FitPrimers

This privacy policy applies to the FitPrimers app (the "Application") and to this website. The Application is operated by Johann Roux (Entrepreneur individuel, BG-Worldshop) ("we", "us"). FitPrimers is the product name. The Primers is a brand of the same operator, not a separate legal entity.

Data controller and contact

The data controller is Johann Roux, Entrepreneur individuel, trading as BG-Worldshop, 60 Rue François Ier, 75008 Paris, France. SIREN 844 317 651.

Data protection contact: contact@fitprimers.com. We have not appointed a data protection officer. Use this email for access, deletion, and other privacy requests.

Information we collect

Depending on how you use the Application, we process:

Account data: email address, display name, and sign-in identifiers from Google, Apple, or email and password.
Profile and fitness data you enter: date of birth, sex, weight, height, activity level, strength level, training preferences, and similar fields used to generate a program.
Workout and program data: generated programs, completed and in-progress workouts, weights, swaps, and related history.
Subscription data: store transaction identifiers, entitlement status, trial dates, and subscriber attributes needed to provide Prime and transactional email.
Device and technical data: IP address, operating system, app version, device model, language, and crash diagnostics.
Device and install identifiers, including a Firebase Installation ID (FID), a Firebase Analytics app instance ID, and RevenueCat app user IDs (your Firebase UID after sign-in, and an anonymous RevenueCat ID after sign-out). We do not collect the advertising ID (AAID / IDFA).

The Application does not gather precise information about the location of your mobile device.

On the pricing page of this website, we load the Meta Pixel from Meta Platforms. That pixel receives your IP address, browser and device information, and a cookie identifier. It records a page view when the pricing page loads, and it records a GooglePlayClick or AppStoreClick event when you click the Google Play or App Store button on that page. We use those events to measure advertising for FitPrimers. Fitness data from the Application is not sent to Meta.

Purposes

We use this information to:

Create and maintain your account and authenticate you.
Generate and update your training program and save workout history.
Provide and restore the Prime subscription through Apple, Google, and RevenueCat.
Send transactional email (welcome and trial-reminder messages) when you subscribe.
Secure the Application (including Firebase App Check / Play Integrity / App Attest).
Measure product usage with optional Analytics and Crashlytics after sign-in, so we can improve the Application. This is not advertising, and we do not use your data to show third-party ads or to sell advertising.
Measure visits to the pricing page and clicks on the Google Play and App Store buttons there, using Meta Pixel, so we can measure advertising for FitPrimers.
Respond to your requests and meet legal obligations.

Fitness data is used to personalize training inside the Application. It is not used for advertising purposes.

Legal bases (GDPR)

Where the GDPR applies, we process personal data on these bases:

Contract (Art. 6(1)(b)): account, program generation, workout history, subscriptions, and security measures needed to run the Application.
Consent (Art. 6(1)(a)): optional Firebase Analytics and Crashlytics after you sign in. You can withdraw in Settings. Withdrawing does not affect processing that is required to provide the Application.
Legal obligation (Art. 6(1)(c)): where we must keep records or respond to a lawful request.
Legitimate interests (Art. 6(1)(f)): measuring visits to the pricing page and store-button clicks with Meta Pixel, so we can measure our own advertising. You may object by contacting us at the email above.

Using the Application is not, by itself, consent to optional analytics. Optional collection starts after sign-in (treated as granted until you withdraw) and can be turned off in Settings.

Identifiers that leave the device

The following identifiers are transmitted to our processors. They are not aggregated-only or fully anonymized:

Firebase Installation ID (FID): created when Firebase initializes. App Check and related Firebase services can use it before you sign in.
Firebase Analytics app instance ID: used when optional analytics is enabled, and sent to RevenueCat after sign-in so subscription events can be linked to analytics.
RevenueCat app user ID: set to your Firebase UID after sign-in. Signing out creates an anonymous RevenueCat ID (an SDK requirement).
Meta browser cookie identifier: set by Meta Pixel on the pricing page and sent to Meta with the page view and store-button click events described above.

Third-party recipients

We share personal data with the processors below so they can provide their services to us. They have their own privacy policies:

Content delivery

The Application loads static assets (exercise demonstration videos and images, exercise-library translations, and science article images) from the public GitHub repository the-prime-directive/fitprimers-cdn. Those files are delivered by jsDelivr, which uses Fastly as its content delivery network. jsDelivr and Fastly receive your device's IP address and the requested file path. We do not send your name, email address, or account identifiers on those requests.

Exercise demonstration videos and images are chosen from the sex you stated in your profile (or a default demonstration if you have not stated a sex or you selected prefer not to say). The file names are numeric identifiers, but they correspond to sex-specific demonstrations, so the request path can indicate which demonstration was requested.

Other disclosures

We may also disclose information:

as required by law, such as to comply with a subpoena or similar legal process;
when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
with service providers who process data on our instructions and only as needed to provide the Application.

International transfers

Several recipients are established in the United States (including Google, Apple, RevenueCat, Resend, Expo, jsDelivr, Fastly, and Meta). When we transfer personal data from the EEA, the UK, or Switzerland to those recipients, we rely on the transfer tools they offer, which may include the European Commission's Standard Contractual Clauses and, where a recipient is certified, the EU-US Data Privacy Framework. You can ask us for more information about these transfers at the contact email above.

Retention

We keep account, profile, program, and workout data for as long as your account exists. Optional analytics and crash data follow the retention settings of those Google products. Meta Pixel data from the pricing page follows Meta's retention settings. If you delete your account in the Application or through the requests below, we delete the Firebase user, the Firestore user subtree (including trial-reminder schedules), the Prime entitlement mirror, and the RevenueCat subscriber record. Store subscriptions are billed by Apple or Google and are not cancelled by account deletion; cancel them in the store account settings if you do not want further charges.

You can also submit a request:

Your rights

If the GDPR or UK GDPR applies, you may request access, rectification, erasure, restriction, objection, or data portability, and you may withdraw consent for optional analytics in Settings. You may also lodge a complaint with a supervisory authority, including the CNIL in France (the controller is established in France) or the authority in your country of residence.

Children

The Application is intended for users aged 13 and older. We do not knowingly solicit data from or market to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will delete it. If you are a parent or guardian and you believe your child has provided personal information, contact us at contact@fitprimers.com.

Security

We use technical and organizational measures appropriate to the Application, including encrypted transport, Firebase security rules, and App Check. No method of transmission or storage is completely secure.

Changes

We may update this privacy policy from time to time. We will post the updated policy on this page. Please review it periodically.

Effective date

This privacy policy is effective as of 2026-10-04.

Contact us

Questions about this policy or our privacy practices: contact@fitprimers.com.