Privacy & GDPR

1. Data controller

Léo Nourrisson, sole trader (SIRET 919 727 255 00029), publisher of unbrokn.fit and the Unbrokn app.

Contact: contact@unbrokn.fit. Website: unbrokn.fit

2. Data collected

We collect the following data:

• Account information: name, email address, profile picture
• Athlete profile data: weight, height, date of birth
• Training data: scores, personal records, session history
• Health data (within the meaning of Article 9 GDPR): reported injuries, pain location and intensity, and answers to the weekly check-in configured by your coach. You provide this data voluntarily, as part of your coaching.
• Payment data: processed by Stripe (we do not store your banking data)
• Messages exchanged with your coach
• Push notification tokens
• Connection logs: IP address and browser type (user-agent), recorded for security and fraud prevention purposes

3. Purposes of processing

• Service provision and management
• Tracking your training and progress
• Communication with your coach
• Processing payments and subscriptions
• Sending push notifications
• Service improvement
• Security and fraud prevention

4. Legal basis

The processing of your data is based on:

• Performance of the contract (your subscription)
• Your consent (notifications, cookies)
• Your explicit consent for health data (Article 9(2)(a) GDPR), which you provide voluntarily as part of your sports coaching and may withdraw at any time
• Our legitimate interest (service improvement, security and fraud prevention)

Health data (injuries, pain, weekly check-in) is processed solely to support your coaching with your coach. It is never used for any other purpose nor shared outside your coaching organization.

5. Data sharing

Your data is shared with:

• Your coach and their organization (training data, messages)
• Stripe (payment processing)
• Firebase Cloud Messaging (push notifications)
• Resend (transactional email delivery)
• Cloudflare (media file storage via R2, CDN, and voice message transcription via Cloudflare Workers AI)
• DigitalOcean (website and database hosting)

We never sell your personal data to third parties.

Some of these providers (notably Stripe, Firebase Cloud Messaging, Resend, Cloudflare and DigitalOcean) may process data outside the European Union. Such transfers are governed by the appropriate safeguards required by the GDPR (European Commission standard contractual clauses or recognised adequacy mechanisms).

6. Data retention

Your data is retained as long as your account is active. If your account is deleted, it is removed within 30 days, with the following exceptions:

• billing data, retained for 10 years under our accounting obligations (article L. 123-22 of the French Commercial Code);
• data necessary to handle any dispute, retained for the applicable statutory limitation periods;
• connection logs, retained for up to 12 months.

Health data (injuries, pain, weekly check-in) is deleted with your account and is not retained beyond your coaching, unless required by law.

7. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access to your data
• Right to rectification
• Right to erasure
• Right to data portability
• Right to object
• Right to restriction of processing
• Right to lodge a complaint with the CNIL (the French data protection authority, www.cnil.fr)

To exercise your rights, contact us at contact@unbrokn.fit. If you believe that the processing of your data does not comply with the regulations, you may also lodge a complaint with the CNIL (www.cnil.fr).

8. Security

We implement appropriate technical and organizational measures to protect your data: SSL/TLS encryption, password hashing, restricted access to data.

9. Cookies

We use cookies essential to the operation of the service (session, authentication). An audience-measurement tool (PostHog, hosted in the EU) may be used to understand the use of the service. It is only activated with your consent, collected via our cookie banner, and you can refuse it or change your choice at any time.

10. Contact

For any questions regarding this policy, contact us:

contact@unbrokn.fit

Note: this English version is provided for information purposes. The French version is the legally binding text.