contabo: the server that runs strongot and its database. EU (Germany).
• Cloudflare: routes and protects traffic, and stores uploaded photos and backups. Stored in Europe; requests are served from the nearest location.
• Amazon Web Services: sends our emails. EU (Frankfurt, Germany).
• Apple and Google: take payment for strongot plans, under their own privacy terms.
• OpenFreeMap:draws the maps. It sees your IP address and which part of the map you’re viewing.
• Photon (komoot): turns what a gym types into an address on the map. It sees the text typed and the IP address of our server.
• Unsplash: serves some photos on our public pages, and sees your IP address when it does.

Where a company is outside the EU, the transfer is covered by Standard Contractual Clauses or an equivalent safeguard. Links to other sites, such as a gym’s social pages or directions in Google Maps, follow those sites’ own privacy terms.

• We do not sell personal data.
• We do not share your training data between gyms.
• We do not use your logs to advertise to you or to anybody else.
• We do not use your data to train AI.

Leaving a gym marks the membership cancelled but keeps your history and credits, because both are yours and both may matter later.

You can delete your account at any time. Your details, assessment, nutrition, posts, comments and photos go straight away. A gym’s bookings and sales stay for its books with no name on them, because it may have to keep them for tax.

• Your account and what you record: until you delete it.
• Signed-in sessions: they expire 30 days after you last used them.
• Password reset links: one hour.
• Backups: replaced within 30 days.

You can ask for a copy of your data, a correction, its deletion, or that we stop or limit using it, and you can withdraw consent at any time. Email [email protected]. We answer within a month, as the law requires. If a gym is the controller, we’ll pass the request to them and help them answer it.

You can also complain to the Commissioner for Personal Data Protection in Cyprus, or to the data protection authority where you live.

strongot is for people aged 16 and over. If you believe a younger child has an account, email us and we’ll delete it.

We use one cookie, to keep you signed in, and no advertising or tracking. The cookie notice has the details.

If this changes in a way that matters, we’ll update the date at the top and tell you in the product or by email.