Privacy Policy

1. Controller

The controller of your data is [Titular: nombre o razón social] (tax ID [NIF/CIF]), registered at [Domicilio]. Contact: [email de contacto].

2. What data we process

Identification: your name and email, received from the identity provider you sign in with.

Contact (coaches): phone and business name, if provided.

Activity: workouts, sessions, sets and results; diets, logged meals, shopping list and calendar events.

Physical and health data: weight, height, body fat percentage, date of birth, sex and nutrition targets.

Technical: what's needed to keep your session and the service secure.

3. Purposes and legal basis

Providing the service you accept in the Terms (performance of a contract).

Processing your physical and health data, with your explicit consent, given when you accept this policy. You can withdraw it at any time by writing to [email de contacto]; from then on you won't be able to use the features that need it.

Protecting the service and preventing abuse (legitimate interest) and complying with legal obligations.

4. Who can see your data

Your coach, while your relationship is active.

Providers of technical services (hosting, database, authentication and sign-in and, once payments exist, billing) that process data on our behalf under a data processing agreement. Data is hosted in the European Union; where a provider processes it outside the European Economic Area, it does so with the safeguards the GDPR requires (an adequacy decision or standard contractual clauses). You can ask us for the list of providers at [email de contacto].

When you search for foods we query a public food database, which only receives the search text, never your personal data.

We don't sell your data or use it for advertising.

5. How long we keep it

While your account is active. If you close it, we delete or anonymise it within a reasonable period, except data we must keep by law.

6. Your rights

You can access, rectify and erase your data, object to or restrict its processing, request its portability and withdraw your consent by writing to [email de contacto].

If you think we haven't handled it properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or your local authority.

7. Cookies and storage

We only use technical cookies needed to keep you signed in and remember your language, and browser storage to keep your timer progress on your device. We don't use analytics or advertising cookies.

8. Security

Data is encrypted in transit and access to it is restricted to what's needed to provide the service.

9. Children

FORTIFIZ isn't aimed at children under 16.

10. Changes

If we change this policy in a material way, we'll ask you to accept it again when you sign in.