Privacy Policy

1. General Information

We take the protection of your data seriously. This Privacy Policy explains how Adactiv ("we", "us", "our") collects, uses, and protects personal data when you use our mobile application and website (www.adactiv.app) in accordance with the Swiss Federal Act on Data Protection (nDSG/FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Data Controller

The responsible body for data processing is:

3. Data We Collect (Mobile App)

When you use the Adactiv mobile app, we collect and process the following categories of data:

3.1 Account & Authentication

• Email address
• Display name
• Profile photo (optional)
• Authentication tokens (via Google Sign-In or Apple Sign-In)

3.2 Personal & Health Data

⚠️ This data is classified as sensitive personal data under Swiss nDSG and GDPR Art. 9.

• Age and date of birth
• Height and weight
• Biological sex
• Dietary preferences (omnivore, vegetarian, vegan)
• Food allergies and intolerances
• Physical injuries and limitations
• Activity level, sleep duration, stress level

3.3 Fitness & Training Data

• Selected sports and training goals
• Training frequency and experience level
• Workout plans and exercise logs
• Performance benchmarks (e.g., 5K time, FTP, 1RM lifts)
• Heart rate data (if provided)
• Workout duration, sets, reps, and weights
• Rest day routines and streak tracking

3.4 Nutrition Data

• Calorie and macro goals
• Food logs and meal entries
• Recipe preferences and saved recipes

3.5 Coaching & Social Features

• Coach-client relationships
• Direct messages between coaches and clients
• Referral codes and affiliate program data

3.6 Device & Technical Data

• Device type and operating system
• Push notification tokens
• App usage analytics and AI query metrics
• Consent records and timestamps

4. Data We Collect (Website)

4.1 Server Log Files

When you access our website, our host automatically collects:

• IP address
• Date and time of the request
• Browser type and version
• Operating system
• Referrer URL

4.2 Cookies & Analytics

We use Google Analytics (Firebase Analytics) to analyze website usage. Google Analytics uses cookies stored on your device. We have activated IP anonymization, meaning your IP address is truncated before transmission.

Opt-Out: You can prevent data collection by installing the Google Analytics Opt-out Browser Add-on.

5. Third-Party Services

We use the following third-party services to operate Adactiv:

6. Purpose of Data Processing

Your data is processed exclusively for:

• Generating personalized training plans
• Providing nutrition recommendations and recipe suggestions
• Tracking your workout progress and fitness metrics
• Enabling coach-client communication (if applicable)
• Processing subscriptions and payments
• Improving the app through anonymized analytics

We do NOT sell, rent, or trade your personal data to third parties, data brokers, or advertising networks.

7. Data Retention

Your data is retained as long as your account is active. Upon account deletion, your personal data will be permanently deleted within 30 days, except where retention is required by law (e.g., financial records).

8. Your Rights

Under the Swiss FADP (and GDPR where applicable), you have the following rights:

• Right to Access: Request information about your stored data at any time.
• Right to Rectification: Request correction of inaccurate data.
• Right to Deletion: Request deletion of your data ("right to be forgotten").
• Right to Data Portability: Receive your data in a machine-readable format.
• Right to Object: Object to the processing of your data.
• Right to Withdraw Consent: Withdraw consent for sensitive data processing at any time.

To exercise these rights, contact us at: info@adactiv.app

9. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmission
• Secure authentication via Firebase Auth
• Firestore security rules restricting data access
• Regular security audits and monitoring

10. Governing Law & Jurisdiction

This Privacy Policy is governed by Swiss law. The exclusive place of jurisdiction for all disputes is the Canton of Schwyz, Switzerland.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:

Email: info@adactiv.app