At Galiactiva we care about your privacy. This policy explains what personal data we collect, why we process it, who we share it with, and what rights you have over it. It applies to the Galiactiva mobile and web application (the "App").
1. Data controller
The controller of your data is the Galiactiva team. You can contact us at soporte-galiactiva@tremen.dev for any privacy-related matter.
2. What data we collect
Account data: email address, name and profile picture (the latter two if you sign in with Google).
Profile data: date of birth, gender, height, weight, fitness level and training goals you choose to add.
Health and wellbeing data (special category): your daily check-ins (sleep quality, stress, muscle fatigue, discomfort or pain, and overall wellbeing), nutrition data, body measurements, body-fat percentage and any body-progress photos you choose to upload.
Training data: assigned plans, completed sessions, activity history, notes and ratings.
Technical and diagnostic data: crash and performance reports, device identifiers and App usage data.
3. Purpose and legal basis
Providing the service (creating your account, showing your plan and progress): performance of a contract.
Personalizing and tracking your training and allowing your coach to manage your plan and support you: performance of a contract.
Processing health and wellbeing data: based on your explicit consent (Art. 9 GDPR), which you can withdraw at any time.
Diagnostics, security and improvement of the App (crash reports and usage analytics): legitimate interest in keeping the service stable and secure.
4. Who can access your data
Your coach and the platform administrators, in order to manage your plan and provide support.
Providers acting as data processors: Google (via Firebase: authentication, Firestore database, storage, Firebase Analytics and Crashlytics; data is hosted on European Union servers) and Sentry (error diagnostics).
We do not sell your data nor share it with third parties for advertising purposes.
5. Retention
We keep your data while your account is active. When you delete your account or request it, we will erase or anonymize your personal data, unless we are legally required to retain it for longer.
6. Your rights
You may exercise your rights of access, rectification, erasure, restriction, objection, portability and to withdraw consent by writing to soporte-galiactiva@tremen.dev. If you believe your request has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Minimum age and minors
The App is intended for people aged 16 and over. If you are under 18, you need the consent and supervision of a legal guardian to use it and, in particular, for the processing of your health data.
8. Security
We apply technical and organizational measures to protect your data, including encryption of communications and security rules that limit each user's access to their own data.
9. Changes to this policy
We may update this policy. We will publish any changes on this page and update the "last updated" date.