1. Introduction

BenchRep ("we", "our" or "us") is committed to protecting your privacy. This privacy policy explains how we collect, use, share, and protect your personal information when you use our BenchRep mobile application ("the Application").

By using the Application, you agree to the practices described in this privacy policy.

2. Information We Collect

2.1 Information You Provide

Account information: First name, last name, email address, password
Profile information: Age, gender, height, weight, fitness goals, experience level
Medical information: Declared injuries (optional)
Training data: Exercise programs, sessions, sets, reps, weights used, personal notes

2.2 Automatically Collected Information

Usage data: Pages viewed, features used, time spent in the app
Device information: Device type, operating system, unique device identifier
Location data: If you authorize it, we may collect your approximate location
Performance data: Error logs and app performance data

2.3 Information from Third Parties

Payments: Subscription information via RevenueCat (iOS/Android)
Notifications: Push notification token via Expo/FCM

3. How We Use Your Information

We use your information to:

Provide, maintain, and improve the Application
Create and manage your user account
Personalize your experience and recommendations
Process your subscriptions and payments
Send important notifications about your account or the Application
Send you motivational notifications (if you're a Premium subscriber)
Analyze Application usage and improve our services
Detect, prevent, and resolve technical issues
Ensure security and prevent fraud
Comply with our legal obligations

4. Sharing Your Information

We do not sell your personal information. We may share your information in the following cases:

4.1 Service Providers

We share your information with third-party providers who help us provide the Application:

Hosting: OVH France (website and server hosting)
Payments: RevenueCat (subscription management)
Advertising: Google AdMob (ad serving for free users, with GDPR consent)
Notifications: Expo/Firebase Cloud Messaging
Analytics: Usage analytics services (anonymized)

4.2 Shared Programs (Premium only)

If you choose to make a training program public, it will be visible to other Premium users. Your username will be associated with the shared program.

4.3 Legal Obligations

We may disclose your information if required by law or in response to a valid legal request.

5. Data Retention

We retain your personal information as long as necessary to:

Provide our services and maintain your account
Comply with our legal obligations
Resolve disputes and enforce our agreements

If you delete your account, we will delete or anonymize your personal information within 30 days, unless we are required to retain it longer by law.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

Encryption of data in transit (HTTPS/TLS)
Password encryption
Strict data access controls
Security monitoring and regular audits
Secure storage on OVH servers in France

However, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

7. Your Rights

Under GDPR and French data protection laws, you have the following rights:

Access: Request a copy of your personal information
Rectification: Correct inaccurate or incomplete information
Deletion: Request deletion of your personal information
Objection: Object to the processing of your information
Portability: Receive your data in a structured, commonly used format
Restriction: Request restriction of processing of your information

To exercise these rights, contact us at: [email protected]

8. Cookies and Similar Technologies

The Application may use cookie-like technologies to:

Maintain your logged-in session
Save your preferences
Analyze Application usage
Improve performance and security

9. Advertising (Free Users)

Free version users may see ads served via Google AdMob.

9.1 GDPR Consent

In accordance with GDPR, we ask for your consent before displaying personalized ads. You can choose between:

Personalized ads: Based on your interests (requires your consent)
Non-personalized ads: Contextual ads without tracking your personal data

You can change your choice at any time in the Application settings. Google AdMob may use certain tracking technologies in accordance with its privacy policy. For more information about how Google handles your data, visit: https://policies.google.com/privacy

10. AI Coach (Artificial Intelligence)

The Application offers an AI coach available via an interactive chat to support you in your fitness journey.

10.1 Consent and Data Sharing

If you choose to use the AI coach and provide your explicit consent, your messages and conversation data may be transmitted to our technology partners to process your requests:

Anthropic: Provider of the Claude API for natural language processing
OpenAI: Provider of the ChatGPT API for natural language processing

This data is only used to generate AI coach responses and is not used to train these providers' artificial intelligence models.

10.2 Without Consent

If you do not use the AI coach or do not provide your consent, none of your data will be sent to Anthropic or OpenAI.

10.3 Managing Consent

You can withdraw your consent at any time in the Application settings. Withdrawing consent will disable the AI coach feature.

11. Children's Privacy

The Application is not intended for persons under 16 years of age. We do not knowingly collect personal information from persons under 16. If we learn that a child under 16 has provided us with personal information, we will delete it immediately.

12. International Data Transfers

Our servers are hosted by OVH in France, ensuring that your data remains within the European Union. Some third-party services (Google AdMob, RevenueCat, Firebase) may process data outside the EU, but only within the framework of appropriate safeguards compliant with GDPR (standard contractual clauses, Privacy Shield, etc.).

13. Changes to This Policy

We may modify this privacy policy from time to time. We will notify you of significant changes via the Application or by email. The "last updated" date at the top of this policy indicates when it was last modified.

14. Contact

For any questions regarding this privacy policy or your personal information, please contact us:

Email: [email protected]

Data Protection Officer: [email protected]

15. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):

CNIL
3 Place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07
Tel: +33 1 53 73 22 22
www.cnil.fr

OpenAI (API – data usage): https://platform.openai.com/docs/guides/your-data

OpenAI (Privacy Policy): https://openai.com/policies/row-privacy-policy/

Anthropic (API/Commercial – model training): https://privacy.anthropic.com/en/articles/7996868-is-my-data-used-for-model-training

Anthropic (API – organization data retention): https://privacy.anthropic.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data

Privacy Policy