Privacy Policy

Last updated: August 18, 2026

1. General Information

We take the protection of your data seriously. This Privacy Policy explains how Adactiv ("we", "us", "our") collects, uses, and protects personal data when you use our mobile application and website (www.adactiv.app) in accordance with the Swiss Federal Act on Data Protection (nDSG/FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Data Controller

The responsible body for data processing is:

Gebrüder Schuler keramische Plattenbeläge und Akkordarbeiten GmbH

Engiberg 25
6423 Seewen SZ
Switzerland

UID: CHE-109.883.039
Email: info@adactiv.app

3. Data We Collect (Mobile App)

When you use the Adactiv mobile app, we collect and process the following categories of data:

3.1 Account & Authentication

  • Email address
  • Display name
  • Profile photo (optional)
  • Authentication tokens (via Google Sign-In or Apple Sign-In)

3.2 Personal & Health Data

⚠️ This data is classified as sensitive personal data under Swiss nDSG and GDPR Art. 9.

  • Age and date of birth
  • Height and weight
  • Biological sex
  • Dietary preferences (omnivore, vegetarian, vegan)
  • Food allergies and intolerances
  • Physical injuries and limitations
  • Activity level, sleep duration, stress level

3.3 Fitness & Training Data

  • Selected sports and training goals
  • Training frequency and experience level
  • Workout plans and exercise logs
  • Performance benchmarks (e.g., 5K time, FTP, 1RM lifts)
  • Heart rate data (if provided)
  • Workout duration, sets, reps, and weights
  • Rest day routines and streak tracking

3.4 Nutrition Data

  • Calorie and macro goals
  • Food logs and meal entries
  • Recipe preferences and saved recipes

3.5 Coaching & Social Features

  • Coach-client relationships
  • Direct messages between coaches and clients
  • Referral codes and affiliate program data

3.6 Device & Technical Data

  • Device type and operating system
  • Push notification tokens
  • App usage analytics and AI query metrics
  • Consent records and timestamps

4. Data We Collect (Website)

4.1 Server Log Files

When you access our website, our host automatically collects:

  • IP address
  • Date and time of the request
  • Browser type and version
  • Operating system
  • Referrer URL

4.2 Cookies & Analytics

We use Google Analytics (Firebase Analytics) to analyze website usage. Google Analytics uses cookies stored on your device. We have activated IP anonymization, meaning your IP address is truncated before transmission.

Opt-Out: You can prevent data collection by installing the Google Analytics Opt-out Browser Add-on.

5. Third-Party Services

We use the following third-party services to operate Adactiv:

Firebase (Google)

Authentication, database (Firestore), analytics, cloud functions, and hosting. Data may be transferred to the USA under the Swiss-U.S. Data Privacy Framework.

Google Gemini (generative AI, via Google Cloud)

Powers the AI Coach, training-plan generation and the AI Food Analyst. Your inputs (questions, relevant profile and plan data, meal photos) are processed to generate the result. Adactiv does not use them to train AI models. See section 7.

RevenueCat

Subscription and in-app purchase management for iOS and Android.

6. Purpose of Data Processing

Your data is processed exclusively for:

  • Generating personalized training plans
  • Providing nutrition recommendations and recipe suggestions
  • Tracking your workout progress and fitness metrics
  • Enabling coach-client communication (if applicable)
  • Processing subscriptions and payments
  • Improving the app through anonymized analytics

We do NOT sell, rent, or trade your personal data to third parties, data brokers, or advertising networks.

7. AI Features and Automated Processing

Some Adactiv features are powered by generative artificial intelligence. This section explains what that means for your data. A plain-language overview is on our AI Transparency page.

7.1 Which features use AI

  • AI Coach: a chat assistant that answers your training and nutrition questions. You are interacting with an AI system, not a human.
  • Training-plan generation: your personalized plan is generated by AI from your inputs and adjusted by our scheduling logic and your logged data.
  • AI Food Analyst: estimates foods, portions and macros from a meal photo. Barcode scans use a food database instead.

7.2 What data is processed

To generate a result, the inputs the feature needs are transmitted to the AI model: your question or message, the relevant parts of your profile (including health-related inputs you have provided, such as injuries, limitations or allergies), your current plan and recent training and nutrition logs, the meal photo you take, or a photo you choose to send to the AI Coach. Health-related inputs are processed on the basis of your consent, which you can withdraw at any time (see "Your Rights" below).

7.3 Who processes it

The AI model is Google Gemini, operated by Google on Google Cloud infrastructure and used by Adactiv as a service provider (processor) under Google's data-processing terms. Data may be transferred to the USA under the Swiss-U.S. and EU-U.S. Data Privacy Frameworks. Adactiv does not use your conversations, plans or photos to train AI models.

7.4 No solely automated decisions with legal effect

AI outputs in Adactiv are recommendations. We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (for example pricing, access to the Service, or scoring). You can edit or ignore any AI output, ask a human coach connected to your account, or contact us to have an outcome reviewed by a person.

7.5 Retention

AI Coach conversations and generated plans are stored with your account so you can return to them, and are deleted together with your account (see "Data Retention" below).

8. Data Retention

Your data is retained as long as your account is active. Upon account deletion, your personal data will be permanently deleted within 30 days, except where retention is required by law (e.g., financial records).

9. Your Rights

Under the Swiss FADP (and GDPR where applicable), you have the following rights:

  • Right to Access: Request information about your stored data at any time.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Deletion: Request deletion of your data ("right to be forgotten").
  • Right to Data Portability: Receive your data in a machine-readable format.
  • Right to Object: Object to the processing of your data.
  • Right to Withdraw Consent: Withdraw consent for sensitive data processing at any time.

To exercise these rights, contact us at: info@adactiv.app

10. Data Security

We implement industry-standard security measures including:

  • SSL/TLS encryption for all data transmission
  • Secure authentication via Firebase Auth
  • Firestore security rules restricting data access
  • Regular security audits and monitoring

11. Governing Law & Jurisdiction

This Privacy Policy is governed by Swiss law. The exclusive place of jurisdiction for all disputes is the Canton of Schwyz, Switzerland.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:

Email: info@adactiv.app