Privacy Policy
1. Introduction
GRIP values your privacy and the protection of your personal data. This Privacy Policy explains the information we collect about you as part of your use of our website and apps (together the "Services"), how we use that information, the extent to which we share that information with third parties, and your rights in respect of such information. This privacy policy should be read alongside our Terms which set out the terms applicable to use of our Services.
The Data Controller for the Services is STRONGR Ltd in the United Kingdom. Throughout this Privacy Policy, the terms "GRIP", "we", "us", and "our" refer to STRONGR Ltd.
By using the Services, you consent to our use of your personal data in accordance with this Privacy Policy. If you have any queries on this Privacy Policy, please reach out to us via email at iona@trainwithgrip.app.
This Privacy Policy may change from time to time. Your continued use of the Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates. You will know if there has been an update since your last visit by referring to the "Last Update" date at the top of this webpage.
2. What do we collect and why?
We collect a range of information on our users largely to provide you with the Services and to continually improve the user experience. A full list is set out below.
| Categories of personal data | Purposes of processing | Lawful basis for processing |
|---|---|---|
| Name, date of birth, gender, your profile picture, and your contact details (such as your email address) | Internal record keeping, to provide you with the Services, to contact you in respect of the Services (such as to provide support, technical updates / service messages, or to reply to your questions in-app), or to ship merchandise to you. To communicate with you about upcoming events, offers and news about products and services offered by GRIP and our selected partners (we will obtain your consent to this and you may unsubscribe at any time). | Your consent provided to us when you created your account. To fulfill our contract with you to provide the Services. |
| Payment information (where purchasing directly through GRIP) | To process your subscription payment for access to the Services or to purchase merchandise or other items through our online store. We use Payment Card Industry (PCI) compliant third-party payment services and we do not store your credit card information. | To fulfill our contract with you to provide the Services. |
| Location data Health and fitness data | When you record a workout with our apps we will store Location Data, distance, pace, weight lifted, sets, reps, and exercise data. If you import a completed workout from one of our partners (such as fitness trackers), we will store all relevant data for that workout. Examples include GPS location data, strength training data, heart-rate data, and time of workout. We may also, subject to your consent, share your anonymized training data with our AI coaching system to provide personalized strength training recommendations. | Your consent provided to us. To fulfill our contract with you to provide the Services. |
| Technical information, server-side log files, device and usage information (including IP address, operating system, location, device identifiers, and server interaction data), and client-side tracking data. | When you use the Services on a day to day basis, we collect information about your device and usage through our client side technologies and secure server-side tracking systems. We use this to improve our website and Services, and to improve how we operate our business while maintaining enhanced data accuracy and privacy. | To fulfill our contract with you to provide the Services. Our legitimate interests in improving our Services for the benefit of all users. |
Other scenarios in which we may use your personal data
If we become involved in a business sale, merger, acquisition, securities offering, bankruptcy, reorganization, dissolution or other similar transaction, we may share or transfer your personal data solely in connection with such transaction.
GRIP also uses anonymous browsing information collected automatically by our servers primarily to help us administer and improve the Services. We may also use such aggregated anonymous information to provide information about the Services to potential business partners and other third parties. This information is not personally identifiable to a specific user.
3. How long do you keep it for?
We keep your personal data only for the time necessary for us to provide the Services to you. We may be required to retain information for a longer period whenever required to do so for the performance of a legal obligation or where obliged to do so by a regulatory authority. Specific retention periods for different categories of personal data are available on request.
You can contact us at any time to request that we delete your personal data. See Section 6 below to find out how.
4. Who is it shared with?
We recognize that much of the information we collect about you is inherently private, and we are not in the business of selling it to others. However, we do sometimes share your information with select third parties to provide the Services to you. These third-party services and tools may have access to your personal information needed to perform their functions, but may not use that information for other purposes.
Your data is stored on secure cloud servers using industry standard encryption technologies. Our hosting providers may not use this information for their own purposes.
| Category of third party | Why? | Lawful basis |
|---|---|---|
| Cloud Storage and Hosting | We use secure cloud servers to host our Services. Information you provide to us is stored on servers located in secure data centers, transmitted in encrypted form using standard SSL connections. | To fulfill our contract with you to provide the Services. |
| Communication and Support | We use communication platforms for our in-app messaging and support system. | To fulfill our contract with you to provide the Services. |
| Analytics and Performance | We use these tools for product analysis and analytics. These process personal data such as name, email address, location, and device information to enhance and improve our Services. | Our legitimate interests in improving our Services. |
| Payment Processors | For processing your payment information and associated billing details. | To fulfill our contract with you. |
| AI Coaching Partners | If you consent, we share your anonymized training data with our AI coaching system to provide personalized recommendations. | Your consent provided to us. |
We predominantly process your personal data in the UK or the EEA. However, we may sometimes transfer your personal data outside of the UK and EEA to certain third parties. Where we make such a transfer, we will only do so in accordance with applicable law.
We may also have to share your personal data with third parties where we are required to do so to:
- comply with the law;
- enforce or apply our Terms; or
- protect the rights, property, or safety of GRIP, our users or others.
5. How is my information protected?
We work to protect the security of your personal data during transmission by using Secure Sockets Layer (SSL) software, which encrypts information you input. We restrict authorized access to your personal data to those persons who need to know that information to provide products or services to you.
GRIP follows generally accepted industry standards to protect the personal data submitted to us. No method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
We will not sell, distribute, or lease your personal information to third parties unless we have your permission or are required by law to do so.
Should a data breach occur that presents a high risk we shall inform the appropriate authorities within 72 hours of the breach and, if required or otherwise appropriate, we shall inform you.
6. What are my rights in respect of the personal data you hold?
Under certain circumstances, by law you have the right to request:
- access to your personal data (a "subject access request");
- correction of incomplete or inaccurate information we hold about you;
- erasure of your data where there is no good reason for us continuing to process it;
- restriction of processing where you contest accuracy or object to processing;
- portability of your data in a structured, commonly used format;
- objection to processing based on legitimate interests;
- objection to automated decision-making and profiling; and
- withdrawal of consent at any time where we rely on it.
If you want to exercise any of the rights described above or have questions on how we use your personal data, please reach out to us via email at iona@trainwithgrip.app.
7. What is your policy regarding children?
Our services are not intended for children under 18 years of age. If you are under this age, you should not use the Services. Our Services use technical measures to prevent children under 18 from creating an account and therefore we do not knowingly collect personal data from any persons under such age. If we become aware that a child has provided us with personal information, we will take steps to delete that information.
If you are a parent that has become aware that your child has provided us with personal information, please contact us.
8. How can I contact you?
If you have questions or concerns about this Privacy Policy and the handling and security of your data, please contact us via email at iona@trainwithgrip.app.